Prevention
& security

Vishing (voice phishing) is the practice of stealing personal information by phone.

• You might receive a call from someone pretending to be a BIL employee, who will tell you that a case of fraud has been identified.

• The person will enlist your help to install an application that enables them to take control of your PC in order to fix the (fake) problem or confirm supposed "cancellations" of fraudulent transactions.

Phishing (by email) is the practice of sending an email or SMS (smishing) with the intent of stealing personal information.

• The fraudster will send you a message that looks as if it comes from a trustworthy body such as a bank, telephone provider, social security organisation, the postal service, etc.

• You are asked to click on a link that redirects you to a fraudulent site (that looks like the original) where you will enter your data.

Quishing, or phishing by QR code, is the practice of fraudsters using QR codes to redirect victims to malicious websites to prompt them to download harmful content, or to redirect them to a fake login page in order to harvest login details and/or passwords.

In the event of fraud, immediately block the compromised cards, either directly using the BILnet app (see our card blocking tutorial), or through Worldline by calling (+352) 49 10 10.

Report the fraudulent transactions as quickly and with as much detail as possible to Worldline on (+352) 49 10 10.

A credit transfer scam (or fake supplier scam) is the practice of deceiving the victim by pretending to be a genuine creditor (e.g. a supplier, notary, lawyer or property owner).

• The scammer's aim is to redirect a credit transfer to a bank account that they control.

• Check for any pending transactions that you didn't initiate, and your standing orders or the list of your usual beneficiaries, to make sure that nothing has been set up without your knowledge.

• In case of doubt, block your LuxTrust certificate: directly with LuxTrust, or through your bank. You can either temporarily suspend it or permanently block it.

Investment fraud consists of offering a financial investment that guarantees extremely lucrative returns. You may be taken in by advertising on social media or via email and visit commercial sites that look very real and professional but are in fact fakes. They may be cryptocurrency exchanges, trading sites etc.

Don’t be taken in by offers that are too good to be true, as they are probably fake!

Phone spoofing: this is a technique used by fraudsters consisting of displaying the real telephone number of a known institution, such as BIL.

The goal is to conceal the fraudster's real number and above all inspire trust in the person called. The client believes that they recognise their bank's number, which is in fact identical, or the number of the known institution, and feels that they can trust the caller.

Do not use Google (or any other search engine) for BILnet: the results that search engines offer may send you to a fraudulent website designed to scam you.

To avoid any problems:

• It is better to use your BILnet app, which is secure.

• Ou enter https://www.bil.com in your address bar manually.

• Or save the address https://www.bil.com/BILnet/ in your favourites.

Always check that the connection is secure and the destination URL is correct.

Card Trapping:

Fraudsters insert a device into the card slot to trap your card. While you try to retrieve it, they observe your PIN. Once you leave, they retrieve the card and use it, along with your secret PIN code, for fraudulent transactions.

Cash Trapping:

A device is placed in the cash dispenser slot to trap the banknotes. You think the ATM didn’t dispense any money and walk away – the fraudsters then retrieve the trapped cash.

Distraction Scam:

While you enter your PIN, a fraudster watches over your shoulder. Then they distract you (e.g., by asking a question or dropping something), steal your card, and disappear.