You receive an SMS from "Vietcombank" appearing right in the genuine message thread, warning your account has been locked and asking you to click a link to unlock it. That's a fake SMS using Fake BTS (fake cell tower) technology.
What is Fake BTS?
Fake BTS (Base Transceiver Station) is a rogue cell tower device. Criminals drive vehicles containing these devices through residential areas, forcing nearby phones to connect to the fake tower instead of the real carrier tower.
Once connected, the device can send SMS spoofing any bank name (VCB, TCB, MB...) and the message appears right in the genuine SMS thread from that bank.
How to Spot Fake Bank SMS
- Contains a link: Genuine Brandname bank messages NEVER contain links requesting login.
- Creates urgency: "Account locked", "Suspicious transaction", "Security upgrade".
- Wrong domain: Link leads to
vietcombank-verify.cominstead ofvietcombank.com.vn. - Asks for OTP: Fake website asks for username, password AND OTP on the same page.
What to Do When Receiving Suspicious SMS
- NEVER click on links in SMS messages.
- Open the official banking app (downloaded from App Store/Google Play) to check your account.
- Call the bank hotline (number printed on your ATM card) to confirm.
- Screenshot the message and report it to VTrust.
Golden Rule
Banks NEVER send messages with links requesting login. All account operations should only be done through the official app or at a branch.