A message that asks you to update, confirm or re-enter your card details is trying to take them. No bank asks for card data through a link.
What these messages look like
Scammers copy the layout of a real bank or payment app and add a deadline. The message usually claims that your card or account needs a data update to stay active, then sends you to a page that copies your bank's login screen.
“Your card data must be updated or the card will be stopped.”
“Your card has been blocked — update your data to reactivate it.”
“Confirm your card details so your salary transfer is not delayed.”
“Your payment was declined — re-enter your card to complete the update.”
Why “updating your data” is the perfect cover
Your bank already holds your data, and it updates it through its own systems — not by asking you to retype it. The phrase works because it sounds administrative: no prize, no threat, just a routine task. That is why the fake page copies the real login screen so closely, and why the request almost always arrives with a short deadline attached. In plain terms it is a phishing message and an impersonation dressed up as routine administration.
⚠️ A link to a page that asks for your card number, PIN or OTP.
⚠️ A domain that is not the bank's own official domain.
⚠️ Urgency: suspended, blocked, expiring, final notice.
⚠️ A page that asks for the OTP even though you arrived from a link.
⚠️ A request to install an app or share your screen to “complete” the update.
The rule that ends it
Open your bank's official app yourself, or type the bank's address from your card or statement. If your data really needs updating, you will see it there. Never continue from a link or a call you did not start.
If you entered your card details
Call your bank immediately and ask them to block the card and cancel any payment that is still pending. Change your banking password, then keep the message and screenshots as evidence and report through the official channel for your country.
Report it officially
🇦🇪 UAE
Dubai Police eCrime (ecrime.ae, 901) · Abu Dhabi Aman 8002626 · Ministry of Interior e-Crime · emergencies 999.
🇸🇦 Saudi Arabia
Ministry of Interior e-Crime platform · report financial fraud to your bank and SAMA · emergencies 911.
🇶🇦 Qatar
Q-CERT / NCSA [email protected] for cyber incidents · police 999 for fraud.
🇰🇼 Kuwait
CITRA Cyber Security [email protected] · Ministry of Interior cybercrime unit · emergency 112.
🇧🇭 Bahrain
National Cyber Security Center [email protected] · Ministry of Interior economic & electronic security · emergencies 999.
🇴🇲 Oman
OCERT [email protected] for cyber incidents · Royal Oman Police 9999.
