Security

Staying safe online

That said, the internet is never completely risk‑free. By staying informed and taking a few simple precautions, you can greatly reduce the chance of fraud. Below you’ll find practical information to help you recognise risks and protect yourself online.

On this page:

• Current security threats
• How ING communicates with you
• How to recognise genuine ING websites and apps
• What you can do to stay safe
• Reporting security vulnerabilities

Current security threats

From time to time, we share updates about common scams we see online. Awareness is your first line of defence.

Bank guarantee fraud

This scam involves fake investment offers that promise high, quick returns through so‑called “bank guarantees” issued by well‑known banks such as ING.

Fraudsters often present convincing‑looking documents and claim that your investment is protected by letters of credit or guarantees from major international banks. In reality, these schemes are entirely fake. Once you transfer money, it disappears — along with the scammers.

Do not respond. These emails are fraudulent and no promised returns exist.

Fake job offers

Criminals sometimes pose as recruiters and advertise jobs that are actually designed to involve victims in money laundering. These messages may look convincing and even include personal details.These offers are not associated with ING in any way.

Do not respond. If you already have, consider reporting the incident to the police.

Phishing

Phishing emails pretend to come from trusted organisations, such as banks or retailers. They often urge you to “update” or “verify” your details via a link. That link leads to a fake website designed to steal your information. Once criminals have your details, they can misuse them to access your accounts.

Be cautious of any email asking for personal or security information — even if it looks genuine.

Fake ING websites and apps

Criminals sometimes create imitation ING websites or apps as part of phishing attacks. ING actively monitors the internet for these and works with international authorities to remove fake websites and apps as quickly as possible — often within the same day.

Advanced fee fraud

You may receive emails promising large sums of money — lottery winnings, inheritances, or overseas funds — but asking you to pay a small “fee” first. Sometimes these scams misuse the ING name to appear credible. In all cases, the money does not exist.

Do not respond. These messages are fraudulent. 

How ING communicates with you

Wondering whether a message is really from ING? Here’s what you can expect from us:

• We will address you by name.
• We will never ask you to share personal or security details by email.
• We do not include links in emails that ask you to enter PINs, passwords or codes.
• We will never threaten to close your account if you don’t respond to an email.
• We will never ask you to confirm details by email because of system upgrades.
• We use strong encryption and authentication to protect your transactions (this may vary by country — check with your local ING bank).

If you’re ever unsure about a message claiming to be from ING, contact your bank directly.

How to recognise genuine ING websites

Always make sure you’re on a secure ING website:

• The address starts with https://
• A lock icon appears in your browser’s address bar
• Clicking the lock shows a valid security certificate

ING works with trusted certification authorities such as VeriSign, GlobalSign and Thawte.

If you're in doubt - don't continue. Contact your bank.

Beware of fake apps

Even apps in official app stores can sometimes be fraudulent. Criminals may send emails or messages pretending to be ING and encourage you to download an app or “security update”. These fake apps are designed to steal your data.

Stay safe by: 

• Only downloading apps from official app stores
• Checking how often an app has been downloaded
• Reading reviews and checking the developer name
• Being cautious with unexpected messages or links

If you receive an unexpected message, don’t click the link. Instead, go directly to the app store or website you normally use.

How you can protect yourself

Protect your personal information

Your PIN, passwords, account numbers and security details are the keys to your account.

• Never share them with anyone
• Don’t write them down
• Securely destroy documents with personal information
• Be careful what you share on social media

Protect your devices

• Keep your software and operating system up to date
• Install and update antivirus and anti‑spyware software
• Use a personal firewall
• Only install software from trusted providers

Be cautious with spam

• Use spam filters
• Never reply to spam emails
• If it sounds too good to be true, it probably is

Reporting security vulnerabilities

Keeping our digital services safe is a top priority at ING. Despite our ongoing efforts, vulnerabilities can sometimes be discovered. If you believe you’ve found a security issue, we appreciate your help. 

Please report vulnerabilities via the Intigriti platform, which is our official responsible disclosure channel. You can find full details in the ING Responsible Disclosure programme.
 

More information

• The US Federal Trade Commission provides information on how to avoid phishing scams.
• The Anti-Phishing Working Group provides statistics on phishing attacks and advice for individuals and companies.