Loading story…
Fraudsters are impersonating Huntington Bank through phone calls, text messages, and emails in campaigns designed to steal online banking credentials, Social Security numbers, and one-time passcodes, while also pressuring customers to move money themselves. Reported lures include fake alerts about locked accounts, bogus requests to "upgrade" Zelle access, and caller ID spoofing that makes calls appear to come from Huntington’s legitimate customer service number.
Victims are being urged to verify any account issue only through Huntington’s official mobile app, website, or the phone number printed on their bank card rather than using contact details supplied in unsolicited messages. People who may have interacted with the scam are advised to contact the bank immediately, change passwords, monitor accounts for unauthorized activity, and report identity theft or fraud through official channels such as IdentityTheft.gov.
Get the infrastructure and lures behind it.
1 event from the most recent confirmed update back to the earliest known activity.
A report warned of scam campaigns impersonating Huntington Bank via phone calls, text messages, and emails. The scams used tactics such as fake Zelle account-upgrade requests, phishing alerts about locked accounts, and caller ID spoofing to steal credentials, Social Security numbers, one-time passcodes, or induce fraudulent transfers.
Vulnerabilities, threat actors, malware, products, organizations, breaches, and observables Mallory has linked to this story. Indicator values are masked here and available in full in the app.
Indicator values are masked on this page. See the values in Mallory Domains, IPs, hashes, and URLs are exportable to your SIEM.
Get the infrastructure, lures, and IOCs behind this campaign, ready to push into your email and identity stack.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
A sophisticated social engineering scam has been reported in which fraudsters impersonate Chase bank representatives to deceive potential victims. The scam begins with a caller claiming to be from Chase, who reassures the target by stating that the bank would never ask for personal information or passwords, thereby establishing a false sense of security. The caller then provides the victim with seemingly official details, such as two 'cancellation codes' and a lengthy case number composed of four letters and ten digits, to further legitimize the interaction. As the conversation progresses, the caller offers to transfer the victim to a supervisor, a tactic designed to mimic standard customer service procedures and enhance the appearance of authenticity. After a brief pause, a second individual, introducing himself as 'Mike Wallace,' joins the call and requests the case number, reinforcing the illusion of a structured escalation process. This 'supervisor' then explains a fabricated scenario involving a new account, Zelle transfers, and activity in Texas, suggesting that an attempted withdrawal needs to be reversed. The scam is engineered to capture the victim's full attention and trust, making them more susceptible to following the fraudsters' instructions. The narrative highlights how even individuals who are generally aware of scam tactics can be drawn in by the convincing nature of such schemes. The use of specific banking terminology and procedural language is intended to lower the victim's guard. The scam leverages the authority and familiarity of customer service hierarchies to manipulate targets. The inclusion of detailed case numbers and codes is a psychological tactic to create a sense of legitimacy and urgency. The fraudsters' approach demonstrates a high level of planning and understanding of typical banking interactions. The scam specifically references Zelle, a popular peer-to-peer payment service, as part of the fraudulent scenario. The incident serves as a warning that social engineering attacks are becoming increasingly sophisticated and can affect even those who consider themselves vigilant. The reporting of this scam underscores the importance of verifying the identity of anyone claiming to represent a financial institution, especially when unsolicited contact is made. The case also illustrates the need for ongoing education and awareness regarding the evolving tactics used by cybercriminals in the financial sector.
Jun 29, 2026
The FBI has issued a warning about a significant increase in account takeover (ATO) fraud schemes, with cybercriminals impersonating financial institutions to steal money and sensitive information. Since the beginning of the year, over $262 million in losses have been reported from more than 5,100 complaints. Attackers use social engineering tactics—including texts, calls, and emails—to trick victims into revealing login credentials, multi-factor authentication codes, or one-time passcodes. Once access is gained, criminals reset passwords, lock out account owners, and quickly transfer funds, often to cryptocurrency wallets, making recovery difficult. The FBI highlighted that these schemes are becoming more sophisticated, with tactics such as search engine optimization (SEO) poisoning, where fraudulent ads mimic legitimate e-commerce or financial sites to lure victims. The warning comes ahead of the holiday season, a period when such scams typically increase. The agency urges heightened vigilance, especially as cybercriminals exploit fears of fraudulent transactions and use impersonation of both financial institution staff and law enforcement to manipulate victims into providing sensitive account information.
Jun 29, 2026
Apple users are being targeted in a social engineering campaign that uses unexpected **FaceTime** calls to impersonate banks and Apple Support, with attackers aiming to steal money and take over accounts. Reports say the scam often starts with urgent text messages claiming there is a problem with a bank or Apple account, then escalates to unsolicited video calls in which fraudsters pressure victims to reveal banking details, **Apple ID** credentials, and **MFA** codes, or to install remote-access software. Security reporting says the tactic exploits the trust created by real-time video interactions to reduce suspicion and speed compliance, enabling account takeover and financial theft. The campaign may also be paired with browser-side flaws and other multi-stage techniques to deepen compromise after credentials are stolen. Apple and financial institutions do not use FaceTime for urgent security remediation, and users are being urged to verify any alerts through official channels, keep **iOS** and **iPadOS** updated, and report suspected scams to Apple.
Jul 17, 2026