Prevention
& security

Vishing (voice phishing) is the practice of stealing personal information by phone.

• You might receive a call from someone pretending to be a BIL employee, who will tell you that a case of fraud has been identified.

• The person will enlist your help to install an application that enables them to take control of your PC in order to fix the (fake) problem or confirm supposed "cancellations" of fraudulent transactions.

Phishing (by email) is the practice of sending an email or SMS (smishing) with the intent of stealing personal information.

• The fraudster will send you a message that looks as if it comes from a trustworthy body such as a bank, telephone provider, social security organisation, the postal service, etc.

• You are asked to click on a link that redirects you to a fraudulent site (that looks like the original) where you will enter your data.

Quishing, or phishing by QR code, is the practice of fraudsters using QR codes to redirect victims to malicious websites to prompt them to download harmful content, or to redirect them to a fake login page in order to harvest login details and/or passwords.

In the event of fraud, immediately block the compromised cards, either directly using the BILnet app (see our card blocking tutorial), or through Worldline by calling +352 49 10 10.

Report the fraudulent transactions as quickly and with as much detail as possible to Worldline on +352 49 10 10.

A credit transfer scam (or fake supplier scam) is the practice of deceiving the victim by pretending to be a genuine creditor (e.g. a supplier, notary, lawyer or property owner).

• The scammer's aim is to redirect a credit transfer to a bank account that they control.

• Check for any pending transactions that you didn't initiate, and your standing orders or the list of your usual beneficiaries, to make sure that nothing has been set up without your knowledge.

• In case of doubt, block your LuxTrust certificate: directly with LuxTrust, or through your bank. You can either temporarily suspend it or permanently block it.

Investment fraud consists of offering a financial investment that guarantees extremely lucrative returns. You may be taken in by advertising on social media or via email and visit commercial sites that look very real and professional but are in fact fakes. They may be cryptocurrency exchanges, trading sites etc.

Don’t be taken in by offers that are too good to be true, as they are probably fake!

Phone spoofing: this is a technique used by fraudsters consisting of displaying the real telephone number of a known institution, such as BIL.

The goal is to conceal the fraudster's real number and above all inspire trust in the person called. The client believes that they recognise their bank's number, which is in fact identical, or the number of the known institution, and feels that they can trust the caller.

Do not use Google (or any other search engine) for BILnet: the results that search engines offer may send you to a fraudulent website designed to scam you.

To avoid any problems:

• It is better to use your BILnet app, which is secure.

• Ou enter https://www.bil.com in your address bar manually.

• Or save the address https://www.bil.com/BILnet/ in your favourites.

Always check that the connection is secure and the destination URL is correct.

This involves the fraudster observing your PIN over your shoulder when you are withdrawing money from an ATM.

The fraudster will then try to distract you (getting very agitated, telling you that you’ve dropped some money, for example) in order to stealthily steal your card while making you believe that it was swallowed by the machine.