The phishing saga continues. The group behind the Metrobank Card phishing scheme we featured last time is seemed to be the same people behind BPI Card’s variant of this attack.

This Sunday, a BPI Card version of the phishing mail that front itself as a fraud report started to arrive in our mailboxes. It used the same technique  – templated email format and the urgency in account verification. When clicked, it would lead you to a templated page where all important information about your card will be phished.

It also used the same domain to host the malicious BPI verification page.

Account cardholders of BPI are advised to be extra vigilant on the emails that they’re getting as you might be one of the targeted victims. Always check the legitimacy of the email. – verify the link, the sender of the email and even the content. Call the bank’s hotline if you think your account has been compromised.


Fjordan Allego
Follow me

Related Posts:

By Fjordan Allego

Fjordan Allego aka Fjordz is an IT security practitioner in the Philippines. He maintains a couple of blogs where he shares his views on various topics that he finds interesting. A self-confessed introvert who's mostly active in social media, Fjordz also loves to travel and explore the wonders of the world.

One thought on “BPI Cards’ Fraud Report phishing mail”
  1. You know what my cancel were cannot receive my money in my bpi im reported since june 20 2018 its too long to wait what happen for this eugenia

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.