Phishing Scam Targeting Bank Customers

The Bank of Zambia has received reports of a sophisticated phishing campaign targeting customers of various commercial banks in Zambia.

Fraudsters are sending emails and SMS messages that appear to be from legitimate banks, requesting customers to 'verify' their account details, update their passwords, or confirm transactions.

These messages often contain links to fake websites that closely resemble official bank websites. When customers enter their login credentials or personal information, the fraudsters capture this data and use it to steal funds from their accounts.

Key characteristics of these phishing attempts include:

- Emails with urgent subject lines such as 'Account Suspended' or 'Immediate Action Required' - Messages claiming your account has been compromised - Links to websites with slightly misspelled bank names - Requests for PINs, passwords, or OTPs via email or SMS - Threats of account closure if action is not taken immediately

Banks will NEVER request sensitive information such as passwords, PINs, or OTPs via email, SMS, or phone calls. Any such request should be treated as suspicious.