Israeli Cyber Unit Warns of Fake Bamba Promotion Scam Stealing Personal Data

The Israeli National Cyber Directorate has issued a warning about a phishing scam impersonating a promotional campaign by the popular snack brand Bamba. The fraudulent message promises a 500-shekel voucher and mimics a legitimate marketing campaign, featuring familiar Bamba imagery, simple questions, colorful response buttons, and fake testimonials from supposed winners to create a sense of authenticity.

Victims are typically directed to a counterfeit website resembling an official page, where after answering basic questions, they are told they have won a prize. They are then asked to provide personal details such as full name, phone number, email, home address, and sometimes credit card information under the pretense of shipping the voucher or paying a small fee. Some scams request users to share verification codes sent to their phones, which can enable attackers to access accounts or authorize financial transactions.

The scam often encourages recipients to forward the message to friends or groups, spreading the fraud through trusted contacts. The Cyber Directorate advises against clicking links in chain messages, even if they appear to come from known contacts or include familiar logos. Instead, users should verify promotions by visiting official company websites or verified social media pages.

Warning signs include promises of valuable prizes for simple actions, countdown timers, limited winner notifications, urgent calls to act, requests to share the message, suspicious URLs, spelling errors, and unusual navigation before prize confirmation. Users are urged not to share ID numbers, passwords, one-time codes, or credit card details in response to such messages.

If a user has clicked a link but not entered information, they should close the page without downloading files or apps. Those who have shared passwords should immediately change them on official platforms and enable two-factor authentication. Credit card holders who provided details should contact their issuer promptly to report potential fraud. The Cyber Directorate recommends reporting suspicious incidents to their 119 hotline and contacting banks, credit companies, or police if financial theft or criminal activity is suspected.