Scotiabank Mexico issued a special report, calling on its customers and the general public to reinforce their verification habits due to an increase in fraud by identity spoofing. This is a practice where criminals impersonate financial institutions to obtain confidential information. The bank explained that this type of fraud can occur through various channels, such as phone calls, SMS messages, emails, or fake websites, where users are asked to share sensitive data—such as passwords, verification codes, or banking information—usually under scenarios of urgency or apparent risk. In this context, the financial institution emphasized that everyone must be careful with spoofing. It stressed that prevention and financial education are key tools to reduce risks and protect personal information.
Five practical tips vs. spoofing To avoid identity spoofing and the use of your data to empty your accounts or apply for credit in your name, Scotiabank recommends: Be wary of messages or calls that request immediate action or sensitive information. Do not share passwords, PINs, or verification codes, even if the contact appears to be from a financial institution. Activate two-factor authentication on your accounts whenever it is available. Use call-blocking tools and spam filters on your devices. Verify any suspicious communication directly with your bank through official channels.
The National Commission for the Protection and Defense of Users of Financial Services (Condusef) reported that these frauds already represent 60% of complaints in the financial system. That's how quickly they empty your accounts. Fraud by spoofing or identity impersonation is growing, and up to six out of every ten scams are carried out through this mechanism. Scotiabank Mexico launched a security alert on this matter and warned that criminals impersonate institutions, companies, or known contacts to steal passwords, PINs, or banking information through calls, SMS, emails, or fake pages. The blow is not minor. They call 'from the bank,' rush you, and ask for a code. If you respond, you've already lost.
