Online Marketplace Sold Stolen Bank Information: Check Your Accounts

Federal prosecutors have charged Abdellah Belmili, a man from Algeria, with running two illegal websites. These sites allegedly sold stolen financial information, including login credentials for bank accounts. The sites also sold phishing kits, which are tools criminals use to create fake bank websites that trick people into entering their usernames and passwords. The phishing kits specifically targeted major American banks. If you bank with a major American financial institution, your login credentials may have been among those stolen and sold on these marketplaces.

While the exact banks and number of affected customers have not been disclosed, this case involves credentials from multiple major U.S. banks. Anyone who has received suspicious emails appearing to be from their bank, or noticed unauthorized activity on their accounts, could potentially be affected.

Here is what you should do right now. First, log into your bank accounts directly by typing your bank's web address into your browser, not by clicking any email links. Check all recent transactions for anything you do not recognize. Second, change your online banking passwords immediately. Make them strong and unique, different from passwords you use anywhere else. Third, enable two-factor authentication on all your bank accounts if you have not already done so. This adds an extra security step when logging in. Fourth, contact your bank directly if you see any suspicious transactions or if you clicked on any links in emails claiming to be from your bank. To stay protected long term, never click links in emails claiming to be from your bank. Instead, always type your bank's website address directly into your browser or use the official mobile app. Be suspicious of any email asking you to verify your account, update your information, or confirm a transaction. Real banks will never ask you to provide your full password or account number via email. Set up account alerts with your bank so you receive text or email notifications for all transactions over a certain amount.