# Bank phishing sites fake suspensions to evade repeat security checks

_Published Tuesday, November 3, 2026 at 11:16 AM EST · Security · Latest · Tier 2 — Notable_

![Modern laptop on desk in dark room under lamp light — Primary](https://www.zdnet.com/wp-content/uploads/sites/3/GettyImages-2210544722.jpg)

KELA researchers have exposed active banking-scam infrastructure that shows fake suspension notices to repeat visitors, ZDNET reported. The operation had 248 live domains at the time of reporting and has hosted over 300 scam domains since May.

The phishing kit records visitors' IP addresses and displays an apparent suspension on their second visit. That can mislead security teams checking whether a reported site has been removed, while first-time victims still see a cloned banking website. KELA has released a free Bank Phishing Check tool to compare organizations and official domains against sites uncovered in its research.

## Sources

- [ZDNET](https://www.zdnet.com/tech/bank-phishing-scam-kela/)

---
Canonical: https://techandbusiness.org/newswire/VTo-y5TCdBU9FWvt6ZmhsN
Published: 2026-11-03T16:16:18.927Z
Story chronology: 2026-11-03T14:19:05.000Z
Retrieved: 2026-11-04T20:52:59.106Z
Publisher: Tech & Business (techandbusiness.org)