Warning: SMS phishing scam using fake reward points expiry notifications with fraudulent links

Recently, Vietcombank has received numerous reports of fraudulent SMS messages sent from unknown phone numbers or numbers impersonating the Vietcombank brand name.

These messages claim that the recipient's reward points are about to expire and encourage customers to click on a link and provide personal information. The scam typically works as follows:

- Fraudsters send SMS messages claiming that the customer's reward points are about to expire, along with a link to a fake Vietcombank website (e.g., https://diem-vietcom-priority.com/web/index.php, ...).

- When customers click on the link, they are redirected to a counterfeit Vietcombank website and asked to provide sensitive information, including their phone number, cardholder name, card number, card expiry date, and CVV, under the pretext of "verifying their identity to redeem reward points."

Many customers have suffered financial losses without realizing how the fraud was carried out. After obtaining the card information, scammers add the victim's card to their own digital wallet (such as Samsung Pay, Apple Pay, or Google Pay). This scam is particularly dangerous because fraudsters may be able to make transactions up to the card's full credit limit after obtaining just a single OTP (one-time password).

Vietcombank and the relevant authorities have repeatedly warned customers about this type of brand impersonation scam. Vietcombank will NEVER send reward points redemption or reward points expiry notifications via email, website, SMS, or chat applications (such as Zalo, Messenger, or Viber) that contain links requesting customer action.

To help protect your assets, Vietcombank strongly recommends that customers:

  1. NEVER click on suspicious links sent via email, SMS, or social media from unknown or unverified sources.
  2. NEVER disclose sensitive information, including card details or OTPs, to anyone. Vietcombank does not ask customers to provide confidential banking or card information through websites, phone calls, emails, or chat applications (such as Zalo, Messenger, or Viber).
  3. Carefully read OTP notification messages to identify any unusual activity. Every OTP message includes information about the purpose of the card transaction and/or the name of the merchant or service provider requesting the transaction.
  4. If you have accidentally entered your card information on a fraudulent website, immediately block your card by calling the Vietcombank hotline at 1900 545413 or by accessing the VCB Digibank app and following the card-blocking instructions.
  5. Always verify that you are communicating with Vietcombank only through its official channels before sharing any information or acting on any requests.

Customers are also encouraged to regularly visit the Risk Alerts section on Vietcombank's official website to stay informed about the latest fraud schemes and help ensure the security of their online banking transactions.

VCB News

Reject
We use cookies for you to have a better experience on this website.
Accept