Phishing sites impersonating Wells fargo

PhishDestroy has recorded 17 phishing domains impersonating Wells fargo since 2025-08-09, 1 of them in the last 30 days. The most used registrars are Web Commerce Communications and Surge.sh; the most common TLDs are .com and .sh. The official Wells fargo domain is wellsfargo.com: any other site asking for your login or wallet is not Wells fargo.

17
Domains, all time
1
Last 30 days
8
Online at last check
1
Confirmed takedowns

New domains in the last 90 days

2026-07-25: 02026-07-26: 02026-07-27: 02026-07-28: 02026-07-29: 02026-07-30: 02026-07-31: 02026-08-01: 02026-08-02: 02026-08-03: 02026-08-04: 02026-08-05: 02026-08-06: 02026-08-07: 02026-08-08: 02026-08-09: 02026-08-10: 02026-08-11: 12026-08-12: 02026-08-13: 02026-08-14: 12026-08-15: 12026-08-16: 02026-08-17: 02026-08-18: 02026-08-19: 02026-08-20: 02026-08-21: 02026-08-22: 02026-08-23: 02026-08-24: 02026-08-25: 02026-08-26: 02026-08-27: 02026-08-28: 02026-08-29: 02026-08-30: 02026-08-31: 02026-09-01: 02026-09-02: 02026-09-03: 02026-09-04: 02026-09-05: 02026-09-06: 02026-09-07: 02026-09-08: 02026-09-09: 02026-09-10: 02026-09-11: 02026-09-12: 02026-09-13: 02026-09-14: 02026-09-15: 02026-09-16: 02026-09-17: 02026-09-18: 02026-09-19: 02026-09-20: 02026-09-21: 02026-09-22: 02026-09-23: 02026-09-24: 02026-09-25: 02026-09-26: 02026-09-27: 02026-09-28: 02026-09-29: 02026-09-30: 02026-10-01: 02026-10-02: 12026-10-03: 02026-10-04: 02026-10-05: 02026-10-06: 02026-10-07: 02026-10-08: 02026-10-09: 02026-10-10: 02026-10-11: 02026-10-12: 02026-10-13: 02026-10-14: 02026-10-15: 02026-10-16: 02026-10-17: 02026-10-18: 02026-10-19: 02026-10-20: 02026-10-21: 02026-10-22: 0
Wells fargo phishing domains detected per day: 4 from 2026-07-25 to 2026-10-22; peak 1.

How to tell a fake Wells fargo site

Official domain: wellsfargo.com.

Words most often added to the brand in reported domains: fargo, connect, secure, fastlinkservicefreight, chivalrousmpr, orqwnnahu, kemixtdwnbtoyegxdmstitch, acct, homeloans, pagescdn.

  • Type the address yourself or use a bookmark; phishing links for Wells fargo arrive through ads, search results, direct messages and fake support accounts.
  • Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
  • Wells fargo does not ask you to confirm your password or card details through a link in an email or SMS.

Paste a suspicious address into the Homoglyph Checker or check it against the DestroyList.

Latest Wells fargo phishing domains

The 17 most recently detected domains impersonating Wells fargo
DomainFirst detectedStatus at last checkRegistrar
wellsfargosecurelogin.ct.ws2026-10-02Online—
ceteris.fr2026-08-15OnlineOVH
www-connect.secure.werllsfargo.com.jmvlogistics.in2026-08-14OnlineGoDaddy
sinkrone.com2026-08-11OnlineWeb Commerce Communications dba WebNic.c
desk.ru.com2026-07-22OfflineSav.com
dashboardsecure-wfcom-webauth-overview.github.io2026-07-10OfflineGitHub
welf2805-ffhmfsdfcaa8anav.canadacentral-01.azurewebsites.net2026-06-26OnlineMicrosoft Azure
crystal-miner.com2026-06-24OfflineCloudflare
connect.secure.wellsrfargo-srv.kjlj.com2026-03-15OnlineVM SINO PROFIT (HK)
w-fargo.com2026-02-26OfflineLigne Web Services dba LWS
wells-fargo-rho.vercel.app2026-02-11OnlineTucows Domains
net1f1ix.com2026-01-31OfflineBigRock Solutions
wefab.online2026-01-07OfflineGlobal Domain
homeloans.wellsfargo.com.pagescdn.com2025-12-27OnlineMarkMonitor
0wf0acct.us2025-12-22OfflineNameSilo
chivalrousmpr3orqwnnahu4kemixtdwnbtoyegxdmstitch.surge.sh2025-11-01Taken downSurge.sh
fastlinkservicefreight.com2025-08-09OfflineWeb Commerce Communications

All 17 Wells fargo reports

Where they are registered and hosted

Registrars

  1. Web Commerce Communications1
  2. Surge.sh1
  3. NameSilo1
  4. MarkMonitor1
  5. Global Domain1
  6. BigRock Solutions1
  7. Tucows Domains1
  8. Ligne Web Services dba LWS1

Top-level domains

  1. .com8
  2. .sh1
  3. .us1
  4. .online1
  5. .app1
  6. .net1
  7. .io1
  8. .in1

Hosting networks

  1. CLOUDFLARENET, US2
  2. MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporat2
  3. AS-COLOCROSSING, US1
  4. DIGITALOCEAN-ASN, US1
  5. NEWDHAKAHARDWARE-AS-AP NEW DHAKA HARDWARE, BD1
  6. Cogent Communications, LLC1
  7. AMAZON-02 - Amazon.com, Inc., US1
  8. LWS Groupe LWS SARL, FR1

Related

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Wells fargo; share of all PhishDestroy reports: 0.01%.