The “My Account” team warned salary recipients and bank users about a new electronic scam in the Kurdistan Region.
Officials say fraudsters now contact people through WhatsApp. They pretend to represent banks and ask for card details and security codes. They claim they need this information to activate accounts. The team stressed that no bank requests sensitive data through messages or social media.
Recently, unknown accounts have targeted customers of the National Bank of Iraq (NBI) and QR account holders. Scammers send messages saying a verification code has arrived on the user’s phone. They then ask the victim to share the code for “activation.” Once users share the code, the attackers access the account and steal money.
A citizen from Sulaimaniyah mentioned that scammers stole $500 from his wife’s account. The case shows how quickly victims can lose funds when they share security information.
Officials explained that QR account users face this type of fraud. They also said they cannot directly stop these scams. Instead, they urged users to protect themselves through awareness. They repeated that banks never request card numbers or verification codes on messaging apps.
The National Bank of Iraq also issued a public warning. It said messages sent through WhatsApp or similar platforms in the bank’s name are fake. The bank confirmed it has no connection to these messages and described them as fraud attempts targeting customers.
Authorities urged the public to stay alert. They advised users not to share one-time passwords (OTP) under any circumstances. Even if a message looks official, users should never disclose these codes. They also encouraged customers to contact official bank service numbers immediately when they receive suspicious messages. Officials emphasized that awareness remains the strongest defense against digital fraud.

