Most bank compromises start with phishing. Acting on the safer assumption costs nothing.
What to do
- Search your inbox and SMS for any message from your 'bank' in the last 14 days
- Hover over (or long-press) every link to see the real domain — anything not on the bank's exact domain is suspect
- Check 'Recent activity' on your email for foreign sign-ins around the same time as the bank issue
- Ask anyone with shared access whether they responded to a 'bank' email or call
Was this guide helpful?
Know someone who needs this? Send them the guide.
JD
Written by
Jordan DicksonFounder, CyberSecurityGuides
Founder of CyberSecurityGuides, writing practical, jargon-free guides that help everyday people recover from and protect against online attacks.
Reviewed by CSG Security Engineers