{"type":"document","data":{"id":"7b80d6dd-1235-4a38-a341-ef1185588f06","localeString":"en-GB","publishDate":"2026-04-17T11:38:05.620+02:00","contentType":"onecms:productPage","hasMacro":false,"flexPageMetadata":{"afmBanner":false,"robotInstruction":{"noIndex":false,"noFollow":false},"description":"All about recognising phishing and protecting yourself against it."},"mainHeaderZone":{"componentType":"productHeader","coreHeader":{"body":"You’ve probably heard about phishing before. And chances are, you’ve already deleted several phishing messages from your inbox. Some fake emails are easy to spot right away. But others are a bit harder to distinguish from real ones. So what should you look out for? And how can you recognise a phishing email?","headerImage":{"transformBaseUrl":"https://assets.ing.com/transform/382dcc78-19df-4ffe-8adb-a272cb3ae79e/Underwater-shot-of-snorkeler-with-hand-up-taking-a-selfie-with-yellow-fish","type":"image","width":4004,"altTextEN":"\"\"","altTextNL":"\"\"","altTextFR":"\"\"","altTextDE":"\"\"","original":"https://assets.ing.com/m/61dd0ea4ac28cf1e/original/Underwater-shot-of-snorkeler-with-hand-up-taking-a-selfie-with-yellow-fish.JPG","extension":"jpg"},"title":"Would you recognise phishing?"},"backLink":{"textLink":{"url":"/en/bank/safe-banking","text":"Safe banking"}}},"flexZone":{"flexComponents":[{"componentType":"paragraph","title":"Links Can Be Risky – These Are the Warning Signs","richBody":{"value":"<p><span><span><span><span><span><span><span>Scammers send phishing messages that appear to come from a trusted sender, such as ING. These can be emails, but also SMS or WhatsApp messages. They may also pretend to be other companies or organisations, such as PostNL, the CJIB, DigiD, the Chamber of Commerce (KvK), or Woningnet.</span></span></span></span></span></span></span></p><p><span><span><span><span><span><span><span>Phishing messages often contain a link. When you click on it, you’re taken to a fake website that closely resembles the official company site. The scammers hope to trick you into entering your personal or login details. If you log in on the fake site, you’re sending your login codes directly to a fraudster who can then access your account.</span></span></span></span></span></span></span></p><p><span><span><span><span><span><span><span>Fortunately, there are often warning signs that can help you recognise a phishing message</span></span></span></span></span></span></span></p><ul><li><span><span><span><span><span><span><span>Are you asked to log in quickly via a link in the message? For example, for “security reasons” or to “avoid charges”? That’s suspicious. Only log in via the ING app or the login page you access yourself via the ING website. </span></span></span></span></span></span></span></li><li><p>Scammers send phishing messages that appear to come from a trusted sender, such as ING. These can be emails, but also SMS or WhatsApp messages. They may also pretend to be other companies or organisations, such as PostNL, the CJIB, DigiD, the Chamber of Commerce (KvK), or Woningnet.</p><p>Phishing messages often contain a link. When you click on it, you’re taken to a fake website that closely resembles the official company site. The scammers hope to trick you into entering your personal or login details. If you log in on the fake site, you’re sending your login codes directly to a fraudster who can then access your account.</p><p>Fortunately, there are often warning signs that can help you recognise a phishing message</p></li><li>Are you asked to log in quickly via a link in the message? For example, for “security reasons” or to “avoid charges”? That’s suspicious. Only log in via the ING app or the login page you access yourself via the ING website.</li><li>Are you asked to enter personal details or codes after clicking the link? Ask yourself whether that makes sense. A fraudster can use this information to contact you and gain your trust as part of another scam like bank helpdesk fraud.</li></ul>"}},{"componentType":"paragraph","title":"Recognising Phishing Through a Link","richBody":{"value":"<p>In addition to the warning signs in the message, you can also check the link itself. Let’s take the following link as an example: https://www.<strong>ing.nl</strong>/veiligbankieren This points to a page on the domain ing.nl; the <strong>bold </strong>part of the link.</p><p>But what if the link is: https://www.ing.<strong>nl.phishing</strong>/veiligbankieren? Then you’re not on ING’s website, but on a page hosted on the fake domain <strong>nl.phishing</strong>. That’s the actual site the hyperlink leads to.