INCIBE alerts that it has detected a campaign to send emails that supplant the identity of important banking entities that operate in Spain. Pay attention to your inbox and be very careful if you receive this email from your bank: it is a scam to empty your checking account. Although it is one of the oldest strategies, today phishing continues to be one of the techniques preferred by cybercriminals to deceive victims. The reason is none other than that it continues to be highly effective, so there is little caution when checking our inbox. The Internet Security Office (OSI) of the National Cybersecurity Institute (INCIBE) has warned that criminals have returned to the fray. Specifically, they have detected a campaign to send fraudulent emails that supplant the identity of Banco Santander, Bankia and other large banking entities that operate in our country. Regardless of the bank you are impersonating, in all cases the mechanics are the same. The user receives an email that imitates the characteristics of the official communications of the bank. The text explains that the reason for the message is to activate a new function that allows strengthening the security of digital operations. The email includes a button that supposedly leads to the bank’s official website, but in reality it leads to a fake website that mimics the design of the legitimate portal. Here, the victim is asked to enter their access codes to online banking, and if they do, they will be in the hands of criminals, who can use them to steal your money. Sometimes the user is also asked for credit card data, which if provided can be used to make online purchases, among other malicious purposes. Phishing is one of the techniques most used by cybercriminals to gain user credentials. Here are some tricks that phishing uses to trick users into stealing their personal data by making them believe they are on a legitimate page. If you have received this email and have fallen into the trap, please contact your bank as soon as possible to report what happened. Keep in mind that this type of campaign is very common and is the order of the day, so be wary of unsolicited emails that invite you to enter your data. Whenever you have to carry out any banking operation, go to the official website of your bank by typing it in the address bar of your browser, use its official mobile application or call by phone to make sure.