A client of BNP Paribas in France was defrauded of 490,000 euros in a sophisticated scam that combined a fake SMS from the delivery company Chronopost and an impersonation of a bank advisor, according to a report by French newspaper Le Parisien. The incident, which occurred in early 2026, highlights the evolving tactics used by cybercriminals.
The fraud began with a phishing SMS, purportedly from Chronopost, claiming a parcel delivery issue. When the victim called the provided number, she was connected to individuals posing as both Chronopost agents and, subsequently, a BNP Paribas financial advisor. The fake advisor gained her trust and convinced her to make several large transfers, totaling 490,000 euros, to accounts they controlled.
BNP Paribas has acknowledged the case, stating it is providing support to the client and cooperating with judicial authorities. The bank reiterated standard security advice, warning clients never to share confidential codes or make transfers at the request of an unknown caller, even if they claim to be from the bank.
French police and cybersecurity agencies continue to warn the public about such "voicemail phishing" or "vishing" scams, where phone calls are used to manipulate victims after initial contact via SMS or email. Authorities advise verifying any unsolicited contact directly through official channels.