This clever banking scam keeps phishing by faking its own demise – how it works
ZDNET’s key takeaways
- Fake banking websites are faking their own suspensions to fly under the radar
- While scanners see a takedown notice, victims don’t.
- Hundreds of fake domains are still active.
KELA researchers have exposed an active financial-scam infrastructure that hosts hundreds of fraudulent websites capable of faking their own suspensions to stay online. As of Oct. 25, 2026, 248 financial scam and phishing domains tied to 189 major US banks and financial services have been linked to the same infrastructure.
According to the cybersecurity firm’s report, published on Tuesday, the “Suspended” infrastructure operation runs websites that have cloned the official domains of victim organizations, with a particular focus on business banking. Many domains use the [keyword]-[bank].com format, slotting in keywords such as “secure,” “disable,” “protect,” and “cancel.”
Also: Beware of Bluetooth sniffers: How your favorite gadgets could be exposing your data
More from ZDNET
Why is this financial...
Copyright of this story solely belongs to www.zdnet.com. To see the full text click HERE
