I got a fake bank or payment message and clicked — who do I call?
If you typed anything in — a code, a password, a card number — call Your bank — card and payment line now: they can block the card, freeze the account and stop a transfer that is still pending. Then report it to Policie ČR — oznámení online / NÚKIB (158) so the sender and the site are taken down and the pattern is logged. If money actually left, Finanční arbitr (257 042 070) files the crime report the bank will ask for. Do not reply to the message, do not call any number inside it, and keep it — the headers and the link are evidence.
🗣️ What to say
"I received a message pretending to be from you at [time] and I entered [what: code / password / card details] on [site]. Please block my card and access now, check for pending transfers and tell me the case number."
🪜 Step by step
- Stop the bleedingCall the bank on the number on your card, not the one in the message. Block the card, change the online-banking password from another device, revoke any new device or payee that was added.
- Recall what is pendingInstant transfers are usually final; ordinary transfers and card payments can often still be stopped or charged back if you call within hours.
- Report it to Policie ČR — oznámení online / NÚKIBForward the message with headers or the SMS screenshot. This is what gets the domain and the number blocked for everyone else.
- Crime report at Finanční arbitrIf money was taken or your identity was used. The case number is what the bank and any insurer will ask for.
- Watch the next weeksScammers come back as "the fraud department" to "help you recover" the money. Nobody legitimate asks you to move money to a safe account.
📇 All contacts
❓ Frequently asked
I only clicked the link, entered nothing
Then you are probably fine. Update the phone, run a scan if it is a computer, change the password of the account the message imitated, and report the message anyway.
Will the bank refund me?
For unauthorised card payments and transfers you did not make, yes, minus a small excess unless you were grossly negligent. For a transfer you approved yourself under deception it depends on the bank and the country — ask in writing and escalate to Policie ČR — oznámení online / NÚKIB or the financial ombudsman if refused.
The message came from the bank's real number
Sender numbers and names can be spoofed. A real bank never asks for a full code, password or to move money. When in doubt, hang up and call the number on the card.
📎 Sources
- Policie ČR — oznámení online / NÚKIB →
- Finanční arbitr →
- Česká obchodní inspekce (ČOI) →
- Česká národní banka — ochrana spotřebitele →
🔎 Common searches
Recognise your own search? The answer above covers all of these.
- “fake bank text clicked link what to do Czechia”
- “report phishing Czechia”
- “bank sms scam code entered”
- “payment app phishing refund”
- “smishing report Czechia”
🧭 Is this still correct?
We check this information carefully, but phone numbers, websites and rules change — and sometimes we get something wrong. Spotted a mistake or a change? Let us know below.
⚠️ Readers report that something here may have changed — we are checking it.
✅ Thank you — this keeps the page up to date for everyone.