
Published
09/14/2026, 12:52Fraud schemes are becoming more sophisticated: fraudsters are using biometrics, phishing websites, malicious apps and even legitimate business tools. MBANK – one of Kyrgyzstan’s largest digital banks, which regularly encounters attempts at financial fraud – has issued a warning about the latest schemes.
One such scheme begins with a call purporting to be from the National Bank, the State Committee for National Security (GKNB) or a mobile network operator. Under the pretext of verifying details, the fraudsters ask the victim to quote a code from an SMS, after which they switch the call to a video call and capture an image of the victim’s face. The data obtained can be used to access banking apps and withdraw money.
Another scam involves online purchases and sales. Criminals send links to fake bank or payment service pages, where the user enters their login, password or completes photo verification. This information immediately falls into the hands of the fraudsters.
A simpler variant is also common: an offer of goods or equipment at a suspiciously low price, with a demand for prepayment. Once the money has been received, the seller ceases all communication.
Separately, fraudsters use malicious apps disguised as programmes for taking part in tenders or for registration. Once installed, such an app can gain access to SMS messages, passwords and transactions on the smartphone.
Another scam involves setting up a sole trader business and activating the M+ service. An intermediary is offered the chance to run a supposedly remote business: goods are listed via their sole trader business, and after payment is received, they are asked to transfer the proceeds to third-party accounts under the pretext of covering logistics or procurement costs. As a result, the goods are never delivered, whilst the sole trader may find themselves implicated in a fraudulent scheme and held liable for the transactions.
Banks recommend that you do not disclose codes received via SMS, do not click on suspicious links, and only install apps from the App Store and Google Play. If you suspect your account has been hacked or that fraud has occurred, banks advise contacting customer support immediately.



