A new online fraud is targeting Pakistani banking users through advertisements on Facebook, promoting a fake app of Habib Bank Limited (HBL). This fake app, which is being falsely presented as the “2025 updated version” of HBL’s official mobile banking application, has been designed to steal your banking card information.
This fake advertisement looked something like this.
Although this fake advertisement promoted on Facebook has now been removed, its harmful signup link is still active and remains a threat. The URL of the fake website is completely different from the original HBL website, which uses a simple and clear URL: “https://www.hbl.com/“.
The phishing site imitates HBL’s branding and even shows images of HBL’s debit and credit cards to make it appear authentic. After reaching the site, victims are asked to enter their banking card information, which includes:
-
Card number
-
CVV (security code)
-
Expiry date
-
Cardholder name
-
Mobile number
The fake website looked something like this.
After submitting the card details, users are told that “the bank will contact them within 1 to 2 hours for OTP verification,” as shown in the screenshot above.
What you should do
-
Avoid downloading apps through links from social media advertisements or unknown websites.
-
Rely only on official sources:
-
HBL’s official website: https://www.hbl.com/
-
HBL’s verified app on Google Play Store: HBL Mobile App
-
-
Report suspicious advertisements or websites to HBL and relevant authorities such as PTA.
-
Never share sensitive card information on websites that do not match HBL’s official domain.
Notably, HBL has not issued any separate “2025 version” of its mobile app. Users are requested to remain alert and verify all banking communications through HBL’s official channels.
