A phishing email campaign is circulating in the name of Exim Banca Românească: the message asks recipients to confirm their account under the threat of card suspension, and the DNSC has issued an alert.
The email bears the bank's name and branding and reports a supposed "account issue" that needs to be resolved urgently. The user is urged, with a very short deadline, to click on a link that leads to a page controlled by the attackers, where they are asked to provide their card details or login credentials for the banking app. However, the sender’s actual email address has no connection to the bank’s official domain—this is the telltale sign of the scam.
For a small business, the danger is very real. The person in charge of payments, invoices, and banking matters receives such messages directly at their work email address. An email “from the bank” seems legitimate, especially when it sounds alarming, and under time pressure, a single click and a password entered on the fake page can grant access to the company’s account.
The pattern repeats itself in every campaign of this kind, regardless of which bank is being impersonated: a copied identity, a fabricated sense of urgency, and a link to a third-party website. That is why the defense strategy does not depend on the bank mentioned in the alert, but applies to any message of this kind.
What you need to do:
- No bank will ever ask you to “confirm your account” via a link in an email under time pressure. Treat any such message as a scam.
- Check for yourself: open the bank’s app or type the address manually into your browser—don’t use the link in the email. If you have any doubts, call the number on the back of your card.
- Train the people in your company who handle money: a sender’s address that doesn’t belong to the bank and a tight deadline are telltale signs of fraud.
- Never enter card information or passwords in response to an unexpected email.
- Report the message to the DNSC (1911 or the form at pnrisc.dnsc.ro) and delete it.
If you have already entered your card information on such a page, call your bank immediately to block the card and change your bank account password from another device.
Sources:
This article was generated with AI assistance.