We have been made aware of ongoing phishing scams that are pretending to be bunq, informing you on https://controlbq.art that your account has been temporarily disabled due to multiple failed login attempts. We want to address this and give you some further information on the phishing reports we have received to make you aware and avoid falling victim to the scam.
What is phishing? 🎣
Phishing is a form of fraud where the scammer will send communications (emails, texts, messages over social media) pretending to be from reputable companies or institutions to trick you into sending money or sharing your personal details (such as passwords, account details and card numbers).
For more information on phishing and how to prevent being phished have a look at this topic.
Phishing reports concerning bunq
We have received reports about a website pretending to be bunq. Make sure you do not enter any of your personal data via links received via SMS. This website uses the following phishing text messages to steal your login credentials:
Latest phishing attempt reported:
- Er is ingelogd op uw bunq. Uw account is tijdelijk uitgeschakeld vanwege meerdere mislukte inlogpogingen
Make sure that you do not click on any links from that website and do not share any personal information. You can always verify the security of your bunq account in the bunq app.
What will happen next
We are aware and have reported the scam to our internal team. They are currently taking the required actions to keep everyone safe. 👍
Keeping your bunq account secured
To verify that your bunq account is secured, you can follow these steps:
- go to Security to change your login code.
- go to Security and tap on "Devices". From there, delete any device that you do not recognise.
- go to Profile and tap on your name. From there, delete any phone number or email address that you do not recognise.
Was there a security breach at bunq?
No, your data is safe at bunq. Privacy and security are our top priorities. This means we will never share your personal data to third parties without your permission. You can learn more here.
Scammers performing phishing scams will send the same SMS to huge amounts of random phone numbers. It happens that some of those receiving the SMS will also have an account at bunq.
The phishing SMS appears as sent from bunq, since anyone can send an SMS which will show "bunq" (or any other company) as the sender, with some tools available on the internet. This is known as spoofing.
For this reason, we advise to always open the bunq app yourself, and to not open links you receive via SMS or email.
Do you need to report something? 🌈
You can report phishing websites here. If it's a fraudulent user, you can help keep bunq safe. Simply send an email to firstname.lastname@example.org and we’ll take it from there. If reporting a possible fraudster, please include their account number and any information you have related to the case.