Exim Bank Romania impersonation phishing alert issued

The National Cyber Security Directorate (DNSC) has issued an alert regarding a phishing campaign impersonating Exim Bank Romania. Fraudulent emails are being sent to individuals, claiming they must “update their account” within two minutes to avoid card suspension.

Experts have identified several red flags in these messages, including unusual sender addresses that do not match the bank's official domain, high-pressure tactics, and threats of account suspension. The emails attempt to trick recipients into clicking a link to provide sensitive personal information, such as identity documents, addresses, occupations, or phone numbers.

Authorities advise citizens not to click on any links in unexpected emails. Instead, users should verify their account status directly through the bank’s official mobile application or by manually typing the bank's website into a browser. Suspicious emails can be reported to the DNSC via their official platform or by calling 1911.