Book a demo

Fintech

Threats that cash in on your name.

Copied apps, fake support accounts, phishing logins and fake payment requests all use your brand. We find them and get them taken down before your customers lose money or access to their accounts.

Book a demoRequest a takedown
Impersonation watchExample feed
TimeThreatWhereStatus
  1. 08:31Copied appSolstice Money 6.1 APKApp siteRemoved
  2. 09:02Fake support account@SolsticeMoney_HelpXRemoved
  3. 09:44Fake login pagesolsticemoney-verify.appWebsiteRemoved
  4. 10:15Fake payment request“Approve $1 to verify your account”TextReported
  5. 10:52Fake investing ad“Earn 12% a month with Solstice”FacebookRemoved
  6. 11:27Fake help line1800 number on a shared PDFSearchChecking
99%taken down

Of the fake customer support accounts we pursued across all clients, January to June 2026.

The customer journey

Where scammers meet your customers.

Scammers wait at every step of the customer journey. Here's where they show up and what we take down.

Sponsored · FacebookSolstice Money: Earn 12% a month, guaranteedsolstice-invest.onlineJoin 40,000 Australians growing their savings. Limited spots left.

Discover

Fake ads and investment offers.

Ads and posts use your name, your logo and sometimes a well-known face to promise high returns. They lead to fake investment platforms that look like yours.

  • Fake investing and savings ads
  • Fake referral and sign-up offers
  • Your logo on fake platforms
Scams →Social media →
SM
Solstice Money 6.1 (APK)apk-finance-hub.netNew version with higher rates. Download directly, no app store needed.

Download

Copied apps outside the app stores.

Copies of your app sit on APK download sites and alternative app stores, where nobody checks who published them. Some steal logins, others read the codes you send.

97%of the copied app listings we pursued were on third-party app sites, not official stores.
Fake apps →Brand abuse →
WebsiteSolstice Money: Verify your accountEnter the 6-digit code we just sent to keep your account open. solsticemoney-verify.app

Sign in

Fake logins and code requests.

Lookalike login pages collect passwords and one-time codes, then use them to take over the account. Many only open on a phone, which makes them harder to spot.

19%of the phishing sites we pursued only opened on phones.
Phishing →Smishing →
Solstice MoneyA payment of $890.00 to a new payee is pending. Not you? Approve the reversal here.
Text messagesolsticemoney-pay.onlineApprove $1 to verify your account and cancel the payment.

Pay

Fake payment requests.

Fake alerts about a payment, a refund or a new payee push customers to “approve” a request or move money to a “safe” account. The money goes straight to the scammer.

  • Fake payment and refund alerts
  • Fake payment pages
  • “Safe account” requests
Smishing and vishing →Scams →
Reply on X@SolsticeMoney_HelpSorry about your card! DM us your login and the code we send and we’ll fix it now.

Get help

Fake support accounts and help lines.

Fake support accounts reply to customers who complain in public, then ask for logins and codes in private. Fake help lines turn up in search results and shared PDFs.

99%of the fake support accounts we pursued across all clients were taken down.
Social media →Vishing →
Private channelVerified fintech accounts + payment agents wantedFresh logins for sale. Also hiring “payment agents”, $500 a week. DM for details.

Behind the scenes

Stolen accounts and money mule jobs.

Stolen logins and customer data are traded in private channels, and fake “payment agent” jobs recruit people to move scam money through real accounts.

  • Stolen account logins
  • Customer data for sale
  • Money mule job ads
Dark and deep web →Fake recruiters →

How it works

Up and running in three steps.

solsticemoney.com.au@SolsticeMoneySolstice Money appSolstice InvestLetter of authority ✓

Step 1

Tell us what’s yours

Share your brand names, official domains, social accounts and app listings, plus a letter of authority so we can act on your behalf.

  • Web and domains
  • Social media
  • App stores
  • Messaging

Step 2

We watch around the clock

We monitor the web, social media, app stores, app sites and messaging channels for fakes. Tell us about launches, new features and promotions and we’ll watch more closely.

solsticemoney-verify.appFake login page
Successfully suspendedEvidence and outcome in your portal

Step 3

We take them down

Every find is checked, then reported to the platform, host or registrar with evidence. You see each case and its outcome in the Unphish portal.

Our data

What we see for fintech brands.

The threats that hit payment, lending and investing apps, based on the scam sites, accounts and apps we pursued across all our clients between January and June 2026.

96%

of the threats we pursued across all clients were taken down

99%

of the fake customer support accounts we pursued were taken down

97%

of the copied app listings were on third-party app sites, not official stores

19%

of the phishing sites only opened on phones

Where the fake support accounts were

  • XReplies to customer complaints61%
  • FacebookFake help pages and comments32%
  • Everything elseInstagram, websites, messaging7%

Fake support accounts wait for customers to complain in public, reply first, then move the chat to private messages or a fake help line.