</p><p>Good to know: In addition to familiar domain names like .nl and .com, <strong>.ing</strong> is now also a valid domain. This means anyone can create a website ending in .ing. For example: www.bankier.online.ing But such a website is not from us. That may take some getting used to. Always check that a link to an ING webpage ends in ing.nl. Then you’re in the right place.</p><ul></ul>"}},{"componentType":"paragraph","title":"What Can You Do to Protect Yourself?","richBody":{"value":"<ul><li><strong>Check the sender of the message</strong>. ING only sends emails from the following domains: @ing.nl, @ing.com, @mail.ing.nl, @emailing.ing.nl, @verzekeren.ing.nl, @businessboost.nl, @emailing.businessboost.nl, or @ingprivatebanking.nl..</li><li><strong>Never log in via a link</strong>. We will never send you a link to log in directly to Mijn ING. Messages you receive in the ING app or via Mijn ING are trustworthy, as they are delivered in your secure environment. If there’s an important message waiting for you in the ING app or Mijn ING, you may receive an email, push notification or SMS to let you know. These messages never contain a link to the login page. </li><li><strong>Bookmark your login pages </strong>in your browser and use those when logging in.</li><li><strong>Check where a link leads before clicking. </strong>On a smartphone: press and hold the link (don’t tap!) to preview the address. On a laptop or PC: hover your cursor over the link to see the web address. Ignore the https:// part. The most important part is what comes directly after that and before the first single forward slash /. That’s the domain name, and it tells you which website the link leads to.</li></ul>"}},{"componentType":"paragraph","title":"Have You Received a Phishing Message?","richBody":{"value":"<p><span><span><span><span><span><span><span>If you receive a message claiming to be from ING but you’re unsure about it, forward it immediately to:<br /><a href=\"mailto:valse-email@ing.nl\">valse-email@ing.nl</a> Then delete it from your inbox. We use messages sent to this address to help take down fake websites. </span></span></span></span></span></span></span><span><span><span><span><span><span><span>Have you entered any details on a phishing site or want to report fraud? Contact our ING Hotline immediately via 020 22 888 00.</span></span></span></span></span></span></span></p><p><span><span><span><span><span><span><span>When forwarding a suspicious message, do not include any personal data or documents containing personal information. For more information about your rights, please refer to the <a data-type=\"external\" href=\"https://assets.ing.com/m/2849adb17b0abf4a/original/pdf_DBNL-Privacy-Statement-ENG.pdf\">Privacy Statement</a> on our website.</span></span></span></span></span></span></span></p>"}},{"componentType":"paragraph","title":"Want to Learn More About Phishing?","richBody":{"value":"<ul><li>View phishing emails from various organisations via the external <a href=\"https://www.fraudehelpdesk.nl/actueel/valse-emails/\">Fraude Helpdesk overview</a></li><li>Learn how to <a data-type=\"internal\" href=\"/en/bank/safe-banking/types-of-fraud-and-scam/impersonating-bank-employee-scam\">recognise phone scams</a></li><li>See examples of <a data-type=\"internal\" href=\"/en/bank/safe-banking/types-of-fraud-and-scam/recognising-phishing-letters\">phishing letters</a></li><li>Stay alert for <a data-type=\"internal\" href=\"/en/bank/safe-banking/types-of-fraud-and-scam/smishing-phishing-via-sms\">phishing via SMS (smishing)</a></li></ul>"}},{"componentType":"linkList","iconTitle":{"icon":{"transformBaseUrl":"https://assets.ing.com/transform/f52818ae-9791-4ef7-9799-d3f991c2e3b4/Functionalities-Lock_Confirmation_Outline","type":"image","width":32,"altTextNL":"\"\"","original":"https://assets.ing.com/m/5b979bd44d912a17/original/Functionalities-Lock_Confirmation_Outline.svg","extension":"svg"},"title":"Safe banking"},"textLinks":[{"url":"/en/bank/safe-banking/report-fraud","text":"Report fraud to the Hotline"},{"url":"/de-ing/veilig-bankieren/soorten-oplichting-fraude","text":"More types of scams and fraud"},{"url":"https://zowerktfraude.nl/","text":"Recognising & preventing fraud"},{"url":"/en/bank/safe-banking/5-bs/update-your-browser-and-operating-system","text":"Which browser, even with screen reader"}]},{"componentType":"linkList","iconTitle":{"title":"Learn more"},"textLinks":[{"url":"/en/bank/safe-banking/report-fraud","text":"Report fraud immediately"},{"url":"/de-ing/veilig-bankieren/wat-wij-doen/houd-je-aan-de-veiligheidsregels","text":"ING's security policy"},{"url":"/de-ing/toegankelijkheid","text":"Need banking help?"}]}]}}}