A new threat has set off alarms among Citibank customers. What seemed to be an official communication from the bank turned out to be a dangerous trap. Many users have let their guard down and now they could be putting their savings at risk without knowing it.
What's happening has caught the attention of cybersecurity experts at an international level. The recommendations are clear: action must be taken now, before it's too late.
A recent investigation has revealed a phishing campaign that uses Citibank's image and name. All to deceive users. This scam is not only sophisticated, but it's also very well distributed globally.
Cybercriminals are sending thousands of fake emails pretending to be the bank. They do this with the goal of stealing personal information, financial data, and passwords for bank account access.
Citibank sends a message to users
The fraudulent campaign was discovered by a cybersecurity company. It warned that the messages were being sent from IP addresses located in countries such as the United States, Mexico, India, Norway, and the Netherlands. Potential victims are not only in the U.S., where 81% of these messages are concentrated.
They're also in places like the United Kingdom, Ireland, South Korea, Germany, and other countries where Citibank has a presence. One of the most common hooks in these emails is a supposed UN initiative that promises large sums of money. Between five and ten million dollars, if the user verifies their account.
Another method used by scammers is to alarm the recipient with messages that warn about supposed suspicious access. Also unauthorized payments or temporary account suspension due to incomplete data.
The most common subject lines include phrases like "Account Confirmation Required" or "Security Alert." These emails redirect users to websites that are almost exact replicas of Citibank's official portal, where login is requested. By entering their credentials, users fall directly into the hands of scammers.
Shocking: very similar to Citibank's image
Some messages use Citibank's logo and colors, but cybercriminals are not always accurate. Often the emails contain spelling errors and suspicious sender addresses. Despite this, many people keep falling for it, especially when the message creates urgency or promises million-dollar rewards.
The company that detected this campaign advises taking extreme precautions. Police in several countries have also reiterated the importance of being suspicious of any email that promises easy money or asks to verify data through suspicious links.
If you receive a similar message, don't click on the links and contact Citibank directly through their official channels.