Alert: This Fake Banking App is Stealing Bank Card Info

Update: The malicious URL has now been removed. A new online scam is targeting Pakistani banking customers through ads on Facebook, promoting a fake version of the Habib Bank Limited (HBL) app. The fraudulent app, falsely advertised as the “updated 2025 version” of HBL’s official mobile banking application, is designed to steal your banking card info. Here is what the fake ad looked like. While the promoted Facebook ad has now been taken down, the malicious sign-up link remains active and continues to pose a risk. The fake website’s URL is completely different from the legitimate HBL website, which uses the simple and straightforward URL “https://www.hbl.com/”. The phishing site mimics HBL’s branding and even displays images of HBL debit and credit cards to appear authentic. Once on the site, victims are told to enter their banking card info, including: Here is what the fake website looks like. After submitting card details, users are told that “the bank will contact them within 1 to 2 hours for OTP verification,” as shown in the screenshot above. Commenting on the fake app, Ali Habib, Spokesperson HBL, said, HBL has not released any separate “2025 version” of its mobile app. Customers are urged to stay vigilant and verify all banking communications through official HBL channels.