Educational Information Only — Not Legal Advice

    This site provides educational information only and is not a substitute for professional legal advice. Consult a qualified Thai lawyer for personalized guidance. Laws may change. Full Disclaimer • Privacy Policy

    Skip to main content
    Thai LawKNOWLEDGE AUTHORITY
    Last updated:
    Share:

    Educational Information Only

    The content on this page is for general educational purposes and does not constitute legal advice. Every legal situation is unique. For matters involving investigation, arrest, litigation, or formal proceedings, consult a qualified legal professional.

    Back to Scam Alerts
    Financial Fraud

    Bank Impersonation via SMS Phishing (TrueMoney / PromptPay / Major Banks)

    Mass-distributed SMS messages impersonate banks, TrueMoney Wallet, or PromptPay alerts, directing victims to fake login pages that harvest credentials and drain accounts within minutes.

    critical risk
    Target: All Thai-banked residents, including foreigners with Thai accounts; especially heavy users of TrueMoney Wallet, PromptPay, and mobile banking apps
    Estimated losses: THB 20,000 – 2,000,000+ per victim; cumulative SMS-phishing losses in Thailand are reported by ECD in the billions of baht annually • Prevalence: Endemic — the single highest-volume scam by reports to ECD

    How It Works

    1

    Mass SMS sent from spoofed sender IDs ('SCB', 'KBank', 'TrueMoney', 'PromptPay', 'KrungSri') warns of 'suspicious activity', 'account suspension', 'large transaction', or 'KYC update required'

    2

    Includes a shortened URL leading to a near-perfect clone of the bank's login page

    3

    Victim enters username, password, ATM PIN, and increasingly the bank's mobile OTP

    4

    Scammers immediately log in, change registered phone number, increase transfer limits, and drain the account via PromptPay to mule accounts

    5

    Variant: SMS instructs the victim to call a 'fraud hotline' which is answered by scammers who walk the victim through 'security verification' (i.e. credential disclosure)

    6

    Mule funds are layered through TrueMoney, multiple PromptPay accounts, and ATM cash-out within 30–60 minutes

    Warning Signs

    Any SMS with a clickable URL purporting to be from a bank (banks do not embed login links in SMS)

    Urgency: 'within 24 hours your account will be locked'

    URL shortener (bit.ly, tinyurl, t.ly) hiding the destination

    Sender ID is a generic mobile number, not the bank's official 4-digit short code

    Login page asks for full PIN, OTP, and additional 'security questions'

    After 'login', the page is slow or asks you to 're-confirm' details

    What To Do

    ✓ Never click links in SMS purporting to be from your bank — open the bank app yourself
    ✓ If you have entered credentials: open your bank app and change password immediately, then call the bank's verified hotline (printed on your card) and ask to freeze the account
    ✓ Enable transaction-amount limits and biometric confirmation in the bank app
    ✓ Forward the phishing SMS to the bank's anti-fraud reporting channel and to the NBTC (operator-side blocking)
    ✓ If money has already moved: file with ECD and AMLO immediately — Thailand has an inter-bank rapid-freeze protocol within 72 hours

    How to Report

    ECD Anti-Online Scam Hotline: 1441 (24/7)
    Your bank's fraud hotline (printed on the back of your card)
    NBTC: 1200 (for SMS sender-ID abuse)
    Anti-Money Laundering Office (AMLO): +66 2-219-3600
    Cyber Crime Investigation Bureau: thaipoliceonline.com

    Professional Legal Assistance

    When a matter involves investigation, arrest, detention, litigation, or regulatory action, professional legal representation becomes essential.

    Anglo Siam Legal provides experienced legal services across Thailand for both Thai nationals and foreigners.

    Speak to a LawyerContact Anglo Siam Legal

    feedback.wasThisHelpful