PhishPin / Brands Live Phishing Data / Banks & lenders

Live · monitored 24/7

Banks & lenders phishing: which brands are copied the most

105 banks & lenders brands are tracked in PhishPin's index. Together they have 6,855 hostnames in phishing feeds and 292 newly registered lookalike domains from the last 15 days.

105brands tracked
6,855hosts in phishing feeds
292new lookalike domainslast 15 days

Ranking: most impersonated banks & lenders

#BrandShare of category hostsPressureHostsLookalikes
1Wells Fargo17%62 · High1,1652
2Chase6%59 · High4446
3Santander Bank US6%58 · High4295
4Sparkasse6%58 · High3996
5Bancolombia5%47 · Elevated3560
6Lloyds Bank5%56 · High3235
7DBS Bank4%49 · Elevated2941
8HSBC USA4%52 · Elevated2803
9MUFG4%45 · Elevated2790
10Bradesco4%56 · High2627
11Halifax3%43 · Elevated2390
12Commonwealth Bank (CommBank)3%42 · Elevated2030
13Citibank3%52 · Elevated1776
14ING2%47 · Elevated1493
15Bank of America2%52 · Elevated1429
16Crédit Agricole2%39 · Elevated1340
17BBVA1%48 · Elevated948
18TSB1%43 · Elevated863
19Caixa Econômica Federal1%39 · Elevated801
20USAA1%49 · Elevated7414
21NatWest1%41 · Elevated683
22Scotiabank1%40 · Elevated682
23Intesa Sanpaolo1%41 · Elevated673
24Itaú1%33 · Moderate670
25Charles Schwab1%46 · Elevated5811
26Société Générale1%32 · Moderate570
27Nordea1%43 · Elevated478
28NAB1%35 · Elevated471
29BNP Paribas1%38 · Elevated463
30RBC Royal Bank1%34 · Moderate352
31Capital One0%36 · Elevated343
32ANZ0%28 · Moderate340
33American Express0%39 · Elevated337
34CIMB0%37 · Elevated295
35CIBC0%36 · Elevated284
36Commerzbank0%27 · Moderate280
37Mizuho0%30 · Moderate271
38UniCredit0%30 · Moderate271
39CaixaBank0%26 · Moderate270
40Citizens Bank0%26 · Moderate250
41Discover0%39 · Elevated2213
42UBS0%33 · Moderate223
43ABN AMRO0%25 · Moderate210
44Navy Federal Credit Union0%25 · Moderate210
45Rabobank0%25 · Moderate210
46Deutsche Bank0%28 · Moderate191
47Fifth Third Bank0%28 · Moderate191
48Huntington Bank0%28 · Moderate191
49KeyBank0%29 · Moderate182
50Truist0%31 · Moderate173
51Desjardins0%32 · Moderate136
52Westpac0%21 · Moderate130
53Barclays US0%20 · Moderate120
54Swedbank0%20 · Moderate120
55U.S. Bank0%32 · Moderate118
56HDFC Bank0%29 · Moderate114
57TD Bank0%23 · Moderate101
58N260%19 · Moderate100
59PNC Bank0%26 · Moderate93
60Nubank0%18 · Moderate90
61BMO0%29 · Moderate87
62ICICI Bank0%29 · Moderate78
63Axis Bank0%15 · Moderate60
64Danske Bank0%15 · Moderate60
65Bank Central Asia (BCA)0%24 · Moderate55
66ICBC0%24 · Moderate55
67Fidelity Investments0%23 · Moderate54
68OCBC0%23 · Moderate54
69Kotak Mahindra Bank0%25 · Moderate48
70State Bank of India (SBI)0%22 · Moderate44
71Maybank0%17 · Moderate41
72Capitec0%20 · Moderate34
73First Citizens Bank0%15 · Moderate31
74Emirates NBD0%11 · Low30
75Standard Bank0%11 · Low30
76Vanguard0%21 · Moderate29
77Nelnet0%16 · Moderate23
78Bank Mandiri0%13 · Low21
79Macquarie0%13 · Low21
80BPI0%18 · Moderate18
81Ally Bank0%15 · Moderate15
82Synchrony Bank0%15 · Moderate15
83Banco do Brasil0%5 · Low10
84Edward Jones0%5 · Low10
85Morgan Stanley0%5 · Low10
86FNB South Africa0%12 · Low08
87SoFi0%10 · Low05
88Merrill0%9 · Low04
89E*TRADE0%8 · Low03
90GTBank0%8 · Low03
91Al Rajhi Bank0%6 · Low02
92Bank of Baroda0%4 · Low01
93First Abu Dhabi Bank0%4 · Low01
94Monzo0%4 · Low01
95Sallie Mae0%4 · Low01
96Varo Bank0%4 · Low01
97Ameriprise Financial0%0 · Low00
98Bank of China0%0 · Low00
99Mr. Cooper0%0 · Low00
100Navient0%0 · Low00
101PenFed Credit Union0%0 · Low00
102Punjab National Bank0%0 · Low00
103Regions Bank0%0 · Low00
104Rocket Mortgage0%0 · Low00
105Starling Bank0%0 · Low00

Common lures against banks & lenders

Red flags

If you already clicked or entered details

Call the number printed on the back of your card, lock the card, change your online-banking password from a clean device, and ask the bank to review recent activity. If you shared a one-time code, treat the account as compromised.

Is your bank being copied?

Attackers copy any brand whose customers log in or pay. Enter your domain for a free check of email-spoofing gaps, registered lookalikes and feed listings.

Talk to us about takedowns

Questions

Which banks & lenders brands are impersonated the most?

Wells Fargo leads with 1,165 hostnames in phishing feeds, followed by Chase (444) as of 2 Nov 2026.

How can I spot phishing that targets banks & lenders?

The sender domain is not the bank's real domain, or is the real name with extra words (secure, login, verify) added. The message creates urgency: your account will be closed, frozen or charged in the next few hours. The page asks for a one-time passcode, full card number, PIN or SSN, which a real bank never requests by link.

What should I do if I fall for a fake bank page?

Call the number printed on the back of your card, lock the card, change your online-banking password from a clean device, and ask the bank to review recent activity. If you shared a one-time code, treat the account as compromised.

Other industries

Payments, fintech & creditCrypto exchanges & walletsShipping & deliveryTech, email & cloudSocial & messagingStreaming & gamingTelecom & internetRetail, delivery & marketplacesTravel & transportGovernment & public servicesInsurance & healthcareBusiness software & payrollUtilities & home services

See all 579 brands