Fake Bank Statement PDF Scam by email

How it looks by email, the red flags and what to do.

An email gives the scammer room to look official: a signature, a fake invoice, an attachment and a button that goes to a lookalike login page. Fake Bank Statement PDF Scam is one of the ways this shows up: An email or message sends a bank statement or credit card bill as a file or link. Opening it installs malware or opens a fake login page.

What fake bank statement pdf scam looks like by email

• A login page that opens from the email and asks for your password and OTP.
• A sender address that is almost, but not exactly, the real domain.
• A button that says "Verify account" or "View invoice".

The scammer sends the message to large lists of addresses, using the name and logo of a bank or card issuer. The subject line is plain and timely, and the message body is short, asking you to 'find attached your statement'. Some use a sender name that looks right in the inbox but whose address is odd when you open the details.

Red flags to check on the email

• A statement arrives that you did not request.
• The sender address does not match your bank's website.
• You must log in or enable content to open the file.
• The file is an installation file or archive.
• The tone is urgent and the grammar is slightly off.
• Hover over the link: the address does not match the company website.

What to do

1. Do not open the attachment or tap the link.
2. Log in to your bank's official app to see your real statement.
3. Check the sender's address in the message details.
4. Do not open the attachment and do not press the button.
5. Go to the company website by typing it yourself and check your account there.
6. Check the full sender address, not just the display name.

Use Report phishing in your email app. If money or accounts are affected, call 1930 and report at cybercrime.gov.in.

If money or a code is already gone

1. If you typed a password, change it at once from a safe device and call your bank on the number on your card.
2. Call 1930 if money moved and give the transaction details.
3. Uninstall any app or file that you installed from the message.
4. Report at https://cybercrime.gov.in with the email and its headers.

National Cyber Crime Helpline: 1930; report at cybercrime.gov.in.

Safeavio's link check can review a download or login link before you open it for lookalike domains, shortened links and risky patterns, and the scam check can read the email text you paste. The phone scan can point out apps outside a store and apps that look like copies. It cannot scan email attachments, so do not open unexpected files.

Full guide: Fake Bank Statement PDF Scam: how it works, signs and what to do. Other channels: WhatsApp, SMS.

Questions