Phishing sites impersonating Bank of America

PhishDestroy has recorded 56 phishing domains impersonating Bank of America since 2025-08-12, 2 of them in the last 30 days. The most used registrars are Vercel and NiceNIC; the most common TLDs are .com and .app. The official Bank of America domain is bankofamerica.com: any other site asking for your login or wallet is not Bank of America.

56
Domains, all time
2
Last 30 days
23
Online at last check
9
Confirmed takedowns

New domains in the last 90 days

2026-07-25: 02026-07-26: 02026-07-27: 02026-07-28: 02026-07-29: 02026-07-30: 02026-07-31: 02026-08-01: 02026-08-02: 02026-08-03: 12026-08-04: 02026-08-05: 02026-08-06: 02026-08-07: 02026-08-08: 12026-08-09: 02026-08-10: 02026-08-11: 02026-08-12: 02026-08-13: 02026-08-14: 02026-08-15: 02026-08-16: 02026-08-17: 12026-08-18: 12026-08-19: 02026-08-20: 02026-08-21: 02026-08-22: 02026-08-23: 02026-08-24: 02026-08-25: 02026-08-26: 02026-08-27: 02026-08-28: 02026-08-29: 02026-08-30: 02026-08-31: 02026-09-01: 02026-09-02: 12026-09-03: 12026-09-04: 12026-09-05: 02026-09-06: 02026-09-07: 02026-09-08: 02026-09-09: 32026-09-10: 12026-09-11: 22026-09-12: 22026-09-13: 02026-09-14: 02026-09-15: 22026-09-16: 02026-09-17: 02026-09-18: 02026-09-19: 02026-09-20: 02026-09-21: 02026-09-22: 12026-09-23: 02026-09-24: 12026-09-25: 02026-09-26: 02026-09-27: 02026-09-28: 02026-09-29: 02026-09-30: 02026-10-01: 02026-10-02: 02026-10-03: 02026-10-04: 02026-10-05: 02026-10-06: 02026-10-07: 02026-10-08: 02026-10-09: 02026-10-10: 02026-10-11: 02026-10-12: 02026-10-13: 02026-10-14: 02026-10-15: 02026-10-16: 02026-10-17: 02026-10-18: 02026-10-19: 02026-10-20: 02026-10-21: 02026-10-22: 0
Bank of America phishing domains detected per day: 19 from 2026-07-25 to 2026-10-22; peak 3.

How to tell a fake Bank of America site

Official domain: bankofamerica.com.

Words most often added to the brand in reported domains: bank, america, carmoneydrive, login, bofa, docs, relixamlkycacademy, boafinancialcrediunion, uni, dex.

  • Type the address yourself or use a bookmark; phishing links for Bank of America arrive through ads, search results, direct messages and fake support accounts.
  • Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
  • Bank of America does not ask you to confirm your password or card details through a link in an email or SMS.

Paste a suspicious address into the Homoglyph Checker or check it against the DestroyList.

Latest Bank of America phishing domains

The 50 most recently detected domains impersonating Bank of America
DomainFirst detectedStatus at last checkRegistrar
rasp-dynamic-bankofamerica.ph2026-09-24Online—
bofabrasil.com2026-09-22OnlineENOM
davidprivateaccount.github.io2026-09-15OfflineGitHub Pages
bofadeez44.vercel.app2026-09-15OnlineTucows Domains
bankofamericapay.ph2026-09-12Online—
bankofamericaunlocked.ph2026-09-12Online—
bankofamerica-uscom.vercel.app2026-09-11OfflineVercel
trumpaccountspro.com2026-09-11OnlineCloudflare
bankofamericagirl.ph2026-09-10Online—
connect-bankofamerica.ph2026-09-09Online—
bankofamericaclaimsfraud.ph2026-09-09Online—
bankofamericastockquotes.ph2026-09-09Online—
mentaclean.com2026-09-04OnlineNetwork Solutions
bankofamerica-com-update-login.ph2026-09-03Online—
bankofamericaemployee.ph2026-09-02Online—
nexus-capital-online.vercel.app2026-08-18OfflineVercel
bankofamericamailcompte.blogspot.com2026-08-17OnlineGoogle
bank0famerica.vercel.app2026-08-08OfflineVercel
bankofamerica-security.blogspot.com2026-08-03OnlineGoogle
aundrebank.netlify.app2026-07-24OfflineNetlify
backofamerican.digital2026-07-22OfflineSpaceship
bankofamerica.329841.com2026-07-15UnknownNICENIC
bankofamerica.431283.com2026-07-10UnknownNICENIC
online-cashpro-bofa.app2026-07-07OfflineOwnRegistrar
docs1011.weebly.com2026-07-02OfflineMarkMonitor
docs99203.weebly.com2026-07-02OfflineMarkMonitor
boadocument.weebly.com2026-06-12OfflineMarkMonitor
cbsbank-america.org2026-05-29Taken downGlobal Domain
securemyboa.com2026-05-28OfflineCNOBIN INFORMATION TECHNOLOGY
antiddoshuesos.github.io2026-04-30Taken downGitHub
bank-america-ten.vercel.app2026-04-15OfflineVercel
bamecks.webcindario.com2026-03-06OfflineTucows Domains
boainternational.vercel.app2026-03-03Taken downVercel
caffevergnano.xyz2026-02-26Offline—
sergio-o.top2026-02-26OfflineGlobal Domain
carmoneydrive.com.edbtpro.com2026-02-26Offline—
bluebankofamerica.com2026-02-19OnlineName.com
eaglestore.biz2026-02-13UnknownNiceNIC
trustpvasmm.com2026-02-12OfflineWeb Commerce Communications
mapachin.sbs2026-02-04OfflineCosmotown
wallet-bac.com2026-02-03OfflineRegistrar.eu
hungfapeper.sbs2026-01-25OfflineNameSilo
bankofamericalogin.sbs2025-12-25OfflineName.com
bankofamerica-am.vercel.app2025-12-21Taken downVercel
businescsitigrouponline.com2025-12-16Taken downMetaregistrar
bofa-livechat.com2025-12-16UnknownNiceNIC
boacustomerhelp.com2025-12-16UnknownNiceNIC
bank-of-america-login.vercel.app2025-12-06Taken downVercel
staging4374.iexpressmyopinion.com2025-11-07Taken downMesh Digital
pba.onl2025-11-06OfflineDynadot

All 56 Bank of America reports

Where they are registered and hosted

Registrars

  1. Vercel4
  2. NiceNIC3
  3. Vercel3
  4. NameSilo2
  5. GoDaddy.com2
  6. Cosmotown2
  7. Registrar.eu2
  8. Global Domain2

Top-level domains

  1. .com25
  2. .app10
  3. .ph9
  4. .sbs3
  5. .io2
  6. .net1
  7. .onl1
  8. .biz1

Hosting networks

  1. Akamai Connected Cloud9
  2. Amazon.com, Inc.6
  3. AS-COLOCROSSING, US3
  4. AMAZON-02, US3
  5. WEEBLY - Weebly, Inc., US3
  6. INMOTION, US2
  7. CLOUDFLARENET, US2
  8. ROUTERHOSTING, US2

Related

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Bank of America; share of all PhishDestroy reports: 0.02%.