Anti-Fraud Guide: What’s phishing and how to recognize it?

What are you looking for?

Anti-Fraud Guide: What’s phishing and how to recognize it?

What are you looking for?

Anti-Fraud Guide: What’s phishing and how to recognize it?

What are you looking for?

Table of Contents

What's phishing?
Will bunq ever call me?
Need to report phishing?
How can I avoid being phished?
How can I recognize a phishing attempt?
I’ve lost access to my bunq account, what do I do?
What if I'm a victim of phishing?
What will happen after I report phishing?
How can I keep my bunq account extra secure?
Received an e-mail and not sure if it's phishing?
What's phishing?

Hey bunqers 🌈,

Social engineering scams, like phishing, have become more advanced in recent years. To help you keep yourself and your account safe — always be cautious with your personal data and never share it with third parties.

Read our guide on how to recognize and avoid this type of fraud and keep your account safe below 🔒

What's phishing?

Phishing is a type of fraud where scammers impersonate trusted companies through emails, texts, social media, phone calls, and more. Their goal is to trick you into sharing personal details like passwords, account information, and card numbers to access your funds.

Will bunq ever call me?

We will never call you to ask for personal information, like email, security code, or card details. If you’re receiving a phone call from a person claiming to be a bunq representative, hang up the phone and report this case to us.

We'll only ask you for your private information such as your phone number, email, Security Code, card number, or IBAN through our secure in-app Support chat.

Need to report phishing?

Fill out our phishing form to help us fight fraud!

How can I avoid being phished?

  • Never give away your login credentials or personal information: We'll never ask for your login or personal details outside of the app. If someone pretending to be bunq asks for this information, it’s a scam—don’t share anything.

  • Check the format and spelling in messages: Fraudsters often copy legitimate company formats, but their messages may contain spelling mistakes.

  • Watch out for fake websites: The only bunq website for logging in is https://web.bunq.com/. Always ensure you're on this site when entering sensitive information.

  • Contact us via our official channels: If you receive an email from bunq but it seems off, contact us to verify its authenticity. You can do so via the secure in-app chat or our web report forms. This also helps us spot new scams and fight fraud.

  • Be careful with your posts on social media: Avoid sharing personal info like your date of birth, vacation plans, or phone number online, as scammers may use this against you.

  • Check the URLs of the links you click on: Always verify the URL, especially in hyperlinked text, to ensure it's from a legitimate website. If you're not sure whether a link is secure, go to the official website from a seacrh engine and get to the needed web page yourself.

How can I recognize a phishing attempt?

Phishing can take many forms. Fraudsters may email, text, or even call you, pretending to be bunq, to trick you into sharing personal details that give them access to your account. They often create a sense of urgency by claiming:

  • An unrecognized or suspicious login attempt

  • Your account has been placed under enhanced security

  • Changes were made to your personal details

  • Regulatory, compliance, or annual validation checks are required

They usually instruct you to take immediate action and may provide a link, a button, or a phone number. You may also receive messages asking you to:

  • Pay a “fee”

  • Perform a “security update”

  • Re-identify your account

  • Contact support by phone to resolve an issue

Our official domain is bunq.com. Any link that is different from https://www.bunq.com/ or https://help.bunq.com/ is fraudulent. If you see a URL like bunq.xxx.com, a.id/abcd-bunq, abcd.buzz/bunq, or similar variations — it’s fake, even if the message looks professional or uses bunq branding.

💡 Important: Fraudsters can use online tools to fake our name in the sender field of emails and SMS messages. This means fraudulent messages might appear in the same conversation thread as legitimate ones you’ve received from us.

We will never:

  • Ask you to call us via a phone number sent by email or SMS

  • Ask you to complete security checks, identification, or updates outside the bunq mobile app

  • Ask for your login details, PIN, or verification codes

If you encounter such messages or links, please report them using our phishing report form. If you’ve already interacted with a suspicious message, contact us directly through the app immediately.

I’ve lost access to my bunq account, what do I do?

If you can’t regain access by resetting your Security Code, contact our automated emergency Support line at +31208083666. Through our automated flow, you can block your card and account within 1 minute, keeping your funds safe until you regain access.

If you think your account was hacked, please report it as soon as possible by filling out this form.

What if I'm a victim of phishing?

Realizing you might be a victim of phishing is unsettling, but we're here to help you take action immediately. Your security is our top priority.

First, follow the steps in our Anti-Fraud Guide to secure your account. Once you're safe, please report the fraud to us. This gives our team the information needed to start helping and working on a solution for you right away.

What will happen after I report phishing?

Our dedicated team will be made aware of your report and will take immediate actions to take down the phishing websites, links or accounts.

How can I keep my bunq account extra secure?

There are many ways to keep your account secure, and most of them rely on your vigilance and care with personal information.

Here are a few steps you can take regularly:

Received an e-mail and not sure if it's phishing?

If you’ve received an email and aren’t sure if it’s phishing, check the domains we use to communicate with you:

  • @bunq.com – Our primary domain for transactional emails.

  • @update.bunq.com – Used for bunq Update invites and general announcements.

  • @hello.bunq.com – Used for marketing communications.

  • review@bunq.com – Used when we need extensive information or additional documents from you.

Loading...

We’re here for you

If you can’t find an answer to your question or need someone to speak to, we're always available to offer a helping hand.

We’re here for you

If you can’t find an answer to your question or need someone to speak to, we're always available to offer a helping hand.

We’re here for you

If you can’t find an answer to your question or need someone to speak to, we're always available to offer a helping hand.