The ACPR recently warned the public about a phenomenon of mass duplication of fraudulent online banking sites. Their content is almost entirely identical to that of existing banks. The aim: to obtain personal data from victims.
60 fraudulent sites added to blacklist of players identified as dubious
At the end of September 2019, France's financial watchdog noted a proliferation of fake sites reproducing all or part of the content of genuine online banking sites. The crooks behind these sites use a classic phishing technique to trick users. Typically, Internet users are lured into providing information or downloading a document by content that is virtually identical to that of a reputable bank. The scammers then use this data to take possession of the account and modify the codes. In this situation, customers should immediately contact their bank to block their account and prevent any further fraudulent transactions.
In addition to these phishing techniques, theACPR warns the public to beware of attempts to extort money from such sites. In this case, victims are promised investments with very high returns. Victims pay in increasing sums, which they are never able to recover.
The Autorité de contrôle prudentiel et de résolution explains that it has added 60 illicit sites to its blacklist of actors or entities identified as dubious. This list now includes more than 200 websites.
How to spot a fraudulent online banking site?
There are a number of clues that can help you differentiate between genuine and illicit online banking sites. The first thing to do is to consult the blacklist of malicious sites regularly updated by the ACPR. You should also check that the organization in question is registered as a financial agent, and that it is registered with ORIAS, the body responsible for the unique register of insurance, banking and financial intermediaries.
The financial watchdog points out that there is no such thing as a high return without risk, and advises consumers not to pay any money to obtain credit or release funds.
What recourse do phishing victims have?
Victims of a phishing attack can report the incident to the ACPR or the French Ministry of the Interior. This can also be reported on other dedicated sites to inform the public authorities.
Trapped users should contact their bank immediately, so that it can block their account and monitor suspicious movements.
While bogus online banking sites are on the ACPR's radar, other fraud techniques call for vigilance, such as bank card fraud, impersonation of bank advisors and requests for RIBs from bogus organizations.