Article

How to protect against phishing and fraud

June 24, 2026

Phishing is a common fraud method used to capture users' sign-in credentials. To protect your account against these attacks carried out via fake sites, misleading emails, and social media links, it is important to know some essential steps.

What is phishing?

Phishing is a fraud method in which attackers try to capture users' passwords, verification codes, and personal information by preparing fake screens, emails, or messages that look as if they come from an official organization. The main phishing methods that users may encounter on Paribu are fake Paribu sites, misleading links, and fake support representative communications.

How can secure access to your Paribu account be ensured?

Always access your Paribu account from the official address www.paribu.com or with the Paribu app downloaded from the Play Store or App Store. Manually typing the address bar is the safest method instead of search engine results, ads, or social media links.

Sign in by typing www.paribu.com in the browser address bar
Make sure HTTPS and the lock icon are shown in the address bar
Download the Paribu app only from the Google Play Store or App Store
Do not use APK files or installations from third-party app stores

Warning: Paribu results listed at the top of search engine ads may be fake. Always prefer typing the address manually.

How are SMS messages from Paribu verified?

Verification and notification SMS messages sent by Paribu are delivered with specific sender codes. Make sure the SMS header is Paribu and the sender code at the end of the message is B002, B016, B021, or B040. If you see a different header or sender code, do not click the links contained in the SMS and do not use the verification code it contains. When you receive a suspicious message, you can report it through Paribu Support.

Which links should you watch out for?

Fake sites that look like the Paribu sign-in screen typically reach users via links shared through different channels. Avoid signing in to Paribu by clicking links from the following sources:

Results listed in the ad areas of Google and other search engines
Links on social media platforms such as X (Twitter), Facebook, and Instagram
Links sent through messaging apps such as WhatsApp and Telegram
Links contained in emails
Links in forums, blogs, or comment areas

Paribu does not send links via email or SMS that direct you to sign in. If you are not sure whether a link reaching you is genuine, sign in to your account by typing www.paribu.com directly and check your notifications inside the app.

Fake support and customer representative fraud

A reported fraud method is one in which people pretending to be Paribu employees may contact you via phone, social media message, or email and ask for your password, 2FA code, or screen sharing. Paribu representatives never request such information.

Paribu employees do not ask for your password, 2FA code, or email verification code
Screen sharing or remote access apps such as TeamViewer or AnyDesk are not requested
Communication with Paribu is established only via the live support chat through Paribu Support

Warning: If you encounter a person pretending to be a Paribu employee, end the communication and connect to the live support chat through Paribu Support to report the situation.

What should you do if you think you have encountered phishing?

If you have encountered a suspicious site, email, or message, end the communication without entering any information and report the situation to Paribu Support. If you have shared your information, quickly apply the steps below to protect your account.

Change your password — Update your password from security settings by signing in to the Paribu app or www.paribu.com
End your active sessions — Close sessions you do not recognize from the device management section
Add two-factor authentication (2FA) — If not yet active, complete 2FA setup from security settings
Contact Paribu Support — Report the situation through the live support chat to receive support for additional security steps

When you notice unusual activity on your account, you can send an SMS to 0850 303 60 00 from the phone number registered to your Paribu account, with the text KİLİTLE, to temporarily close your account to actions. After the message, your account is secured and you can resolve the situation by contacting Paribu Support.

Frequently asked questions

Does Paribu request a password or 2FA code via email or SMS?

No. Paribu does not request your password, 2FA code, or email verification code on any communication channel. When you receive an email, SMS, or message asking for this information, do not respond and report it to Paribu Support.

I clicked on a link and entered my information, what should I do?

First, sign in manually to www.paribu.com, change your password, and enable two-factor authentication (2FA). Check your active sessions from the device management section and end sessions you do not recognize. Then report the situation to Paribu Support.

Which official communication channels does Paribu use?

Paribu communicates with its users only through in-app notifications, Paribu Support via www.paribu.com, notification emails sent to your registered email address, and SMS messages coming with designated sender codes. Do not heed messages from channels other than these.

How do I report a suspicious site or message?

You can start the live support chat through Paribu Support and share a screenshot of the suspicious site or message and, if applicable, the link address. The Paribu security team reviews the information you share and takes the necessary steps.

I think my account has been compromised, what should I do?

Send an SMS to 0850 303 60 00 with the text KİLİTLE from your registered mobile phone. This action temporarily closes your account to actions. Then connect to the live support chat through Paribu Support to create a request for reactivating your account and security steps.