Bitvavo is the grand Crypto-Exchange in the Netherlands and therefore has many Dutch customers. Bitvavo now warns of SMS messages that have not been sent by Bitvavo: it is phishing. Read here when Bitvavo does send a text message when it is a phishing message and you will find examples of phishing messages supposedly in the name of Bitvavo.
We regularly pay attention to digital safety, such as the review of the Bitdefender Mobile Security Safety app. That attention is also necessary, because more and more often people fall victim to identity fraud and phishing by cyber criminals. The largest Crypto-Ex-Exchange Bitvavo now warns of an SMS that is in circulation, but that is not of Bitvavo.
This article helps you to recognize whether a text message is really from Bitvavo. It describes in which situations Bitvavo sends an SMS and gives steps to handle suspicious messages. Moreover, you will find many examples of phishing messages supposedly in the name of Bitvavo.
Recognize Bitvavo, SMS and suspicious messages
Have you received an SMS and do you doubt whether this will come from Bitvavo? Below we explain in which situations Bitvavo actually sends an SMS and how you can recognize suspicious messages.
When does Bitvavo send an SMS? Bitvavo only sends SMS messages in the following four cases:
1. Registration of your telephone number
2. Activation of 2FA (two -factor authentication)
3. Reset your 2FA
4. Change your telephone number
If you receive an SMS outside of these situations, it does not come from Bitvavo.
Can it happen that a phishing SMS ends up under a real SMS from Bitvavo?
Yes, it is possible that a phishing SMS ends up under a real SMS from Bitvavo. Cyber ​​criminals can adjust the sender ID of their phishing SMS messages in such a way that it seems as if they come from a legitimate source, such as Bitvavo. This means that the telephone number or name that is displayed in the message matches that of Bitvavo.
With some SMS apps, messages from the same sender ID are grouped in one conversation thread. If a phishing message uses the same sender ID as an earlier, legitimate SMS from Bitvavo, the phishing message can appear under or between the real messages from Bitvavo. This makes it more difficult for the user to distinguish between real and false messages.
When does Bitvavo not send SMS?
Bitvavo does not send SMS messages that has been logged in from a different location.
What are characteristics of phishing text messages? Common characteristics of phishing text messages are:
1. Referring to a link to fill in information or to download software.
2. Referring to a telephone number to call.
Bitvavo has (recent) examples of this: you will find this at the bottom of this article.
What should I do if I have received an SMS that I have logged in from a different location?
This SMS has not been sent by Bitvavo: Bitvavo never sends such messages by SMS. Bitvavo advises you to ignore and remove this SMS. Bitvavo also wants to kindly request you to block this telephone number and to consider it as a spam. Bitvavo does everything to remove the website or telephone number as soon as possible.
What to do with a suspicious SMS?
Have you received an SMS that you suspect was not sent by Bitvavo? Then follow these steps:
1. Ignore and remove the SMS: do not respond to the messages and do not click on any links.
2. Block the telephone number: this prevents you from receiving even more unwanted messages.
3. Mark it as a spam: this helps your telephone provider to recognize and filter such messages.
4. Contact Bitvavo: Send this message to fraud@bitvavo.com
Recent phishing text messages
The exact data in the SMS messages can vary.
| Text | Image |
| A Ledger Live is linked to your Bitvavo API. If this is not done by you, call us immediately [nummer] | |
| Your recording code is 638-973. If you are not this, call immediately [nummer] With reference ref/57. |
(Note: don’t call this number!) |
| Unfortunately we could not reach you. Please contact us via [telefoonnummer]. |
(Note: don’t call this number!) |
| Date: 22-11-2024 3:30:38 pm IP address: 192.44.242.19 (Stockholm – Sweden) Reference: B9T2810 If you are not this, call us |
(Note: don’t call this number!) |
| You have linked Ledger live to your Bitvavo API. If you were not this yourself, you can contact the Support Team via [Telefoonnummer]
|
(Note: don’t call this number!) |
|
You are successfully logged in from Berlin at 7:34 PM Saturday, June 15. If you were not this yourself, call us? [Telefoonnummer] Ref: YD192871 |
(Note: don’t call this number!) Make sure that the city, time, date of telephone number and reference can vary in the message. |
|
Your 2FA telephone number has changed. This number is no longer usable for secure access. Does this not sound familiar? Cancel via [LINK]
Your 2FA telephone number has been adjusted. This number is no longer valid for secure access. Don’t you recognize this? Cancel via [LINK] |
|
| You have successfully switched off the recording lock on Wednesday, July 24 at 4:45 PM. If you are not this, call us [Telefoonnummer] Ref: YP5726 |
(Note: don’t call this number!) |
| Bitvavo: You must verify your data due to a new law. If this does not happen within 2 days, your account will be blocked. Verifier now via: [phishingwebsite] |
(Note: Do not click on the link in the SMS!) |
|
Bitvavo There has been logged in with a new device
Device: iPhone 7, iOS Check the device? |
(Note: don’t sound on the link in the SMS!) |