"Your card is blocked": the fake bank message
A typical message
Bank of Cyprus: Your card has been suspended due to unusual activity. To avoid permanent closure, verify your details: [link]
How it works
The message copies your bank's name and tone: Bank of Cyprus, Eurobank (Hellenic Bank), Alpha Bank, Revolut or JCC. It often lands in the same SMS thread as your bank's real messages, because the sender name can be faked.
The link opens a perfect copy of your bank's login page. Whatever you type there, your username, password, card number and one-time codes, goes straight to the scammers, who log in as you.
Sometimes a "bank employee" calls a few minutes later, from what looks like the bank's real number, to "help" and ask for the code you just received.
How to spot it
- A threat: blocked, suspended, closed, "unusual activity".
- A link to log in. Banks in Cyprus don't send links asking you to log in or "verify" by SMS.
- Any request for a PIN, password or one-time code. Your bank never asks for these, by message or by phone.
- The address isn't your bank's own (bankofcyprus.com, eurobank.cy, alphabank.com.cy, revolut.com).
What to do
- Don't use the link or call any number in the message. Open your bank's app yourself, or call the number on the back of your card.
- If someone calls "from the bank", hang up and call the bank back yourself.
- Gave any details? Call your bank immediately to block the card and your online banking, then report it to the police on 1460.
More scams going around in Cyprus
- "Your parcel is held": the parcel fee scam
- "I've paid, click to receive your money": the fake buyer scam
- "Hi Mum, this is my new number"
- "I sent you a code by mistake, can you send it back?"
- Fake fines, tax refunds and government payments
- Easy money from your phone: the fake job scam
- The landlord who's abroad: the fake rental scam