How to protect against phishing and fraud

Phishing is a widespread fraud method used to obtain users' sign-in details. It is important to know a few basic steps to protect your account against these attacks, which are carried out through fake sites, misleading emails and social media links.

What is phishing?

Phishing is a fraud method in which attackers prepare fake screens, emails or messages that look as if they come from an official institution, in order to obtain users' passwords, verification codes and personal information. The main methods Paribu users may come across are fake Paribu sites, misleading links and fake support representative contacts.

How do you access your Paribu account securely?

Always access your Paribu account through the official address www.paribu.com or with the Paribu app downloaded from Play Store or App Store. Typing the address into the address bar yourself is safer than using search engine results, ads or social media links.

• Sign in by typing www.paribu.com into your browser's address bar
• Make sure HTTPS and the padlock icon are shown in the address bar
• Download the Paribu app only through Google Play Store or App Store
• Do not use APK files or installations from third-party app stores

Warning: Paribu results that appear at the top of search engine ads can be fake. Always prefer typing the address yourself.

How do I tell suspicious SMS messages and emails apart?

The messages Paribu sends you are for information and verification; none of them asks for your password, your verification code or your personal information. Judge whether a message is genuine not by looking at the sender, but by looking at what it asks for.

• Any message that asks you for a password, a verification code or identity information is fake
• Be cautious with messages that create urgency, such as "your account will be closed" or "only 1 hour left to claim your prize"
• Instead of tapping the link in the message, open the app yourself and check your notifications
• If you receive a verification code without having started any action yourself, do not pass it on to anyone and review your account

Note: The one case in which Paribu sends you a link is the new device sign-in approval. That email arrives only right after you have attempted a sign-in, and the link works only on the device you were trying to sign in from. If you receive such an email without having attempted a sign-in, do not tap the link — it means someone knows your password; change your password right away.

Which links should you watch out for?

Fake sites that look like the Paribu sign-in screen usually reach users through links shared on various channels. Avoid signing in to Paribu by tapping links from the following sources:

• Results listed in the ad areas of Google and other search engines
• Links on social media platforms such as X (Twitter), Facebook and Instagram
• Links sent through messaging apps such as WhatsApp and Telegram
• Links contained in emails
• Links in forums, blogs or comment sections

If you are not sure whether a link that reached you is genuine, open the app yourself or sign in to your account by typing www.paribu.com, and check your notifications inside the app.

Fake support and customer representative fraud

One of the reported fraud methods is people who introduce themselves as Paribu employees contacting you by phone, social media message or email and asking for your password, verification code or screen sharing. Paribu representatives never request this kind of information.

• Paribu employees do not ask for your password, your verification code or your email verification code
• Screen sharing or remote access apps such as TeamViewer or AnyDesk are never requested
• Contact with Paribu is made through the Paribu Support live support chat in the app and on the website, or by phone at 0850 303 60 00; disregard "representative" contact from any other channel

Warning: If you come across someone introducing themselves as a Paribu employee, end the conversation and report the situation by connecting to the live support chat through Paribu Support.

Note: Paribu may call you from its official number, 0850 303 60 00, to request additional documents related to your request. These calls never ask for your password or verification code. A call from a different number that presents itself as Paribu is suspicious; if you are not sure, verify by calling 0850 303 60 00 yourself or through the live support chat before sharing any information.

What to do if you think you have encountered phishing

If you came across a suspicious site, email or message, end the interaction without entering any information and report it to Paribu Support. If you shared your details, apply these steps quickly to protect your account:

1. Change your password — Sign in to the Paribu app or www.paribu.com and update your password from the Security settings screen
2. End your active sessions — Close the sessions you do not recognize from the Manage devices screen
3. Add two-factor authentication (2FA) — Complete the 2FA setup from the Security settings screen if it is not active yet
4. Contact Paribu Support — Report the situation through the live support chat and get help with additional security steps

When you notice unusual activity on your account, you can temporarily close your account to actions by sending an SMS with the text KİLİTLE to 0850 303 60 00 from the phone number registered to your Paribu account. If you do not receive a confirmation message, do not wait; report the situation directly by calling the same number or by connecting to the live support chat.

---

Frequently asked questions

Does Paribu ask for a password or verification code by email or SMS?

No. Paribu never requests your password, your verification code or your email verification code on any communication channel. When you receive an email, SMS or message asking for this information, do not reply under any circumstances and report it to Paribu Support.

I tapped a link and entered my details, what should I do?

First sign in from the app or by typing www.paribu.com yourself, then change your password and enable two-factor authentication. Check your active sessions from the Manage devices screen and end the sessions you do not recognize. Then report the situation to Paribu Support.

I received a device approval email without signing in, what does it mean?

That email is sent only after a sign-in attempt. If you did not attempt to sign in, someone may have tried to sign in with your password. Do not tap the link, change your password right away and enable two-factor authentication.

Does Paribu call me by phone?

Yes, Paribu may call you from its official number, 0850 303 60 00. These calls may request additional documents related to your request. They never ask for your password or verification code. If you were called from a different number or are unsure, verify by connecting to Paribu Support before sharing any information.

Which official communication channels does Paribu use?

Paribu communicates with its users through in-app notifications, the Paribu Support live support chat in the app and on the website, notification emails sent to your registered email address, verification SMS messages, and the phone number 0850 303 60 00. Disregard messages that come from channels other than these.

How do I report a suspicious site or message?

You can start the live support chat through Paribu Support and share a screenshot of the suspicious site or message along with the link address, if any. The Paribu security team reviews the information you share and takes the necessary steps.

I think my account has been compromised, what should I do?

Send an SMS with the text KİLİTLE to 0850 303 60 00 from your registered mobile phone. This action temporarily closes your account to actions. Then connect to the live support chat through Paribu Support to create a request for reopening your account and for security steps.

---

Related articles

• Security tips — Recommendations for account security
• How to set up two-factor authentication (2FA) — 2FA setup
• How to change your password — Updating your password
• What is device management and how to use it — Managing linked devices
• What is the account security level and how to raise it — Security level and the three steps