Commercial Bank

MCB Bank Cyber Security

Last updated & verified: September 2026

Which numbers are genuinely MCB's, what the bank will never ask for, and how to report fraud fast — see the full bank overview.

Official: 111-000-622
Report Fraud Immediately

MCB Bank cyber security starts with one hard rule: MCB will never ask for your full card number, PIN, OTP, or internet banking password over a phone call, SMS, WhatsApp message, or email it initiates. Every genuine MCB security communication points you back to verify through an official channel — 111-000-622 or your own branch — rather than asking you to act immediately on unverified instructions.

Written & reviewed by Dildar Hussain — 10+ years in Pakistani banking, BS Banking & Finance (NUML University)

What MCB Will Never Ask For

Your Full Card Number or CVV

MCB staff never need your complete card number or CVV read out over a call to "verify" your identity or resolve an issue.

Your OTP

A one-time password is meant to stay with you alone. No genuine MCB representative will ever ask you to read it out or forward it.

Your Internet/App Banking Password

MCB Live and MCB Internet Banking credentials are never requested by phone, message, or email under any circumstance.

If any message or call asks for these, it is not from MCB regardless of how convincing the caller ID, sender name, or branding appears — spoofed caller IDs and lookalike SMS sender names are common in Pakistani banking fraud schemes and are not evidence of legitimacy on their own.

Common MCB Impersonation Scams

Fake "Account Blocked" SMS

A message claiming your MCB account or card will be blocked unless you click a link and enter your details — MCB does not resolve account issues this way.

Fake Prize / Discount Offer

Messages claiming you've won a prize or qualify for an exclusive MCB discount, asking for card details to "process" it — see also MCB Bank Card Discounts for how to verify genuine offers.

Fake Job Offer

An "MCB job offer" requesting an upfront fee or bank details — MCB never charges applicants at any stage; see MCB Bank Careers for the genuine application process.

QR Code / Payment Link Scams

A message or in-person request to scan a QR code or click a payment link that actually authorizes a payment out of your account, rather than into it.

How to Report Fraud to MCB

1. Call Immediately

Contact MCB's Call Center at 111-000-622 as soon as you suspect fraud — the faster a card is blocked, the less exposure you have.

2. Block Your Card

Ask MCB to block your debit/credit card immediately if you suspect it, your PIN, or your OTP has been compromised.

3. Visit Your Branch

Follow up in person to file a formal written complaint if the issue involves a disputed or unauthorized transaction.

4. Escalate If Unresolved

If MCB doesn't resolve the issue satisfactorily, escalate to the Banking Mohtasib Pakistan as the next step.

5. Report the Fraud Itself, Separately

Reporting to MCB gets your account and card secured — it doesn't file a fraud report. For that, contact FIA's Cyber Crime Wing at 051-9106384, or email State Bank of Pakistan's Consumer Protection Department directly at cpd.helpdesk@sbp.org.pk.

If Your SIM Was Swapped, Not Just Your Details Stolen

A growing pattern in Pakistani banking fraud pairs stolen account details with a SIM swap — the fraudster gets your mobile network to reissue your number on their SIM, then intercepts the OTPs meant for you. If your phone suddenly loses signal entirely with no explanation, that's a warning sign, not just a network glitch. The first move isn't calling MCB — it's blocking the compromised SIM through your mobile operator or PTA immediately, since a live SIM in someone else's hands defeats OTP-based protection on every account you have, not just MCB's. Do that in parallel with, not instead of, calling MCB at 111-000-622.

MCB's #BeAwareStaySafe Campaign: Six Fraud Types to Know

MCB runs an ongoing public-awareness initiative called "Be Aware, Stay Safe," launched in 2018 specifically to educate customers on evolving fraud tactics targeting banking details like PIN, CVV, and OTP. MCB itself names six common digital fraud patterns worth recognizing:

Vishing (Fake Phone Calls)

Fraudsters set up fake call centers using internet-based calling (VOIP), often with fabricated storylines about prize money or posing as government or bank representatives running a "security check." In some cases, scammers can even spoof a bank's real UAN number so it appears genuine on your caller ID — a legitimate call from MCB will never ask you to confirm banking details this way.

POS & ATM Skimming

Skimming devices capture your card and PIN data either at a point-of-sale counter or at an ATM, typically using a combination of a hidden camera, a keypad overlay, and a card-slot overlay. The practical defense is simple: never let your card leave your sight when paying, and inspect an ATM's card slot and keypad for anything that looks loose or added-on before using it.

Smishing (Fake SMS)

SMS-based phishing tries to extract your personal or banking details by posing as a trusted sender with a convincing but fake storyline. Treat any unsolicited SMS asking you to click a link, share details, or "verify" your account the same way you'd treat a stranger's phone call.

Social Engineering

Rather than hacking a system, this relies purely on manipulating a person into handing over information or taking an action — the fraudster typically never appears in person, working entirely through calls, messages, or fake urgency.

Fake Websites & Fake Emails

Fraudulent sites are built to look identical to MCB's real site, with the URL usually the only giveaway. Fake emails work the same way, mimicking the look of a genuine MCB communication to extract financial details.

Fraud-type descriptions and the "Be Aware, Stay Safe" campaign details confirmed directly from MCB Bank's official #BeAwareStaySafe page on mcb.com.pk.

Combat Against Cyber Crimes

MCB actively publishes "Combat Against Cyber Crimes — Protect Your Personal Information" notices directly on its official website and consumer product pages, underscoring that phishing and impersonation attempts targeting MCB customers are an acknowledged, ongoing risk the bank itself flags — not a hypothetical concern.

One habit will save you more than anything else on this page: never click a link or dial a number that a message hands you. If an SMS, email, or WhatsApp text claims to be MCB, close it, and go find MCB yourself — open the app you already have installed, or dial 111-000-622 from your own saved contacts. The number in their message could be anyone's; the one you already have saved is MCB's.

Good For

Learning what MCB Bank will never ask for over phone or message
Recognizing common MCB impersonation scam patterns
Learning the six digital fraud types MCB itself warns customers about
Knowing exactly who to call the moment you suspect fraud
Understanding MCB's escalation path if fraud isn't resolved quickly

Ready to bank with MCB?

Verify current rates, offers, and terms directly with MCB before you apply.

Visit MCB Official Website See MCB Helpline & Complaints

Similar Banks

Frequently Asked Questions

How do I report fraud on my MCB account?

Call MCB's 24/7 helpline at 111-000-622 immediately, or use MCB Live to block your card, then follow up with a formal complaint.

What is MCB's "Be Aware, Stay Safe" campaign?

It's MCB's official public-awareness initiative, running since 2018, that names six common digital fraud types — vishing, POS/ATM skimming, smishing, social engineering, and fake websites/emails — to help customers recognize and avoid them.

Does MCB ever ask for my PIN, CVV, or OTP over the phone?

No — MCB, like all legitimate banks, never asks for your PIN, CVV, password, or OTP. Treat any such request as fraud.

What should I do if I suspect a fake MCB job or SMS offer?

Verify only through mcb.com.pk, mcb.rozee.pk, or MCB's official helpline — do not click links or pay any fee based on unsolicited messages.

What if my phone suddenly has no signal — could that be fraud?

Possibly a SIM swap, where a fraudster gets your number reissued on their SIM to intercept your OTPs. Block the SIM through your mobile operator or PTA immediately, in parallel with calling MCB at 111-000-622.