“Your digital key is expiring”: the fake email from your bank

An email or text message says your banking app or your digital identity (such as itsme or BankID) is expiring and that you must “renew” it. This is how they steal your access.

1How they do it

1. You get a message with the logo of your bank or your login app: your account will be blocked unless you confirm today.
2. The link opens a perfect copy of the login page.
3. You type in your details or scan a QR code. That way the scammer links their own phone to your account.
4. From then on they make payments in your name.

2A real example

“Dear customer, your digital signature expires on 18/10. Renew it now to avoid blocking: mijnbank-verificatie.com”

3How to spot it

• A threat of blocking and a short deadline.
• A link to an address that is not quite right.
• A request to scan a QR code or add a new device.

4How to protect yourself

• Open your banking app yourself. If something really needs doing, it will be there.
• Never scan a QR code from an email to “confirm”.
• Never add a device because someone else asks you to.

Suspicious number, email or website? Check it or report it.

Examples have been made unrecognisable. Names and numbers in the examples are made up.

→ Help by country