Skip to main content

Recognising and reporting phishing attempts

Written by Maxime

Scammers sometimes send fake emails that look like they come from Banqup, asking you to click a link, pay an invoice, or enter your login details on a fake website. This article shows you how to spot these phishing attempts, verify that a webpage really belongs to Banqup, and report anything suspicious.

What is phishing?

Phishing is a type of online fraud. A scammer sends you an email, text message, or chat that imitates a trusted brand. The goal is to trick you into clicking a link, opening an attachment, or sharing sensitive information like passwords, bank details, or payment card numbers.

Phishing messages often:

  • Look almost identical to a real Banqup email

  • Create a sense of urgency, such as "your account will be blocked" or "pay within 24 hours"

  • Contain a payment link or a button asking you to log in

  • Use a sender address that looks close to a real one, but not exactly

Note

Banqup will never ask you for your password by email, chat, or phone. If a message asks for your password, it is not from us.

How to check that a webpage really belongs to Banqup

Before you enter login details or payment information, take a few seconds to check the page is genuine.

1. Check the web address

A legitimate payment page operated by the Banqup Group uses the pay-nxt.com domain. If the address bar shows a different domain, do not enter any information.

Example of a trustworthy pay-nxt.com web address

Here is what a genuine web address looks like in the three most common browsers:

  • Chrome

    Example of a trustworthy address in Chrome

  • Firefox

    Example of a trustworthy address in Firefox

  • Safari

    Example of a trustworthy address in Safari

2. Check the padlock icon

To be absolutely sure, click the padlock icon next to the web address. Your browser will show you who really owns the website. If the certificate is not issued to Banqup or a related entity, the page is not genuine.

  • Chrome

    Padlock icon location in Chrome
    Certificate details in Chrome

  • Firefox

    Padlock icon location in Firefox

    Certificate details in Firefox

  • Safari

    Padlock icon location in Safari
    Certificate details in Safari

How to spot a phishing email

A phishing email pretending to be from Banqup usually shows one or more of these signs:

  • The sender address is not a real Banqup address, or has small differences (extra letters, swapped characters, an unusual domain)

  • The greeting is generic, such as "Dear customer" instead of your name or company name

  • The message pressures you to act quickly to avoid a problem

  • A link in the message does not point to a Banqup or pay-nxt.com address when you hover over it

  • The email has spelling mistakes, odd phrasing, or unusual formatting

  • An attachment is included that you were not expecting

Warning: If anything feels off, do not click any link, do not download any attachment, and do not reply. When in doubt, log in to Banqup directly through your usual bookmark or by typing the address manually.

What to do if you receive a suspicious email

If you receive an email that looks like phishing:

  1. Do not click any link, button, or attachment in the message.

  2. Do not reply to the sender or forward the message to colleagues, except to report it.

  3. Forward the suspicious email as an attachment to [email protected] so our security team can investigate.

  4. Delete the email from your inbox.

If you have already clicked a link or entered your details on a suspicious page, change your Banqup password immediately and contact Banqup support.

Did this answer your question?