Comment se protéger contre la fraude bancaire

Bank fraud in France has moved far beyond the classic stolen wallet. Today, criminals combine technology and psychology to trick you into handing over your own credentials, often while you believe you are protecting your account rather than emptying it. The good news is that a handful of steady habits stop the vast majority of attacks before they even begin. This guide walks through the most common threats French bank customers face and the practical steps that keep your money exactly where it belongs.

How These Scams Actually Work#

Fraud almost always relies on urgency and impersonation. The scammer poses as someone you trust and pushes you to act before you have time to think it through. Once you can name the specific technique, you can recognize it in the moment rather than only afterward, when the money is already gone.

Phishing and Smishing#

Phishing (hameçonnage) arrives by email, smishing by text message. Both send you to a fake login page built to look exactly like your bank's real site. You enter your password, and the criminal captures it in real time, often logging into your account within seconds. Your bank will never ask you to "confirm" or "reactivate" your account through a link in a text message. Hover over links before clicking, and if the address does not match your bank's actual domain, delete the message. Type your bank's address yourself, or open the official app directly, rather than following any link at all.

Fake Bank Calls (Vishing)#

Vishing is fraud carried out by phone. The caller can spoof your bank's real number and claim there is "suspicious activity" on your account, creating exactly the urgency needed to stop you from questioning what comes next. They then ask you to read out codes, transfer money to a "secure account," or install remote-access software that hands them control of your device. No genuine advisor will ever ask for your full password, your card code, or a one-time code. If in doubt, hang up and call the number printed on the back of your own card.

Card Skimming#

Skimming devices are hidden at ATMs or payment terminals to copy your card and record your PIN as you enter it. Tug at the card slot before inserting your card, since a loose or oddly shaped attachment often reveals a hidden device. Cover the keypad with your free hand, and prefer contactless or mobile payments where possible, since they expose far less card data to a compromised terminal.

Building Everyday Defenses#

Most fraud never gets off the ground when your basic security habits are already solid, which is why prevention beats reacting after the fact almost every time.

Passwords and Two-Factor Authentication#

Use a long, unique password for your online banking, different from every other account you hold. Turn on two-factor authentication so a login requires a second proof, usually a code from an app or a physical key. An authenticator app is safer than SMS codes, which can be intercepted through techniques like SIM-swapping.

Never Share a One-Time Code#

A one-time code is the single most valuable thing a fraudster can steal, because it is sent to you specifically to authorize your own action. Anyone who calls, texts, or emails asking you to read one out loud is a criminal, without exception, however convincing the story sounds. Sharing it can authorize a payment or add an entirely new payee to your account within seconds.

Check Your Statements Regularly#

Read every statement and set up instant transaction alerts. Small "test" charges of a euro or two often precede a much larger theft, since criminals use them to confirm a stolen card still works before attempting something bigger. Under EU rules, unauthorized card charges can usually be disputed via rétrofacturation (chargeback), but only if you report them promptly, so the earlier you catch them, the stronger your claim becomes.

Liste des signaux d'alerte (Red Flags Checklist)#

Treat any of the following as a signal to stop and verify: a message or call that manufactures urgency, such as "act now or your account will be blocked"; a request for a password, card code, or a one-time code; instructions to move money to a "secure" or "holding" account; a link whose address does not exactly match your bank's official domain; pressure to install software so someone can "help" you; an unexpected SEPA direct debit or card charge you do not recognize; and a caller who discourages you from hanging up or calling the bank back.

What to Do If You Have Been Defrauded#

Speed decides the outcome here. Reacting within minutes can be the difference between a full refund and a total loss.

Block your card first, either instantly via the app or by calling your bank's emergency line (opposition). Contact your bank next and describe exactly what happened, asking them to cancel pending transactions and flag your account. Change your credentials, including your online banking password and any password reused elsewhere. File a complaint (dépôt de plainte) with the police so the crime is officially logged and can be investigated. Finally, watch your accounts closely for several weeks afterward, since fraudsters who succeeded once often come back for a second, smaller theft while your guard is still down.

For card payments specifically, ask explicitly about a rétrofacturation: many card and SEPA transactions can be recovered if you dispute them quickly and in writing.

Securing Your Account From Day One#

Good habits are easiest to build right when you open the account, before bad patterns form. If you are setting things up now, it is worth understanding the full opening process and choosing a provider with strong security features built in from the beginning rather than added later.

Where to Get Extra Help in France#

Beyond your bank, French consumers have a few additional resources worth knowing about. The Info Escroqueries service, reachable through the 33 700 short number, lets you report a suspected scam message or call for a quick assessment of whether it is legitimate before you act on it. Cybermalveillance.gouv.fr, a government-backed platform, provides step-by-step guidance for victims of online fraud and can point you toward a local assistance provider. If your bank is slow or unresponsive when reversing an unauthorized transaction, the Médiateur bancaire attached to your institution offers a free, formal mediation process before you would need to consider legal action, and using it typically resolves disputes faster than escalating through court.

Keeping Your Phone and Banking App Secure#

The device you bank on deserves as much attention as the account itself, since a compromised phone can undermine even a strong password and a properly configured second factor. Keep your phone's operating system and banking app updated, since security patches close specific gaps that fraudsters actively scan for. Set a strong screen lock rather than a simple swipe pattern, and enable biometric login for your banking app wherever the option exists. Avoid banking over open public Wi-Fi in cafes or train stations unless you are using a trusted VPN, since an unsecured network can let someone nearby intercept your traffic. Be careful about which apps you grant notification access to, since certain malware families are built specifically to read one-time codes straight out of your notification bar the moment they arrive, silently defeating two-factor authentication without any visible sign that something is wrong.

Talking to Family Members Who Are More Vulnerable to Scams#

A large share of successful fraud specifically targets people who are less familiar with how digital banking normally behaves, which makes a short, calm conversation with older relatives one of the most effective defenses available. Explain, in plain terms, that a real conseiller will never call asking for a password or a code, and that hanging up to call the number on the back of a card is always acceptable, regardless of how friendly or urgent the caller sounds. Agree together on a simple household rule: any request to move money to a "secure" account, install remote-access software, or read out a code over the phone is automatically treated as fraud, with no need to judge in the moment whether the caller "sounded legitimate." Setting up transaction alerts on a family member's account, with their permission, also means a second set of eyes can catch a problem quickly if something does slip through the first line of defense.

Frequently Asked Questions#

Will my bank ever ask for my password or card code?#

No. A legitimate bank never asks for your full password, card code, or a one-time code, whether by phone, email, or text message. Any such request is fraud.

Are SMS one-time codes safe to use?#

They are better than nothing, but SMS can be intercepted or redirected. Where your bank offers it, prefer an authenticator app or a physical security key.

Can I get my money back after a fraudulent card payment?#

Often yes. Unauthorized card charges and many SEPA payments can be disputed through a rétrofacturation, provided you report the fraud quickly and follow your bank's process.

What is the very first thing to do after being scammed?#

Block your card immediately via the app or the emergency line, then call your bank to report the fraud and cancel any pending transactions.