# Phishing sites impersonating Bank of America PhishDestroy has recorded 56 phishing domains impersonating Bank of America since 2025-08-12, 2 of them in the last 30 days. The most used registrars are Vercel and NiceNIC; the most common TLDs are .com and .app. The official Bank of America domain is bankofamerica.com: any other site asking for your login or wallet is not Bank of America. 56Domains, all time 2Last 30 days 23Online at last check 9Confirmed takedowns ## New domains in the last 90 days Bank of America phishing domains detected per day: 19 from 2026-07-25 to 2026-10-22; peak 3. ## How to tell a fake Bank of America site Official domain: bankofamerica.com. Words most often added to the brand in reported domains: bank, america, carmoneydrive, login, bofa, docs, relixamlkycacademy, boafinancialcrediunion, uni, dex. - Type the address yourself or use a bookmark; phishing links for Bank of America arrive through ads, search results, direct messages and fake support accounts. - Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters. - Bank of America does not ask you to confirm your password or card details through a link in an email or SMS. Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check). ## Latest Bank of America phishing domains The 50 most recently detected domains impersonating Bank of America Domain | First detected | Status at last check | Registrar | [rasp-dynamic-bankofamerica.ph](https://phishdestroy.io/domain/rasp-dynamic-bankofamerica.ph/) | 2026-09-24 | Online | — | [bofabrasil.com](https://phishdestroy.io/domain/bofabrasil.com/) | 2026-09-22 | Online | ENOM | [davidprivateaccount.github.io](https://phishdestroy.io/domain/davidprivateaccount.github.io/) | 2026-09-15 | Offline | GitHub Pages | [bofadeez44.vercel.app](https://phishdestroy.io/domain/bofadeez44.vercel.app/) | 2026-09-15 | Online | Tucows Domains | [bankofamericapay.ph](https://phishdestroy.io/domain/bankofamericapay.ph/) | 2026-09-12 | Online | — | [bankofamericaunlocked.ph](https://phishdestroy.io/domain/bankofamericaunlocked.ph/) | 2026-09-12 | Online | — | [bankofamerica-uscom.vercel.app](https://phishdestroy.io/domain/bankofamerica-uscom.vercel.app/) | 2026-09-11 | Offline | Vercel | [trumpaccountspro.com](https://phishdestroy.io/domain/trumpaccountspro.com/) | 2026-09-11 | Online | Cloudflare | [bankofamericagirl.ph](https://phishdestroy.io/domain/bankofamericagirl.ph/) | 2026-09-10 | Online | — | [connect-bankofamerica.ph](https://phishdestroy.io/domain/connect-bankofamerica.ph/) | 2026-09-09 | Online | — | [bankofamericaclaimsfraud.ph](https://phishdestroy.io/domain/bankofamericaclaimsfraud.ph/) | 2026-09-09 | Online | — | [bankofamericastockquotes.ph](https://phishdestroy.io/domain/bankofamericastockquotes.ph/) | 2026-09-09 | Online | — | [mentaclean.com](https://phishdestroy.io/domain/mentaclean.com/) | 2026-09-04 | Online | Network Solutions | [bankofamerica-com-update-login.ph](https://phishdestroy.io/domain/bankofamerica-com-update-login.ph/) | 2026-09-03 | Online | — | [bankofamericaemployee.ph](https://phishdestroy.io/domain/bankofamericaemployee.ph/) | 2026-09-02 | Online | — | [nexus-capital-online.vercel.app](https://phishdestroy.io/domain/nexus-capital-online.vercel.app/) | 2026-08-18 | Offline | Vercel | [bankofamericamailcompte.blogspot.com](https://phishdestroy.io/domain/bankofamericamailcompte.blogspot.com/) | 2026-08-17 | Online | Google | [bank0famerica.vercel.app](https://phishdestroy.io/domain/bank0famerica.vercel.app/) | 2026-08-08 | Offline | Vercel | [bankofamerica-security.blogspot.com](https://phishdestroy.io/domain/bankofamerica-security.blogspot.com/) | 2026-08-03 | Online | Google | [aundrebank.netlify.app](https://phishdestroy.io/domain/aundrebank.netlify.app/) | 2026-07-24 | Offline | Netlify | [backofamerican.digital](https://phishdestroy.io/domain/backofamerican.digital/) | 2026-07-22 | Offline | Spaceship | [bankofamerica.329841.com](https://phishdestroy.io/domain/bankofamerica.329841.com/) | 2026-07-15 | Unknown | NICENIC | [bankofamerica.431283.com](https://phishdestroy.io/domain/bankofamerica.431283.com/) | 2026-07-10 | Unknown | NICENIC | [online-cashpro-bofa.app](https://phishdestroy.io/domain/online-cashpro-bofa.app/) | 2026-07-07 | Offline | OwnRegistrar | [docs1011.weebly.com](https://phishdestroy.io/domain/docs1011.weebly.com/) | 2026-07-02 | Offline | MarkMonitor | [docs99203.weebly.com](https://phishdestroy.io/domain/docs99203.weebly.com/) | 2026-07-02 | Offline | MarkMonitor | [boadocument.weebly.com](https://phishdestroy.io/domain/boadocument.weebly.com/) | 2026-06-12 | Offline | MarkMonitor | [cbsbank-america.org](https://phishdestroy.io/domain/cbsbank-america.org/) | 2026-05-29 | Taken down | Global Domain | [securemyboa.com](https://phishdestroy.io/domain/securemyboa.com/) | 2026-05-28 | Offline | CNOBIN INFORMATION TECHNOLOGY | [antiddoshuesos.github.io](https://phishdestroy.io/domain/antiddoshuesos.github.io/) | 2026-04-30 | Taken down | GitHub | [bank-america-ten.vercel.app](https://phishdestroy.io/domain/bank-america-ten.vercel.app/) | 2026-04-15 | Offline | Vercel | [bamecks.webcindario.com](https://phishdestroy.io/domain/bamecks.webcindario.com/) | 2026-03-06 | Offline | Tucows Domains | [boainternational.vercel.app](https://phishdestroy.io/domain/boainternational.vercel.app/) | 2026-03-03 | Taken down | Vercel | [caffevergnano.xyz](https://phishdestroy.io/domain/caffevergnano.xyz/) | 2026-02-26 | Offline | — | [sergio-o.top](https://phishdestroy.io/domain/sergio-o.top/) | 2026-02-26 | Offline | Global Domain | [carmoneydrive.com.edbtpro.com](https://phishdestroy.io/domain/carmoneydrive.com.edbtpro.com/) | 2026-02-26 | Offline | — | [bluebankofamerica.com](https://phishdestroy.io/domain/bluebankofamerica.com/) | 2026-02-19 | Online | Name.com | [eaglestore.biz](https://phishdestroy.io/domain/eaglestore.biz/) | 2026-02-13 | Unknown | NiceNIC | [trustpvasmm.com](https://phishdestroy.io/domain/trustpvasmm.com/) | 2026-02-12 | Offline | Web Commerce Communications | [mapachin.sbs](https://phishdestroy.io/domain/mapachin.sbs/) | 2026-02-04 | Offline | Cosmotown | [wallet-bac.com](https://phishdestroy.io/domain/wallet-bac.com/) | 2026-02-03 | Offline | Registrar.eu | [hungfapeper.sbs](https://phishdestroy.io/domain/hungfapeper.sbs/) | 2026-01-25 | Offline | NameSilo | [bankofamericalogin.sbs](https://phishdestroy.io/domain/bankofamericalogin.sbs/) | 2025-12-25 | Offline | Name.com | [bankofamerica-am.vercel.app](https://phishdestroy.io/domain/bankofamerica-am.vercel.app/) | 2025-12-21 | Taken down | Vercel | [businescsitigrouponline.com](https://phishdestroy.io/domain/businescsitigrouponline.com/) | 2025-12-16 | Taken down | Metaregistrar | [bofa-livechat.com](https://phishdestroy.io/domain/bofa-livechat.com/) | 2025-12-16 | Unknown | NiceNIC | [boacustomerhelp.com](https://phishdestroy.io/domain/boacustomerhelp.com/) | 2025-12-16 | Unknown | NiceNIC | [bank-of-america-login.vercel.app](https://phishdestroy.io/domain/bank-of-america-login.vercel.app/) | 2025-12-06 | Taken down | Vercel | [staging4374.iexpressmyopinion.com](https://phishdestroy.io/domain/staging4374.iexpressmyopinion.com/) | 2025-11-07 | Taken down | Mesh Digital | [pba.onl](https://phishdestroy.io/domain/pba.onl/) | 2025-11-06 | Offline | Dynadot | [All 56 Bank of America reports](https://phishdestroy.io/domain/?brand=Bank of America) ## Where they are registered and hosted ### Registrars - Vercel4 - [NiceNIC](https://phishdestroy.io/registrar/nicenic/)3 - Vercel3 - [NameSilo](https://phishdestroy.io/registrar/namesilo/)2 - [GoDaddy.com](https://phishdestroy.io/registrar/godaddy/)2 - [Cosmotown](https://phishdestroy.io/registrar/cosmotown/)2 - [Registrar.eu](https://phishdestroy.io/registrar/registrar-eu/)2 - [Global Domain](https://phishdestroy.io/registrar/global-domain-group/)2 ### Top-level domains - [.com](https://phishdestroy.io/tld/com/)25 - [.app](https://phishdestroy.io/tld/app/)10 - [.ph](https://phishdestroy.io/tld/ph/)9 - [.sbs](https://phishdestroy.io/tld/sbs/)3 - [.io](https://phishdestroy.io/tld/io/)2 - [.net](https://phishdestroy.io/tld/net/)1 - [.onl](https://phishdestroy.io/tld/onl/)1 - [.biz](https://phishdestroy.io/tld/biz/)1 ### Hosting networks - Akamai Connected Cloud9 - Amazon.com, Inc.6 - AS-COLOCROSSING, US3 - AMAZON-02, US3 - WEEBLY - Weebly, Inc., US3 - INMOTION, US2 - CLOUDFLARENET, US2 - ROUTERHOSTING, US2 ## Related - [Typosquatting](https://phishdestroy.io/glossary/typosquatting/) - [Homoglyph](https://phishdestroy.io/glossary/homoglyph/) - [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/) - [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) - [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator) - [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action) - [All impersonated brands](https://phishdestroy.io/brand/) Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Bank of America; share of all PhishDestroy reports: 0.02%. Canonical: https://phishdestroy.io/brand/bank-of-america/