Ongoing SMS Phishing Attempt Impersonating Pleo
Monitoring·Degraded performance

Fraudulent SMS messages are impersonating Pleo. Don’t enter passcode outside of app.pleo.io, mobile app or forward emails with links.

Wed, Oct 22, 2025, 08:53 AM
(1 day ago)
·
Affected components
💳 Transactions
Card
Fraudulent SMS messages are impersonating Pleo
Updates

Monitoring

Fraudulent SMS messages are impersonating Pleo. Don’t enter passcode outside of app.pleo.io, mobile app or forward emails with links.

Wed, Oct 22, 2025, 08:53 AM

Monitoring

“Fraudulent SMS messages are impersonating Pleo. Pleo will never ask you to share your passcode. [Check details]”

Tue, Oct 21, 2025, 05:13 PM(15 hours earlier)

Monitoring

“Fraudulent SMS messages are impersonating Pleo. Pleo will never ask you to share your passcode. [Check details]”

Tue, Oct 21, 2025, 05:09 PM

Monitoring

We are aware of fraudulent SMS messages impersonating Pleo, notifying recipients of declined transactions or login issues and instructing them to call a phone number or provide a reference number. These messages are not legitimate. Pleo will never ask customers to call a number or share sensitive information via SMS. As long as no action is taken (e.g., calling the number, clicking links, or sharing details), your account remains secure. If you have engaged with such messages and shared account information, please contact our support team immediately at support@pleo.io and freeze any affected Pleo cards, review your account for suspicious transactions, change your passcode and log out of all devices. Our teams continue to monitor and mitigate this phishing campaign. [DK advisory - updated 20th Oct] To improve security, we’ve retired the “Pleo” sender name in Denmark. All Pleo SMS including OTPs now come only from 54 54 67 44 (our registered long code, harder to spoof). If you receive any other sender or are asked to call/follow a link, don’t respond and ignore those messages.

Mon, Oct 20, 2025, 09:48 PM(19 hours earlier)

Monitoring

We are aware of fraudulent SMS messages impersonating Pleo, notifying recipients of declined transactions or login issues and instructing them to call a phone number or provide a reference number. These messages are not legitimate. Pleo will never ask customers to call a number or share sensitive information via SMS. As long as no action is taken (e.g., calling the number, clicking links, or sharing details), your account remains secure. If you have engaged with such messages and shared account information, please contact our support team immediately at support@pleo.io and freeze any affected Pleo cards, review your account for suspicious transactions, change your passcode and log out of all devices. Our teams continue to monitor and mitigate this phishing campaign.

Mon, Oct 20, 2025, 03:53 PM(5 hours earlier)
Powered by