# Phishing sites impersonating Visa PhishDestroy has recorded 38 phishing domains impersonating Visa since 2025-08-08, 5 of them in the last 30 days. The most used registrars are GoDaddy.com and Global Domain; the most common TLDs are .com and .app. The official Visa domain is visa.com: any other site asking for your login or wallet is not Visa. 38Domains, all time 5Last 30 days 28Online at last check 6Confirmed takedowns ## New domains in the last 90 days Visa phishing domains detected per day: 12 from 2026-07-25 to 2026-10-22; peak 2. ## How to tell a fake Visa site Official domain: visa.com. Words most often added to the brand in reported domains: ccfgint, anami, lok, claim, evisacam, calgarypcg, epidoxchain, grandalliancebnk, digitap, wallet. - Type the address yourself or use a bookmark; phishing links for Visa arrive through ads, search results, direct messages and fake support accounts. - Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters. - Visa does not ask you to confirm your password or card details through a link in an email or SMS. Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check). ## Latest Visa phishing domains The 38 most recently detected domains impersonating Visa Domain | First detected | Status at last check | Registrar | [boc.bankhk-center.com](https://phishdestroy.io/domain/boc.bankhk-center.com/) | 2026-10-22 | Online | Dynadot | [kako-pl.lat](https://phishdestroy.io/domain/kako-pl.lat/) | 2026-10-21 | Online | Spaceship | [norva.info](https://phishdestroy.io/domain/norva.info/) | 2026-10-21 | Offline | PublicDomainRegistry.com | [oop-sheets.living](https://phishdestroy.io/domain/oop-sheets.living/) | 2026-10-17 | Online | Spaceship | [whatsapp.laptopsupdate.com](https://phishdestroy.io/domain/whatsapp.laptopsupdate.com/) | 2026-10-16 | Online | HOSTINGER operations | [saudisevisa.com](https://phishdestroy.io/domain/saudisevisa.com/) | 2026-09-13 | Online | GoDaddy.com | [procedimiento.creditscolombia.com](https://phishdestroy.io/domain/procedimiento.creditscolombia.com/) | 2026-09-12 | Offline | Squarespace Domains | [heat-tobacco.com](https://phishdestroy.io/domain/heat-tobacco.com/) | 2026-09-11 | Online | eNom | [xfinancebnk.com](https://phishdestroy.io/domain/xfinancebnk.com/) | 2026-09-09 | Online | Sav.com | [xp-invest.vercel.app](https://phishdestroy.io/domain/xp-invest.vercel.app/) | 2026-09-04 | Online | Vercel | [docdaddy.in](https://phishdestroy.io/domain/docdaddy.in/) | 2026-08-10 | Online | GoDaddy | [epingenc.com.tr](https://phishdestroy.io/domain/epingenc.com.tr/) | 2026-08-02 | Online | — | [wealthnestsavings.com](https://phishdestroy.io/domain/wealthnestsavings.com/) | 2026-07-01 | Online | Web Commerce Communications dba WebNic.c | [flugsvampse.com](https://phishdestroy.io/domain/flugsvampse.com/) | 2026-05-19 | Online | Eranet | [usdtochinayuan.com](https://phishdestroy.io/domain/usdtochinayuan.com/) | 2026-04-07 | Online | NameCheap | [7-slonov.ru](https://phishdestroy.io/domain/7-slonov.ru/) | 2026-03-28 | Online | RU-CENTER-RU | [alfabez.eu](https://phishdestroy.io/domain/alfabez.eu/) | 2026-03-27 | Online | PDR | [mob.g2trck.com](https://phishdestroy.io/domain/mob.g2trck.com/) | 2026-03-27 | Online | GoDaddy.com | [finsagetrust.com](https://phishdestroy.io/domain/finsagetrust.com/) | 2026-02-26 | Offline | Web Commerce Communications | [bitlyex.com](https://phishdestroy.io/domain/bitlyex.com/) | 2026-02-26 | Offline | — | [app.berkeleycreditbank.com](https://phishdestroy.io/domain/app.berkeleycreditbank.com/) | 2026-02-19 | Online | Dynadot | [app.berkleycredit.com](https://phishdestroy.io/domain/app.berkleycredit.com/) | 2026-02-19 | Online | Global Domain | [checkmay.com](https://phishdestroy.io/domain/checkmay.com/) | 2026-02-19 | Offline | NameSilo | [globaltechsupport.us](https://phishdestroy.io/domain/globaltechsupport.us/) | 2025-12-28 | Online | GoDaddy.com | [ibanking-retailldbs.com](https://phishdestroy.io/domain/ibanking-retailldbs.com/) | 2025-12-26 | Offline | Web Commerce Communications | [am22fcu.web.app](https://phishdestroy.io/domain/am22fcu.web.app/) | 2025-12-14 | Taken down | Google | [loanfinance.github.io](https://phishdestroy.io/domain/loanfinance.github.io/) | 2025-12-12 | Online | GitHub | [claims-avici.money](https://phishdestroy.io/domain/claims-avici.money/) | 2025-12-10 | Taken down | Cloudflare | [trevelyanbd.com](https://phishdestroy.io/domain/trevelyanbd.com/) | 2025-12-05 | Taken down | GoDaddy.com | [esnavs-gcc.com](https://phishdestroy.io/domain/esnavs-gcc.com/) | 2025-11-20 | Taken down | GoDaddy.com | [wallet3-coin.com](https://phishdestroy.io/domain/wallet3-coin.com/) | 2025-11-01 | Offline | Gname.com | [digitap.app](https://phishdestroy.io/domain/digitap.app/) | 2025-10-26 | Taken down | Vercel | [epidoxchain.com](https://phishdestroy.io/domain/epidoxchain.com/) | 2025-09-20 | Online | Global Domain | [grandalliancebnk.com](https://phishdestroy.io/domain/grandalliancebnk.com/) | 2025-09-17 | Online | Sav.com | [calgarypcg.ca](https://phishdestroy.io/domain/calgarypcg.ca/) | 2025-09-09 | Taken down | Open Provider | [claim.evisacam.cm](https://phishdestroy.io/domain/claim.evisacam.cm/) | 2025-09-08 | Online | LAGENCE DIGITALE | [anami-lok.com](https://phishdestroy.io/domain/anami-lok.com/) | 2025-08-16 | Offline | AFRIREGISTER | [ccfgint.com](https://phishdestroy.io/domain/ccfgint.com/) | 2025-08-08 | Offline | Cosmotown | [All 38 Visa reports](https://phishdestroy.io/domain/?brand=Visa) ## Where they are registered and hosted ### Registrars - [GoDaddy.com](https://phishdestroy.io/registrar/godaddy/)5 - [Global Domain](https://phishdestroy.io/registrar/global-domain-group/)2 - [Sav.com](https://phishdestroy.io/registrar/sav-com/)2 - [Web Commerce Communications](https://phishdestroy.io/registrar/webnic/)2 - [Spaceship](https://phishdestroy.io/registrar/spaceship/)2 - [Cosmotown](https://phishdestroy.io/registrar/cosmotown/)1 - AFRIREGISTER1 - LAGENCE DIGITALE1 ### Top-level domains - [.com](https://phishdestroy.io/tld/com/)23 - [.app](https://phishdestroy.io/tld/app/)3 - [.cm](https://phishdestroy.io/tld/cm/)1 - [.ca](https://phishdestroy.io/tld/ca/)1 - [.money](https://phishdestroy.io/tld/money/)1 - [.io](https://phishdestroy.io/tld/io/)1 - [.us](https://phishdestroy.io/tld/us/)1 - [.eu](https://phishdestroy.io/tld/eu/)1 ### Hosting networks - CLOUDFLARENET, US4 - Amazon.com, Inc.4 - AS-COLOCROSSING, US3 - FranTech Solutions3 - Cloudflare, Inc.3 - HETZNER-AS Hetzner Online GmbH, DE1 - CONTABO Contabo GmbH, DE1 - AS-HOSTINGER Hostinger International Limited, CY1 ## Related - [Typosquatting](https://phishdestroy.io/glossary/typosquatting/) - [Homoglyph](https://phishdestroy.io/glossary/homoglyph/) - [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/) - [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) - [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator) - [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action) - [All impersonated brands](https://phishdestroy.io/brand/) Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Visa; share of all PhishDestroy reports: 0.02%. Canonical: https://phishdestroy.io/brand/visa/