Most banking fraud does not start with a hacker breaking into a bank. It starts with a text message, a phone call or a fake website that tricks you into handing over the keys yourself. Phishing and SIM swap fraud are two of the most common attacks, and both can empty an account in minutes. The good news is that a handful of habits stops the large majority of attempts.
How Phishing Works
Phishing is a scam where criminals pretend to be your bank, a delivery company or a government agency to steal your login details, one-time passwords or card information. Messages create urgency: your account is locked, a payment failed, a refund is waiting.
Common forms include:
- Email phishing: fake bank emails with links to copied websites.
- SMS phishing, or smishing: texts with a short link and a threat.
- Voice phishing, or vishing: a caller claiming to be the bank's fraud team.
- Fake apps and ads: counterfeit banking apps or search ads that lead to cloned login pages.
How SIM Swap Fraud Works
In a SIM swap, a criminal persuades your mobile provider, or bribes an insider, to move your phone number to a SIM card they control. Once they have your number, they receive your calls and text messages, including one-time passwords. They then reset your banking and email passwords and take over your accounts.
Signs of a SIM swap include sudden loss of mobile signal, "emergency calls only" on your phone, and unexpected messages that a SIM change was requested.
Practical Steps to Stop Phishing
- Never click links in unexpected messages. Open your bank's app or type the address yourself.
- Treat urgency as a red flag. Real banks do not rush you into revealing information.
- Never share your PIN, password, card number or OTP. No legitimate staff member needs them.
- Check the web address carefully. Look for misspellings and extra words, and bookmark your bank's real site.
- Hang up and call back. If someone phones claiming to be your bank, end the call and dial the number printed on your card.
- Download apps only from official stores, and confirm the publisher name.
- Keep your phone and apps updated.
Practical Steps to Stop SIM Swap Fraud
- Use an authenticator app or hardware key instead of SMS codes wherever your bank and email allow it.
- Set a PIN or password with your mobile provider that must be given before any SIM change.
- Ask your provider about port-out or SIM-change locks.
- Keep your phone number private. Do not publish it on social media or public profiles.
- Secure your email first. If criminals control your email, they can reset almost everything else. Use a strong, unique password and an authenticator app.
- Register for transaction alerts in your banking app and by email as well as SMS.
- Limit account recovery options. Remove old phone numbers and email addresses.
Build Strong Password Habits
Use a password manager to create long, unique passwords for every account. Reusing passwords means one leak exposes your whole financial life. Turn on multi-factor authentication everywhere, preferring app-based or hardware methods over text messages.
What to Do If You Think You Were Hit
Act quickly, because minutes matter.
- Call your bank immediately from a trusted number and ask them to freeze your accounts and cards.
- Contact your mobile provider to restore your SIM if you suspect a swap.
- Change passwords on your email first, then banking, then other accounts, using a clean device.
- Report the fraud to your bank, your local police or fraud agency and your country's financial regulator.
- Watch your credit and accounts for weeks afterward, and save screenshots and messages as evidence.
Special Care for Business Owners
If you run a business, add controls. Use separate approval for large transfers, limit who can initiate payments and train staff to recognize invoice scams and fake supplier requests. Many business losses come from a convincing email asking someone to change a payment account.
Action Checklist
- Turn on app-based multi-factor authentication for your bank and email.
- Set a PIN with your mobile provider for SIM changes.
- Install a password manager and replace reused passwords.
- Turn on transaction alerts by app, email and SMS.
- Bookmark your bank's official website and app.
- Save your bank's fraud hotline in your phone.
- Never share OTPs, PINs or passwords with anyone.
- Review account access and recovery options every six months.
This guide is general information and not financial, tax or legal advice. Fees, rates, limits and rules change often, so confirm current terms with each provider and a qualified professional before you decide. Information checked October 2026.
