This is a general education guide, not a recent incident report. It has no invented publication date.
01How it commonly works
Emails, texts or calls imitate a bank, delivery company, tax authority or employer and direct you to a fake login page or ask for a code. The information is then used to access your accounts.
02Warning signs
- Urgent warnings about account suspension or missed deliveries
- Links to addresses that differ slightly from the real one
- Requests for one-time passcodes
- Unexpected attachments
03Immediate protective actions
- 1Change the affected password and enable two-factor authentication
- 2Call your bank using the number on your card
- 3Check accounts for unrecognised activity
- 4Forward phishing messages to your country's reporting address
Prevention tips
- Open the service through a saved official app or independently typed address, not a message link.
- Check the full sender and destination address; do not submit passwords or one-time codes.
- Use multi-factor authentication and keep devices and applications updated.
04Evidence to preserve
- The original message, including sender details
- The link address, without clicking it again
- Screenshots of any page you entered details on
- Times and details of any calls
05Relevant reporting agencies
Report to your national fraud or cybercrime agency and to the organisation that was impersonated.
Use the maintained reporting directory below. No separate source-verification date is claimed for this general guide.
Official channels for
6
When to seek qualified legal advice
Seek advice if your bank refuses to reimburse an unauthorised transaction and you believe consumer protection rules apply.