Signs of Suspicious Bank Transactions to Watch Out For

16 July 2026

The development of digital banking services has made various financial activities more convenient. From fund transfers and bill payments to investments and account management, all of these can now be done using just a smartphone. This convenience makes transactions faster, more practical, and more efficient.

Behind all these conveniences, however, the threat of cybercrime continues to grow. Fraudsters are becoming increasingly creative in finding loopholes to obtain personal and banking information to gain access to victims’ accounts. Various new schemes are emerging, ranging from phishing, social engineering, and misuse of personal data to the takeover of digital banking accounts.

Many fraud cases actually begin with simple warning signs that are often overlooked. Unrecognized transaction notifications, requests for confidential information via phone, text message, email, or WhatsApp, and unusual login activity can all be indications of an attempt to misuse an account.

Understanding the characteristics of suspicious banking transactions is a crucial step in safeguarding your financial security. By recognizing these signs early on, customers can take immediate preventive action before greater losses occur.

What Is a Suspicious Bank Transaction?

A suspicious bank transaction is a financial activity that does not align with a customer’s usual behavior or indicates unauthorized access to an account or banking services. These activities can include both financial and non-financial transactions that potentially threaten the security of a customer’s data and funds.

The sooner suspicious activity is detected, the greater the chance of preventing potential losses.

What Are the Characteristics of Suspicious Bank Transactions to Watch Out For?

1. Transactions That You Never Made Appear
   

   One of the clearest signs is the appearance of transactions you never made. For example:

   1. Transfers to unknown accounts
   2. Payments for online purchases you never made
   3. Purchases of phone credit or data plans without your knowledge
   4. Withdrawals you never made

   If you notice activity like this, immediately check your account statement and report it to the bank through its official channels.

2. Receiving Login Notifications from Unknown Devices
   

   Digital banking services generally have security systems that can detect logins from new devices. If you receive a login notification when you are not actively accessing the banking app or website, you should be wary.

   This could indicate that someone else is attempting to access your account using personal information they’ve managed to obtain.

3. Requests for Passwords, PINs, OTPs, or Passcodes via Phone and Messages
   

   Banks never ask for confidential information such as:

   1. Internet banking passwords
   2. ATM PINs (Personal Identification Numbers)
   3. OTP codes (One-Time Passwords)
   4. Secure2u passcode
   5. Debit or credit card CVV

   If someone claiming to be a bank representative asks for this information over the phone, via text message, email, or instant messaging apps, it is a scam.

   Keeping your banking information confidential is one of the key steps to protecting your account from misuse.

4. Changes to Your Account Information Without Your Knowledge
   

   Be on the lookout for changes to:

   1. Registered phone number
   2. Email address
   3. Devices linked to your banking app
   4. Account profile information

   Any changes you did not make yourself are an indication that your account has been accessed by an unauthorized party.

5. A Transaction Approval Request Appears for a Transaction You Don’t Recognize
   

   When using digital banking services, you may receive a transaction approval notification on your mobile banking app.

   If you see a transaction authorization request for a transaction you never made, never approve it. Rejecting unknown transactions can help prevent funds from being transferred to unauthorized parties.

6. Balance Gradually Decreases Without Explanation
   

   It’s important to regularly check your balance and transaction history so that any unusual activity can be detected immediately.

7. Receiving Links or Websites That Resemble the Bank’s Official Site
   

   Phishing remains one of the most common fraud methods. Perpetrators typically send links that resemble the bank’s official website and ask customers to enter personal information as a condition for logging in.

   Before entering any information, make sure the website address actually comes from the bank’s official channel. Avoid accessing banking services through links sent by unknown parties.

What Steps Should You Take If You Discover a Suspicious Bank Transaction?

If you notice any of the signs above, immediately take the following steps:

• Change Your Digital Banking Password
  

  Your password is the primary layer of security that protects your account from unauthorized access. If there are indications that your account has been compromised, change your password immediately.

  Through the M2U ID App/Web service, customers can change their passwords independently, allowing them to immediately enhance account security without having to visit a branch.

  Use a strong password combination that includes uppercase letters, lowercase letters, numbers, and special characters.

• Change Your Secure2u Passcode
  

  In addition to your password, the Secure2u passcode also plays a crucial role in authorizing digital transactions.

  If there are signs of account misuse or you suspect that your security credentials may have been compromised, immediately change your Secure2u passcode via the M2U ID App to ensure the security of your transactions.

• Contact Maybank Customer Care Immediately
  

  Report any unknown activity and/or transaction to Maybank Customer Care through the Bank’s official channels so that it can be investigated and further security measures can be taken. Contact Maybank Customer Care at 1500611 or +622178869811 (from overseas), or email customercare@maybank.co.id

The sooner you report it, the greater the chance of minimizing the risk of loss.

What Are Some Tips for Keeping Your Bank Account and Banking Data Secure?

In addition to recognizing suspicious transactions, customers should also adopt good digital security habits, including:

• Do not share your passwords, PINs, OTPs, passcodes, or debit or credit card CVVs with anyone, including bank employees.
• Avoid using public Wi-Fi networks when accessing banking services.
• Always update your operating system and banking apps to the latest versions.
• Enable the security features available on your device.
• Check your account statements regularly.
• Change your digital banking password periodically.
• Make sure to access only the bank’s official websites and apps.
• Be wary of messages, emails, or phone calls asking for personal information or banking data.

Stay Vigilant to Protect Your Financial Security

The rise in digital activity makes awareness of banking security increasingly important. Various types of fraud can occur at any time and are often preceded by seemingly innocuous signs.

By recognizing the characteristics of suspicious banking transactions, regularly checking account activity, and keeping banking data confidential, the risk of account misuse can be minimized.

Maybank also provides various security features through the M2U ID App/Web, including the ability to change your Secure2u password dan passcode on your own. This simple step can serve as an extra layer of protection to ensure the security of your transactions and the convenience of your financial activities in the digital age.