
Several banking institutions are warning customers to be extremely vigilant due to a growing organized cyber racket targeting Sri Lanka's leading banking system. It has already been revealed that these fraudulent activities are targeting over twelve major banks in the country, and the banking system has launched a special operation to educate customers about it.
These cybercriminals have created fake websites that are extremely similar to the official websites of the respective banks, and they send urgent messages to customers via email or SMS. Hackers subtly obtain customer information by luring them to fake links, claiming their account has been suspended or asking them to change their password immediately. These details are then immediately entered into the bank's real website. It has been identified that the fraudsters, who obtain the real OTP number received on the customer's phone via the fake site, instantly access the account and steal money.
Hatton National Bank is informing its customers that they should be extremely vigilant about fraudulent websites impersonating the bank's official corporate website. Therefore, banking services should only be accessed by directly entering www.hnb.lk into the web browser or through the official HNB mobile applications, and they also request that the bank be informed immediately if any suspicious activity is observed.
Meanwhile, Standard Chartered Sri Lanka has also informed its clients via an SMS that they should be vigilant about fraudulent websites impersonating sc.com/lk. The bank emphasizes not to click on any suspicious links or share personal banking information with anyone, and advises to always use only the official website or the SC mobile application to access services.
Pan Asia Bank also informs its customers that they should always check the address of the website they are visiting before entering their usernames and passwords. Specifically, online banking services should only be accessed via the address https://online.pabcbank.com, and they further emphasize not to share received OTP numbers with anyone at any time, and not to install suspicious or unknown software on mobile phones.
DFCC Bank points out that fraudulent websites might use misspelled or slightly altered web addresses. Therefore, the bank believes that by double-checking the relevant web address before entering any information, one can be protected from these financial frauds.
Sampath Bank has also issued a special announcement to its 'Sampath Vishwa' users, stating that fraudsters are attempting to contact customers through fake websites using links for various promotional offers, discounts, or cash giveaways, and bank logos. Under no circumstances should customers access links received via social media messages and enter their login details, and the bank states that it is safe to conduct transactions only through the digital banking login on www.sampath.lk or the official Sampath Bank mobile application.