Contacts

	Contact your Servicing Officer or eb-contact@belfius.be
	02 222 87 10

You are a victim of fraud?

There has been a suspicious transaction on one of your accounts?

What should I do?

You have lost our BelfiusWeb access card?

What should I do?

Access to BelfiusWeb has been created or modified without the intervention of the Master User?

What should I do?

Your debit or credit card has been lost?

What should I do?

By way of prevention

Phishing MAILS and TEXTS

Phishing – What is it?
Using this technique, the scammer attempts to deceive you in order to misappropriate funds.
- You receive emails, texts and telephone calls and see fake web pages which appear to come from an official institution
- All these messages contain a link on which you are invited to click, in order:
  - to complete your personal details
  - to install (malicious) software on your computer without your knowledge
- If you provide these personal details, the scammer will then contact you by telephone and attempt to have you make a payment.
How do I recognise scam texts and e-mails?

Always check the link, the e-mail address or the telephone number of the sender. If the data does not match the data you know (official website, official phone number), beware, because it is suspicious!

Do you want to be sure of the web address to which a link refers?
Move your mouse over the link, without clicking, and you will see the address. Does the link differ from the official www.belfius.be/? address? Do not click on it and report the e-mail or text message directly to phishing@belfius.be
What should I do if I receive a phishing email/text?
- First of all, never click on the link in the e-mail, because it will definitely take you to a fake Belfius page.
- Secondly, to reinforce our security efforts, please report this phishing attempt immediately:
  - if the email is supposedly from Belfius, send it to phishing@belfius.be
  - if the email is supposedly from Visa, send it to phishing@visa.com
  - if the email is supposedly from Mastercard, send it to stopIT@mastercard.com
  - if the email is supposedly from other institutions send it to suspect@safeonweb.be
- You clicked on the link without providing any personal data? Normally, rest assured, you are not in any direct danger.
- You clicked on the link and completed your personal data? In this case, be very vigilant if you receive a suspicious telephone call during which you are asked for your codes. And, of course, do not give them away!

Suspicious calls

How do I recognise an impostor?
- You are called in the evening, at night, at the weekend or on a public holiday to:
  - question you about your bank account
  - to “help” you update software or solve a technical problem …
  - to ask you questions about your personal affairs …
- You are asked to generate a code with your card reader
- You are asked for your bank codes
If you receive such a call, there is only one thing to do: hang up directly and report the attempted fraud to us or to the company which the scammer tried to simulate.
What data should never be shared over the telephone?
- Your pin code
- Your passwords
- Your codes generated by the card reader
We will never ask you for this information over the telephone, and neither will any other serious company for that matter. So the basic rule of thumb which keeps you safe and which we value very much for your security is never, ever to give out this information over the telephone.
Can I deal with a scammer if I call my bank?

If you call an official bank number yourself, you are safe. Scammers cannot abuse bank telephone numbers to receive calls.
If I receive a call with the bank's telephone number, can I trust the person to whom I am speaking?

In this case, unfortunately, not always. Because some scammers manage, via an application, to display on your smartphone the telephone numbers of Belgian banks in order to pass themselves off to customers as reliable bankers.

So, if you are called, we really want you to apply our basic rule for your safety: NEVER give out your PIN, password or a code generated with your card reader.

CEO fraud

What is this?

Here, the scammer pretends to be a director of the company or a member of the management and asks you by e-mail, text or post to carry out a transaction urgently, to give confidential information (customer data, personal data), to modify a contract, etc.
How do you recognise a CEO fraud?
- First of all, you receive an email from a director with whom you are not used to having contact
- In this email, he asks you to keep his request absolutely confidential
- He states that his request is urgent and pressing/li>
- What he is asking you to do is contrary to normal internal procedures
You have doubts? Check :
- The email address of the sender. The domain name is after the @ and must correspond to the company name. Check via Google the domain name usually used (e.g. @belfius.be but not @belfius-bank.be)
- If there is a link in the email, move your mouse over it and check the domain name in front of the first /. It must also correspond to the domain name of the company (e.g. https://belfiusweb.belfius.be/publiccorporate/en/iws/language.html)
What do I do then?
Do your checks lead you to believe that the email is not from the right company? Look up the telephone number of the director who is supposed to be sending you the e-mail in your personal database and contact him to check whether he is the source of the e-mail.

They did not send you this email?
- Do not carry out the requested transaction
- Block the sender of the email in your mailbox
- Advise the director to notify their IT department and change their email password.
Then, because we will be stronger together against fraud, we would also like to be able to count on you to:
- send the fraudulent email supposedly emanating from Belfius to phishing@belfius.be
- send the fraudulent email supposedly emanating from another institution to suspect@safeonweb.be".

Invoice fraud

What is this?

Here, scammers replace the bank details on an invoice with their own bank details to collect the amounts invoiced. There are two victims of this manipulation: you and the company issuing the invoice.
How do I recognise an invoice fraud?
There are several possible scenarios:
- the beneficiary account does not match the one you have registered in your banking application (e.g. BelfiusWeb)
- the beneficiary suddenly sends you an e-mail asking you to pay the bill on another account
- you receive the invoice by post and a sticker with a different account number is stuck on the original
- the email with the invoice does not contain any text or details, only a link on which to click
You have doubts? Check: :
- The email address of the sender. The domain name is after the @ and must correspond to the company's name. Check via Google the domain name usually used (e.g. @belfius.be and not @belfius-bank.be). If this is not the case, it is phishing..
- The attached document: if you move the mouse slightly over the document, you can see that it is a link. In this link, you should check the domain name in front of the first / which should relate to the name of the company sending you the invoice (e.g. https://belfiusweb.belfius.be/publiccorporate/fr/iws/language.html).
- Is this not the case? Above all do not click on the link as this could spread a virus on the customer's computer system (ransomware).
What do I do then?
- Do not click on any link and do not enter any personal data, PIN code or code generated by a card reader
- Look up your creditor's telephone number in your personal database (the scammer may also have adapted the telephone number in the email or on the invoice) and contact him/her to verify the account number to which you have to pay the money.
- They did not send the invoice?
  - pay nothing
  - block the sender in your mailbox
  - advise the creditor to notify their IT department, change their email password and report the fraudulent email to suspect@safeonweb.be.
  - if the fraudulent email supposedly emanates from Belfius, send it to phishing@belfius.be
  - if it emanates from elsewhere, send it to suspect@safeonweb.be.

Who should I contact outside office hours?

>> Belfius Fraude on +32 2 222 46 00