Fake Bank Statement PDF Scam by SMS

How it looks by SMS, the red flags and what to do.

On SMS the scammer has only a few lines to work with, so they use a deadline, a threat or a prize and a link that must be tapped "now". Fake Bank Statement PDF Scam is one of the ways this shows up: An email or message sends a bank statement or credit card bill as a file or link. Opening it installs malware or opens a fake login page.

What fake bank statement pdf scam looks like by SMS

• A shortened or oddly spelled link that does not match the real website.
• A request to call a number, install an app or share an OTP.
• Several near-identical messages arriving together from different senders.

The scammer sends the message to large lists of addresses, using the name and logo of a bank or card issuer. The subject line is plain and timely, and the message body is short, asking you to 'find attached your statement'. Some use a sender name that looks right in the inbox but whose address is odd when you open the details.

Red flags to check on the text message

• A statement arrives that you did not request.
• The sender address does not match your bank's website.
• You must log in or enable content to open the file.
• The file is an installation file or archive.
• It promises a refund, prize or cashback you never asked for.
• It tells you to install an app from a link instead of the official store.

What to do

1. Do not open the attachment or tap the link.
2. Log in to your bank's official app to see your real statement.
3. Check the sender's address in the message details.
4. Delete the message and tell family members who may get the same text.
5. Do not reply, do not tap the link and do not call the number in the message.
6. Open the official app or type the official website yourself to see if there is any real notice.

You can report suspicious SMS and calls on the Sanchar Saathi portal (Chakshu facility) of the Department of Telecommunications.

If money or a code is already gone

1. If you typed a password, change it at once from a safe device and call your bank on the number on your card.
2. Call 1930 if money moved and give the transaction details.
3. Uninstall any app or file that you installed from the message.
4. Report at https://cybercrime.gov.in with the email and its headers.

National Cyber Crime Helpline: 1930; report at cybercrime.gov.in.

Safeavio's link check can review a download or login link before you open it for lookalike domains, shortened links and risky patterns, and the scam check can read the email text you paste. The phone scan can point out apps outside a store and apps that look like copies. It cannot scan email attachments, so do not open unexpected files.

Full guide: Fake Bank Statement PDF Scam: how it works, signs and what to do. Other channels: email, WhatsApp.

Questions