← FFCheckWho do I contact?BG
Money · Bulgaria
Updated September 2026

🎯 I got a fake bank or payment message and clicked — who do I call?

Direct answer

If you typed anything in — a code, a password, a card number — call Your bank — card and payment line now: they can block the card, freeze the account and stop a transfer that is still pending. Then report it to ГДБОП — киберпрестъпност / МВР — сигнал (112) so the sender and the site are taken down and the pattern is logged. If money actually left, МВР — сигнал (112) files the crime report the bank will ask for. Do not reply to the message, do not call any number inside it, and keep it — the headers and the link are evidence.

Call firstYour bank — card and payment line
Report toГДБОП — киберпрестъпност / МВР — сигнал
If that failsМВР — сигнал

🗣️ What to say

"I received a message pretending to be from you at [time] and I entered [what: code / password / card details] on [site]. Please block my card and access now, check for pending transfers and tell me the case number."

🪜 Step by step

  1. Stop the bleedingCall the bank on the number on your card, not the one in the message. Block the card, change the online-banking password from another device, revoke any new device or payee that was added.
  2. Recall what is pendingInstant transfers are usually final; ordinary transfers and card payments can often still be stopped or charged back if you call within hours.
  3. Report it to ГДБОП — киберпрестъпност / МВР — сигналForward the message with headers or the SMS screenshot. This is what gets the domain and the number blocked for everyone else.
  4. Crime report at МВР — сигналIf money was taken or your identity was used. The case number is what the bank and any insurer will ask for.
  5. Watch the next weeksScammers come back as "the fraud department" to "help you recover" the money. Nobody legitimate asks you to move money to a safe account.

📇 All contacts

Your bank — card and payment lineRecall a transfer, chargeback, block a card, freeze the accountImmediately, 24/7 — the number is on the back of your card
ГДБОП — киберпрестъпност / МВР — сигналReports of online fraud and phishingFor online scams and phishing📞 112🔗 www.cybercrime.bg
МВР — сигналReport online or at a stationAlways — the basis for bank, insurer and platform📞 112🔗 www.mvr.bg/signali
Помирителна комисия за платежни спорове (КЗП) / БНБFree dispute resolution with banks and payment institutionsAfter complaining to the bank without a solution📞 0700 111 22🔗 kzp.bg/pomiritelni-komisii
Комисия за защита на потребителите (КЗП)Complaints, inspections, fines for tradersWhen the shop refuses📞 0700 111 22🔗 kzp.bg/podavane-na-zhalba

❓ Frequently asked

I only clicked the link, entered nothing

Then you are probably fine. Update the phone, run a scan if it is a computer, change the password of the account the message imitated, and report the message anyway.

Will the bank refund me?

For unauthorised card payments and transfers you did not make, yes, minus a small excess unless you were grossly negligent. For a transfer you approved yourself under deception it depends on the bank and the country — ask in writing and escalate to ГДБОП — киберпрестъпност / МВР — сигнал or the financial ombudsman if refused.

The message came from the bank's real number

Sender numbers and names can be spoofed. A real bank never asks for a full code, password or to move money. When in doubt, hang up and call the number on the card.

📎 Sources

Last checked: 2026-09-26

🔎 Common searches

Recognise your own search? The answer above covers all of these.

  • “fake bank text clicked link what to do Bulgaria”
  • “report phishing Bulgaria”
  • “bank sms scam code entered”
  • “payment app phishing refund”
  • “smishing report Bulgaria”

🧭 Is this still correct?

We check this information carefully, but phone numbers, websites and rules change — and sometimes we get something wrong. Spotted a mistake or a change? Let us know below.

🔗 Related questions

Your tools for Bulgaria