Banking Fraud Targeting SCB, KBank, and BBL Customers in Thailand

Thailand's major banks — Siam Commercial Bank (SCB), Kasikornbank (KBank), Bangkok Bank (BBL), Krungthai Bank (KTB), and others — serve tens of millions of customers through mobile banking apps. These apps handle everything from transfers and bill payments to investments and loans. Scammers have adapted their tactics specifically to exploit the trust Thai customers place in their banks.

In 2025 alone, the Bank of Thailand reported billions of baht in losses from banking fraud. Here is how the attacks work and how to protect yourself.

The Most Common Banking Fraud Tactics

1. Fake Banking Apps

Scammers distribute modified APK files through LINE groups, Facebook ads, and SMS links. These fake apps look nearly identical to the real SCB EASY, K PLUS, or Bualuang mBanking apps. When you enter your credentials, the scammer captures them in real time and uses them to access your real account.

Critical difference: Legitimate banking apps are only available through Google Play Store and Apple App Store. Any app distributed through other channels is dangerous.

2. LINE Impersonation of Bank Officers

Scammers create LINE accounts with profile pictures of real bank officers or use the bank's logo. They add you directly or respond to complaints you post publicly on social media. The conversation follows a predictable script:

1. "We detected suspicious activity on your account"
2. "For your security, we need to verify your identity"
3. "Please provide your username, password, and the OTP you just received"

3. SMS Credential Phishing

Fake SMS messages arrive from sender IDs that mimic bank short codes. Common messages include:

• "Your SCB account has been locked. Verify at [fake URL]"
• "KBank: Unusual transaction of 45,000 THB detected. Review: [fake URL]"
• "BBL: Your mobile banking will be suspended. Update now: [fake URL]"

The links lead to phishing pages that steal your login credentials and OTP codes.

4. Fake "Bank of Thailand" Calls

Scammers impersonate Bank of Thailand (ธนาคารแห่งประเทศไทย) officials, claiming your account is involved in money laundering or fraud. They pressure you to transfer your money to a "safe account" for investigation — which is actually a mule account.

5. Fake Loan Approval Scams

Victims receive messages about pre-approved loans with attractive interest rates. To "process" the loan, they must pay upfront fees, provide personal documents, or install an app. No money is ever lent, and the fees and personal data are stolen.

Bank-Specific Fraud Patterns

Bank	Common Scam Vector	Fake App Risk	Phishing Frequency
SCB (ไทยพาณิชย์)	SMS phishing, fake SCB EASY	High	Very High
KBank (กสิกรไทย)	LINE impersonation, fake K PLUS	Very High	Very High
BBL (กรุงเทพ)	Fake loan offers, SMS phishing	Medium	High
KTB (กรุงไทย)	Government service impersonation	Medium	High
TMBThanachart (ทีทีบี)	Fake credit card approval	Medium	Medium
Krungsri (กรุงศรี)	Investment scam via LINE	Medium	Medium

How to Verify Legitimate Bank Communications

Legitimate Bank Contact

• Banks will never ask for your full password or OTP via phone, LINE, or SMS
• Banks will never ask you to install apps from links
• Banks will never pressure you to transfer money to a "safe account"
• Banks will never contact you first via LINE for account issues

Verification Steps

1. Hang up and call back — Use the number on the back of your bank card or from the official website
2. Check sender IDs carefully — Phishing SMS often has subtle differences in the sender name
3. Never click links in SMS — Open your banking app directly or type the URL manually
4. Visit a branch — If uncertain, go to a physical branch to verify any claim
5. Check the Bank of Thailand website — BOT publishes scam alerts regularly

Official Bank Hotlines

Bank	Hotline	Fraud Report
SCB	02-777-7777	Via SCB EASY app
KBank	02-888-8888	Via K PLUS app
BBL	1333	Via Bualuang app
KTB	02-111-1111	Via Krungthai NEXT
Krungsri	1572	Via KMA app

Protect Your Banking Credentials

When you need to share bank account numbers, transfer details, or temporary access information with family members or business partners, sending them through LINE or SMS leaves them exposed. Use LOCK.PUB to create a password-protected, encrypted memo that auto-expires. The recipient enters the password to view the details once, and the information self-destructs — nothing lingers in chat history.

Essential Banking Security Checklist

App Security

• Download banking apps only from official app stores
• Enable biometric authentication (fingerprint/Face ID)
• Turn on notifications for all transactions
• Set daily transfer limits
• Log out of banking apps when not in use on shared devices

Account Security

• Use unique passwords for each banking app
• Enable two-factor authentication
• Register for transaction SMS alerts
• Review linked devices regularly
• Update your registered phone number and email

Behavioral Security

• Never share OTPs with anyone, ever
• Never install apps from links sent via SMS or LINE
• Never click links in unexpected banking messages
• Verify any "bank officer" by calling the official hotline
• Report suspicious contacts immediately

What to Do If You Suspect Fraud

1. Freeze your account — Call your bank's hotline immediately
2. Change all passwords — Banking apps, email, and LINE
3. Screenshot everything — Save evidence of fraudulent messages or transactions
4. File a police report — thaipoliceonline.com or local station
5. Report to Bank of Thailand — Call 1213
6. Call 1441 — Anti-Online Scam Operation Center
7. Monitor your accounts — Watch for additional unauthorized activity for at least 30 days

The Bottom Line

Thai banks invest heavily in security, but no technology can prevent you from voluntarily handing over your credentials. The golden rule is simple: your bank will never ask for your password or OTP through any channel. If someone does, they are not from your bank.

For sharing sensitive banking details securely with people you trust, visit LOCK.PUB to create free encrypted memos that disappear after use.