Phishing sites impersonating Visa

PhishDestroy has recorded 38 phishing domains impersonating Visa since 2025-08-08, 5 of them in the last 30 days. The most used registrars are GoDaddy.com and Global Domain; the most common TLDs are .com and .app. The official Visa domain is visa.com: any other site asking for your login or wallet is not Visa.

38
Domains, all time
5
Last 30 days
28
Online at last check
6
Confirmed takedowns

New domains in the last 90 days

2026-07-25: 02026-07-26: 02026-07-27: 02026-07-28: 02026-07-29: 02026-07-30: 02026-07-31: 02026-08-01: 02026-08-02: 12026-08-03: 02026-08-04: 02026-08-05: 02026-08-06: 02026-08-07: 02026-08-08: 02026-08-09: 02026-08-10: 12026-08-11: 02026-08-12: 02026-08-13: 02026-08-14: 02026-08-15: 02026-08-16: 02026-08-17: 02026-08-18: 02026-08-19: 02026-08-20: 02026-08-21: 02026-08-22: 02026-08-23: 02026-08-24: 02026-08-25: 02026-08-26: 02026-08-27: 02026-08-28: 02026-08-29: 02026-08-30: 02026-08-31: 02026-09-01: 02026-09-02: 02026-09-03: 02026-09-04: 12026-09-05: 02026-09-06: 02026-09-07: 02026-09-08: 02026-09-09: 12026-09-10: 02026-09-11: 12026-09-12: 12026-09-13: 12026-09-14: 02026-09-15: 02026-09-16: 02026-09-17: 02026-09-18: 02026-09-19: 02026-09-20: 02026-09-21: 02026-09-22: 02026-09-23: 02026-09-24: 02026-09-25: 02026-09-26: 02026-09-27: 02026-09-28: 02026-09-29: 02026-09-30: 02026-10-01: 02026-10-02: 02026-10-03: 02026-10-04: 02026-10-05: 02026-10-06: 02026-10-07: 02026-10-08: 02026-10-09: 02026-10-10: 02026-10-11: 02026-10-12: 02026-10-13: 02026-10-14: 02026-10-15: 02026-10-16: 12026-10-17: 12026-10-18: 02026-10-19: 02026-10-20: 02026-10-21: 22026-10-22: 1
Visa phishing domains detected per day: 12 from 2026-07-25 to 2026-10-22; peak 2.

How to tell a fake Visa site

Official domain: visa.com.

Words most often added to the brand in reported domains: ccfgint, anami, lok, claim, evisacam, calgarypcg, epidoxchain, grandalliancebnk, digitap, wallet.

  • Type the address yourself or use a bookmark; phishing links for Visa arrive through ads, search results, direct messages and fake support accounts.
  • Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
  • Visa does not ask you to confirm your password or card details through a link in an email or SMS.

Paste a suspicious address into the Homoglyph Checker or check it against the DestroyList.

Latest Visa phishing domains

The 38 most recently detected domains impersonating Visa
DomainFirst detectedStatus at last checkRegistrar
boc.bankhk-center.com2026-10-22OnlineDynadot
kako-pl.lat2026-10-21OnlineSpaceship
norva.info2026-10-21OfflinePublicDomainRegistry.com
oop-sheets.living2026-10-17OnlineSpaceship
whatsapp.laptopsupdate.com2026-10-16OnlineHOSTINGER operations
saudisevisa.com2026-09-13OnlineGoDaddy.com
procedimiento.creditscolombia.com2026-09-12OfflineSquarespace Domains
heat-tobacco.com2026-09-11OnlineeNom
xfinancebnk.com2026-09-09OnlineSav.com
xp-invest.vercel.app2026-09-04OnlineVercel
docdaddy.in2026-08-10OnlineGoDaddy
epingenc.com.tr2026-08-02Online—
wealthnestsavings.com2026-07-01OnlineWeb Commerce Communications dba WebNic.c
flugsvampse.com2026-05-19OnlineEranet
usdtochinayuan.com2026-04-07OnlineNameCheap
7-slonov.ru2026-03-28OnlineRU-CENTER-RU
alfabez.eu2026-03-27OnlinePDR
mob.g2trck.com2026-03-27OnlineGoDaddy.com
finsagetrust.com2026-02-26OfflineWeb Commerce Communications
bitlyex.com2026-02-26Offline—
app.berkeleycreditbank.com2026-02-19OnlineDynadot
app.berkleycredit.com2026-02-19OnlineGlobal Domain
checkmay.com2026-02-19OfflineNameSilo
globaltechsupport.us2025-12-28OnlineGoDaddy.com
ibanking-retailldbs.com2025-12-26OfflineWeb Commerce Communications
am22fcu.web.app2025-12-14Taken downGoogle
loanfinance.github.io2025-12-12OnlineGitHub
claims-avici.money2025-12-10Taken downCloudflare
trevelyanbd.com2025-12-05Taken downGoDaddy.com
esnavs-gcc.com2025-11-20Taken downGoDaddy.com
wallet3-coin.com2025-11-01OfflineGname.com
digitap.app2025-10-26Taken downVercel
epidoxchain.com2025-09-20OnlineGlobal Domain
grandalliancebnk.com2025-09-17OnlineSav.com
calgarypcg.ca2025-09-09Taken downOpen Provider
claim.evisacam.cm2025-09-08OnlineLAGENCE DIGITALE
anami-lok.com2025-08-16OfflineAFRIREGISTER
ccfgint.com2025-08-08OfflineCosmotown

All 38 Visa reports

Where they are registered and hosted

Registrars

  1. GoDaddy.com5
  2. Global Domain2
  3. Sav.com2
  4. Web Commerce Communications2
  5. Spaceship2
  6. Cosmotown1
  7. AFRIREGISTER1
  8. LAGENCE DIGITALE1

Top-level domains

  1. .com23
  2. .app3
  3. .cm1
  4. .ca1
  5. .money1
  6. .io1
  7. .us1
  8. .eu1

Hosting networks

  1. CLOUDFLARENET, US4
  2. Amazon.com, Inc.4
  3. AS-COLOCROSSING, US3
  4. FranTech Solutions3
  5. Cloudflare, Inc.3
  6. HETZNER-AS Hetzner Online GmbH, DE1
  7. CONTABO Contabo GmbH, DE1
  8. AS-HOSTINGER Hostinger International Limited, CY1

Related

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Visa; share of all PhishDestroy reports: 0.02%.