Hey bunqers 🌈,
On February 12, 2026, Odido announced a data breach affecting 6 million of their users, which may have included bank account numbers and other personal information.
Your bunq account is safe — we've got your back. The bunq app is equipped with a suite of advanced security features, designed to offer you robust protection in situations like these.
How can I keep my account secure?
To help you stay as safe as possible, let’s break down what you should look out for.
Fraudsters pretending to be bunq
Fraudsters may try to impersonate Odido or bunq via phone, SMS, or email, using leaked information to appear credible. This is known as phishing — you can learn more about this and how to steer clear from phishing attempts here.
We’ll never call you to ask for personal information, make payments, or instruct you to install software. If we need to contact you, it will always be through the secure bunq app. Stay vigilant and report any suspicious contact attempts here.
Unexpected direct debit requests
All our direct debit payments are fully protected: you approve every payment before it's debited, so nothing leaves your account without your consent. This means that if you notice any unexpected direct debut requests, you can reject them immediately via the bunq App.
For extra peace of mind, you can create a new bank account in seconds for specific payments or subscriptions. Here’s how you can do this:
Open the 🏠 Home tab
Tap on Add an Extra Bank Account
Select your Payment Account type
Personalize your Bank Account
Tap on Create and all done!
What should I do if I suspect suspicious activity?
If you suspect that you’re a victim of fraud, acting quickly is of the essence. The first thing that we need to do is secure your account to limit the potential damage. You can do this by resetting your security code:
Tap on your Profile in the top left corner
Tap on ⚙️ Settings
Tap on Security
Select Change Security Code
Enter your current Security Code
Set a new Security Code and confirm it.
Resetting your Security Code will end all currently active sessions and remove all linked devices. If a new device logs in, identity verification will be required.
Once you secure your account, it’s time to submit your fraud report. Fill out our Fraud Report and our team will pick up your case as soon as possible. You can learn more about securing your account here.