Verify Before You Trust: Your Shield Against Fake Updates

This is to alert you about a growing cyber threat targeting banking app users. Cybercriminals are now sending fake banking app update notifications designed to install malware that can steal your credentials and funds. 

These malicious update requests usually mimic legitimate bank communications. But just as you wouldn’t allow an unverified “security guard” into yourhome, you should never accept app update requests that don’t come directly from Fidelity Bank’s verified platforms. 

Red Flags to Look Out for:

  • Pop-ups claiming “URGENT UPDATE REQUIRED”
  • SMS, email, or WhatsApp links to download “security updates
  • Requests to disable security features to install updates
  • Unofficial websites offering “faster” or “enhanced” versions
  • Messages stating “Your app will stop working without this update”
  • Requests to install Android Package Kit (APK) files from websites
  • “Special” or “emergency” update links
  • Pop-ups while browsing unrelated websites

A recent example highlights the risk: between June and December 2025, the trusted software Notepad++ was compromised through a malicious update sent through similar notifications listed above which consequently affected thousands of users. The same tactic is now being used for banking apps.

Seemingly legitimate update prompts can be traps if they don’t come from the right source, so ensure you verify before you trust.

For enquiries, verification and to report any suspicious update, kindly email [email protected] or [email protected]