According to Notícias ao Minuto, the scheme begins simply: the customer is contacted by someone posing as a bank employee, often with the bank's real number displayed on their cell phone screen.

The conversation seems convincing, there is a tone of urgency, a warning about a "blocked account" or "suspicious activity," and the objective is always the same: to obtain personal data, home banking access credentials, or codes sent via SMS.

According to the BdP, this type of fraud, known as phishing, smishing, or vishing, depending on the method used, has become more elaborate and difficult to detect. Criminals resort to spoofing, a technique that allows them to mask phone numbers and email addresses, making them appear authentic.

The institution explains that the scheme is based on "plausible scenarios," such as updating personal data or unlocking an account.

There are also cases where scammers know the victim's real information, obtained through social media or data leaks, which increases trust and reduces suspicion.

The BdP warns that fraudulent messages use short, threatening phrases written in a rushed tone to force an immediate reaction.

"Contacts with fraudulent intent are usually made urgently, so you quickly divulge personal information without giving yourself time to think," the organization warns.

When the victim gives in, they unwittingly provide their account access codes, and the attack is completed within minutes.

How to protect yourself

The BdP recommends never disclosing personal information, passwords, or authentication codes by phone, SMS, or email, even if the contact appears legitimate. It's also essential to check the sender's address, language, and message formatting: spelling and visual errors are warning signs.

Another essential rule, according to Notícias ao Minuto, is not to click on links or open attachments sent in suspicious messages. If you have any doubts, you should contact the bank through official channels and immediately report any attempted fraud.

If you detect unauthorised transactions, the BdP advises you to contact the bank and file a complaint with the PSP, GNR, or PJ Judicial Police.