@Tim#152458 So if you click on one of these links, you automatically pay money to these Scammers? How does that work?

@TimothyA#152477 Google Chrome tells me that the certificate does not match its own URL... And that the website wasn't secure.

@Harmen-Maroon-Butterfly#152475 Heel vervelend om te horen dat er toch enkele mensen bestolen zijn.

Helaas zal dit net zo lang doorgaan zolang er mensen in blijven trappen.

Er is al zo ongelofelijk veel reclame gemaakt dat je op moet letten: klik weg, hang op, bel je bank etc.

Zolang de scammers echter resultaat blijven krijgen zal dit niet stoppen.

Klik dus niet zomaar op linkjes en zeker niet je inlogcodes verstrekken! Altijd de URL checken, etc.

Gaat het niet via je bank app, dan gewoon niet verder gaan!

@Jeffrey-Cyan-Hummingbird#152470 @Harmen-Maroon-Butterfly#152475 let me repeat that there is no known breach, if there were then bunq would indeed be required to notice all of us. But there is NO breach. What happens with these criminals is that they just send out SMSes ("on behalf of bunq") to a shitload of mobile numbers. I honestly get a lot of SMSes from ING, ABN, Rabobank, etc. while I am most definitely not a customer at all of those. They just send out massive amounts of messages to as many people as possible, hoping that some actually end up with actual customers that fall for it. Now, with bunq you can use your mobile phone number as an "alias" for your account such that you do not have to remember an IBAN. This could theoretically be used to see if a number belongs to a bunq customer, but for this you'd need an account at bunq yourself. This is reported to bunq, and being investigated, but no major misuse is known as far as I know.

@Harmen-Maroon-Butterfly#152475 Ik hoop dat ik mijn geld terug krijg ,moet toch voor een bank gemakkelijk zijn om het geld terug te krijgen ,alles is bekend .

No, it's not easy for a bank to get the money back. As soon as the money is send to another bank, to the scammer, they typically remove the money from the account. (ATM withdrawal or so). Typically this means the money disappeared from the system. If bunq then tries to claim the money at the other bank then the other bank no longer has the money. Furthermore, these transfers (iDEAL / IBAN transfer) are irreversible by design. What you should do is file a report at the police. They can investigate the matter and try to retrieve the money. It's not always successful, but that's basically the only way to have a chance at getting your money back.

@TimothyA#152477 So if you click on one of these links, you automatically pay money to these Scammers? How does that work?

No, that's not how this scam works. What happens when you click the URL is that you end up at a fake-website, that uses bunq's design. There you are asked to first enter your login details (mobile no. / email + six digit code) (should be the first warning as you're not in the bunq app! 🚨) and then afterwards you're asked to enter your passphrase (second warning, again you're not in the bunq app! 🚨). Then the criminals have all the details to be able to login into your account and empty it. Hence, never share any of your details on any website, always check whether you are actually on the website of your bank (check certificate/domain) and NEVER click links in SMSes/emails that instruct you to perform actions on the banking environment.. 🙂

@Sander#152489 I find it strange, to say the least, I get a bunq phishing sms on the number used with bunq, but not with my other number. Bunq should investigate for a compromise and report back. This seems too targetted to be ‘random’

@uSuRa#152506 theoretically (if the criminals have an account at bunq) then they can check whether a phone number belongs to a bunq customer. E.g.: they can add a bunch of (randomly generated) phone numbers to their contacts, and check which ones are an alias to an bunq IBAN. You can prevent this by removing your mobile number/email as alias for your bank accounts. The downside being that you can no longer use these to receive money. This requires quite detailed knowledge to implement and can definitely not be used by the average scammer, I honestly have never heard of any case where this was used at bunq.

Anyway, it's really not a strange thing. They just generate a massive list of numbers (apparently including one from you) and send messages to everyone, hoping that some customers fall for it (many of these messages don't even go to bunq customers, but to ABN customers, or Rabobank etc.).

The fact that the message shows up in the thread with other bunq messages is very unfortunate, but not something bunq can control. Even my 10-year-old sister can set up a SMS service that "fakes" sending messages on behalf on bunq. You can just configure your service like that. SMS is insecure, you should always ensure that the message really comes from the sender, and never click links.

Then about your claim that bunq should investigate for a compromise: bunq is already doing that. They monitor all traffic 24/365, any suspicious activity is checked and if necessary acted upon within seconds to minutes.

@Alexander-Cyan-Badger#152261 Vandaag weer een nieuw Spam/Phishing bericht ontvangen!! Op blijven letten dus!!

@Alexander-Cyan-Badger#152526

Bij de site van lycamobile.nl is de betaal optie geen BUNQ optie voorheen wel altijd... wordt BUNQ nu van meerdere betaal lijsten weggehaald?

Zojuist een SMS ontvangen, blijven opletten met deze Phishing berichten want het is heel verleidelijk als BUNQ-klant zijnde...

Your bunq bank account was logged in on (2/10/2021 13:37) from an unusual location. IP address: (53.241.985). This has been marked as unusual for us, you need to update your bunq account to avoid blockage via: https://nnbnq18.info