mBank issued an important announcement. Applies to all customers

mBank warns its customers against a new smishing campaign aimed at extorting their data and, consequently, stealing money. Be careful what you click on.

Smishing This is a method popular among criminals phishing and stealing money. It consists in sending fake SMS messagesin which criminals they impersonate for well-known institutions or companies, including banks.

Such messages also contain a link that you need to click to “solve” some problem invented by the scammers. It leads, of course, to specially crafted website, which may, for example, resemble our bank’s website. However, everything we enter there, for example access data to a bank account, will end up in the hands of criminals who, in the worst case scenario, may clear your account of savingsand even us additional debt.

mBank has just announced a new smishing campaign targeting its customers. Fraudsters send SMS messages with a link to a fake bank website. The content of the message suggests that clicking the link is necessary to continue using your bank account, with the aim of “only” verifying identity. However, the website in question is only used to extort mBank customers’ data.

mBank fake SMS

Don’t get robbed!

Many people still fall for this type of messages, fearing that if they do nothing, the “threat” expressed in the message will be fulfilled. If we have doubts, it is always worth it in such a situation keep your cool and above all contact your bankfor example by calling its hotline or going to one of its branches.

mBank warns:

Do not log in to the bank or quick payment websites from links sent in e-mails, text messages, instant messengers or social networking sites (even if the website looks confusingly similar to the mBank website).

Always enter the banking website address manually directly into your web browser.

Do not provide your payment card details on such websites.

Do not provide your personal data on such websites (name, surname, PESEL number, ID card details, etc.).

Do not provide data on such websites that is used to connect the mobile application to your account: e.g. the code provided by the narrator in a voice message. The code from the lecturer should be provided only in the downloaded official mBank application and only when you connect the mobile application with your account.

Be careful what you authorize. Read the SMS message carefully and make sure you are not confirming a new payment type or login to your account. Remember, never enter any codes on pages you have been linked to.