Protect yourself from phishing scams impersonating the Monex group
With the recent global increase in phishing scams, we want to help you stay vigilant against fraudulent attempts.
Scammers are impersonating Monex group companies and employees through fake websites, emails, and phone calls. These scams often replicate our branding – including logos and colours, with subtle changes to appear legitimate.
We are aware of cases where individuals have unknowingly engaged with these fraudulent accounts and are working with authorities to address each instance. Monex is committed to raising awareness of these scams to help protect individuals and organisations from impersonators. To help protect you against these scams, we’ve outlined common warning signs that could indicate you’re dealing with fraudsters impersonating the Monex group.
Official Monex Website Domains
To verify you’re accessing legitimate Monex International sites, please use only the following domains:
- monexeurope.com
- monexcanada.com
- monfx.com
- monexeurope.eu
- monexeurope.eu/en/mesl/
- monexeurope.eu/en/memsv/
- monexeurope.eu/en/mesa/
- monexusa.com
Be sure to contact us only via the official details on our website’s contact us page for each Monex location.
Be vigilant and know the warning signs
Spear phishing is a sophisticated type of phishing in which attackers tailor messages to specific individuals or organisations to steal sensitive information such as login credentials, financial data, or personal details. Once fraudsters gain your confidence, they may impersonate Monex employees and request transactions, which could lead to significant financial losses if funds are transferred to their account.
What to look out for
If you receive a communication from someone you believe is not a true Monex representative, these warning signs could indicate a potential scam:
- Personalised emails: Scammers may send emails that appear to come from a trusted source, such as Monex, addressing you by name to gain your trust.
- Evasive phone calls: Fraudsters may evade questions and use vague threats or pressure tactics, claiming your account will be deleted or requesting large transfers to “protect” your funds.
- Urgent requests: Scam emails often create a sense of urgency, asking you to update account information, verify your identity, or make a payment immediately.
- Suspicious links or attachments: Be wary of links or attachments that prompt you to enter personal information or download files, as these may contain malware.
- Incorrect domain names: Always check the sender’s email domain. Phishing emails often use addresses that look similar to our official domain but may include slight misspellings or extra characters.
Examples of recent spear phishing attempts
- Phone calls claiming to be from Monex’s “crypto division,” encouraging you to invest funds in a trade promising high returns.
- Emails pretending to be from customer support, asking you to verify account details.
- Messages reporting suspicious activity on your account, requesting immediate action.
- Invoices or payment requests that appear to be from Monex’s accounts department.
How to protect yourself
- Verify the source: If you receive an unexpected email, especially one requesting sensitive information, contact us directly through official channels. Avoid replying to the email.
- Take control of communications: Scammers can mimic legitimate phone numbers on incoming calls. If unsure, end the call and phone back via the numbers listed on our official websites.
- Avoid clicking suspicious links: Hover over links to see the URL destination before clicking. Do not download attachments from unknown or suspicious sources.
- Enable Multi-Factor Authentication (MFA): MFA provides an added layer of security to your accounts, requiring more than just a password for login.
- Keep your software updated: Ensure your antivirus, anti-malware software, operating system, and applications are up to date with the latest security patches.
- Educate yourself: Familiarise yourself with common phishing tactics and stay informed about the latest security threats.
Reporting suspicious emails
If you receive communications that appear to be a phishing attempt or scam using the Monex brand, please forward it to our security team at security@monexeurope.com immediately. Avoid clicking any links or downloading attachments before doing so.
If you believe you have transferred funds to a suspected fraudster, contact your bank immediately.
By staying informed and vigilant, you can help protect yourself and your organisation from phishing scams.