Suspicious

Phishings targeting SMBC

Suspicious and active websites

Phishings targeting Smbc

Suspicious and active websites

Website
smbc.co.jp
About
AIOne of Japan's largest banks (Sumitomo Mitsui Banking Corporation). Phishing mimics the retail-banking login and the VPASS credit-card portal to harvest credentials and card data.

No active suspicious sites for SMBC right now.

← All brands · Browse the live feed

AIHow to verify a real SMBC URL

  • Legitimate SMBC URLs always end in smbc.co.jp (e.g. www.smbc.co.jp, account.smbc.co.jp). Anything else — including look-alike typosquats, hyphenated variations, or unfamiliar TLDs like .xyz / .top / .vip — is not SMBC.
  • The padlock icon proves TLS is active, not that the site is safe. Free DV certificates are issued to attackers in minutes; every active site listed above has a valid TLS certificate.
  • If you got the link from email, SMS, or social media, do not click it. Open smbc.co.jp from your browser bookmark or type the domain manually.
  • Real SMBC pages almost never ask for credentials immediately after clicking from a message — treat any such redirect as a phishing attempt until the domain is verified.