Alert: This Fake HBL App is Stealing Bank Card Info

A dangerous new online scam has surfaced in Pakistan, targeting banking customers by promoting a fraudulent version of Habib Bank Limited’s (HBL) mobile app through Facebook ads.

The fake application—advertised as the “Updated 2025 Version” of HBL Mobile—is designed specifically to steal users’ banking card information.

How the Scam Works

The deceptive ads, now removed from Facebook, directed unsuspecting users to a malicious phishing site. While the ad has been taken down, the sign-up link remains active and continues to pose a significant security risk.

• The fake site imitates HBL’s official branding and even displays images of debit and credit cards to look convincing.
• Victims are asked to provide sensitive details, including:
  • Card number
  • CVV (security code)
  • Expiry date
  • Cardholder’s name
  • Mobile number

After entering the information, users are falsely told that “the bank will contact them within 1–2 hours for OTP verification.”

⚠️ Importantly, the phishing website’s URL is completely different from HBL’s legitimate site, which remains: https://www.hbl.com/.

False Claims of an “HBL 2025 App”

HBL has confirmed that there is no such separate “2025 version” of its mobile app. The only official app is the verified HBL Mobile App, available on the Google Play Store and Apple App Store.

What Customers Should Do

Authorities and cybersecurity experts strongly urge users to take the following precautions:

✅ Do not download apps through social media ads or unverified links.
✅ Only use official sources:

• HBL website: https://www.hbl.com/
• Verified HBL Mobile App on Play Store/App Store
  ✅ Never share card details on suspicious websites that don’t match the official HBL domain.
  ✅ Report fraudulent ads/websites to HBL, the Pakistan Telecommunication Authority (PTA), and other relevant authorities.

Wider Concerns About Digital Scams

This scam comes at a time when Pakistan has seen a spike in fraudulent financial apps. Recent reports revealed that illegal loan apps were charging up to 1,800% interest rates and misusing access to users’ contacts and photo galleries.

Final Word of Caution

As online fraudsters grow more sophisticated, Pakistani banking customers are reminded to remain extra vigilant. Always cross-check URLs, avoid links shared on social media, and rely solely on official banking channels.

HBL has urged its customers to verify all communications directly with the bank before taking any action.