Mexico warns of bank app and site fraud

Mexico has seen several recent alerts about fraud targeting financial services, from sponsored search ads that lead to cloned bank pages to altered banking apps that can try to steal personal data and money. Sovos also warned that artificial intelligence is expanding fraud options through deepfakes and synthetic identities, in a context where CONDUSEF recorded more than 35,000 complaints over possible financial fraud between January and May 2026.

What did Sonora Cibersegura detect?

Sonora Cibersegura warned about sponsored search ads that would direct users to cloned BBVA, Santander and Banco Azteca pages. The goal would be to capture users’ credentials and digital tokens, according to a report published by a Mexican outlet.

The warning focused on a simple but effective way to fool people trying to access online banking. First comes the ad, then the fake page imitates the interface of a well-known bank, and finally the user hands over sensitive data believing the site is legitimate.

What did they warn about banking apps?

Mexican coverage said altered banking apps can try to obtain personal data and money, and can operate even when the account has a password, verification code and biometrics.

Imagen Radio said two-factor authentication and biometrics do not replace mechanisms that can detect tampering inside the app itself. XEU, meanwhile, reported that this type of threat can alter how apps work, access confidential information and make money theft easier even with those layers of protection enabled.

What both warnings have in common is that traditional protection is not always enough once the software has been modified. In that scenario, the threat is not limited to capturing a password or token, since it can interfere with the entire app experience.

What did Sovos say about identity fraud?

Sovos said artificial intelligence is widening fraud opportunities in financial services through deepfakes and synthetic identities. The analysis also linked that scenario to the volume of complaints reported by CONDUSEF in the first five months of 2026.

According to the firm, between January and May 2026 the regulator logged more than 35,000 complaints over possible financial fraud. The figure appears as part of a broader pattern of identity theft and the use of automated tools to scale attacks against users and financial institutions.

The overlap between these alerts points to a fraud ecosystem that no longer relies on a single tactic. Cloned pages, deceptive ads, manipulated apps and identity spoofing techniques backed by artificial intelligence are all in play, with a clear focus on credentials, tokens and account access.