Inspect sender domains, preview full URLs, and expand masked email headers on mobile. Compare message wording with prior legitimate bank communications. When in doubt, open the bank app directly rather than following links. Save suspicious content as evidence, then report it through official channels for takedown.
Caller ID can be spoofed. If someone pressures you to move money or share codes, end the call politely. Dial the number on the back of your card or in the app. Real agents respect callbacks and documented, verified case numbers.
Treat unexpected barcodes and files as untrusted. Malicious QR codes can redirect to credential traps, and attachments may drop malware. Use your bank’s app scanner when provided, verify context with the sender, and never install updates prompted by random popups or unfamiliar websites.
All Rights Reserved.