Where the copied apps were listed

  • APK sites57%
  • Other stores30%
  • PC sites10%
  • Official stores3%

Share of the copied app listings we pursued across all clients. Other stores are alternative Android app stores; PC sites offer apps to run on a computer.

The bigger picture

19,400+

scams removed by ASIC in 2025–26, up 182% on the year before

7,051

fake investment platforms removed, up 151%

5,476

phishing scam links removed, up 279%

Source: ASIC media release 26-195MR (17 August 2026).

Unphish figures: threats we pursued across all clients, January to June 2026. Most fake support accounts were found for travel clients. Takedown rates exclude cases closed for other reasons, such as at the client’s request. Figures are rounded.

Inside a copied app

What a fake finance app asks for.

Copied apps look like yours on the outside. Inside, they ask for access a payments or investing app rarely needs, so they can read the codes you send, watch the screen and take over the account.

97%of copied app listings we pursued were on third-party app sites
57%were on APK download sites

Unphish figures across all clients, January to June 2026.

SM
Solstice Money 6.1apk-finance-hub.net · not from an app store
Example

This app wants to

Why a scammer wants it

Illustration based on common behaviour of fake finance apps. Solstice Money is a fictional brand.

Your Unphish portal

Every fake, and where it’s up to.

Fake sites, accounts and apps land in one threat feed. Approve a takedown in a click, then follow each case until it’s gone.

Threat FeedSolstice Money · last 30 days
Example data

Pipeline health

  • With you
  • In enforcement
  • Verifying
  • Resolved
  • P1
    solsticemoney-verify.appFake login page · Web
    Awaiting review
  • P1
    x.com/SolsticeMoney_HelpFake support account · X
    In enforcement
  • P2
    solsticemoney-pay.onlineFake payment page · Web
    Suspended
  • P3
    apk-finance-hub.net/solsticemoneyCopied app · APK site
    Verifying

Confidence

Illustration with example data. Solstice Money is a fictional brand.

How it works for a fintech

What a takedown looks like for a scam ad.

Example scenario

A copied app campaign

Sector
Payments and investing apps
Seen in
Ads, APK download sites and a fake support account
Covered
App sites, domains, hosting and social media

An illustrative example based on common patterns, not a single client case.

01 · Before

The campaign

Ads promise a new version of the app with better rates. They link to APK sites hosting a copy that asks for text and screen access, and a fake support account tells worried customers to install it.

02 · After

What we do

We find the listings, ads and accounts, link them as one campaign, and report each to the app site, host, platform or registrar with evidence. Your team sees every case and outcome in the portal.

FindListings, ads and accounts in the campaign
LinkShared hosting and patterns, one campaign
RemoveReported with evidence until they’re gone

Our results across all clients, threat by threat

Scam websites98%

of the scam websites we pursued went offline.

  • Fake investment platforms
  • Fake payment pages
Scams → Phishing sites99%

of the phishing sites we pursued were taken down.

  • Fake app logins
  • One-time code pages
Phishing → Impersonation accounts99%

of the impersonation accounts we pursued on Facebook, X and Instagram were removed.

  • Fake support accounts
  • Fake investing promoters
Social media → Fake apps92%

of the fake apps and app download sites we pursued were taken down.

  • Copied payment and investing apps
  • Fake APK download pages
Mobile applications → Executive impersonation100%

of the executive impersonations we pursued were taken down.

  • Fake founders in investing ads
  • Fake recruiters and job ads
Executive impersonation → Compromised websites100%

of the compromised website cases we pursued were disrupted.

  • Fake logins hidden on hacked sites
  • Removed with the owner and host
Compromised websites →

Results across all Unphish clients, January to June 2026. Figures are rounded.

Who it’s for

Built for the teams who look after your customers.

Every team sees different fakes. We find and remove them all.

Security and fraud

Copied apps, fake logins and account takeover.

We remove

  • Login phishing
  • Copied apps
  • Fake payment pages

Customer support

Customers caught by fakes contact you first, often after losing money.

We remove

  • Fake support accounts
  • Fake help lines
  • Fake refund chats

Marketing and growth

Your ads, offers and referral codes copied to pull customers away.

We remove

  • Fake investing ads
  • Fake referral offers
  • Fake promoters

Compliance and risk

Your name and licence used by sites you don’t run, with evidence for every action.

We remove

  • Lookalike domains
  • Fake licence claims
  • Fake investment platforms

People and HR

Fake recruiters use your name to hire “payment agents” who move scam money.

We remove

  • Fake recruiters
  • Money mule job ads
  • Fake staff profiles

Threats

Every threat fintech brands face, explained.

PhishingFake app logins and code pages ScamsFake investment platforms Brand abuseLookalike domains and fake payment pages Social mediaFake support accounts and ads Mobile applicationsCopied apps on APK sites VIP and executive impersonationFake founders and recruiters Smishing and vishingFake payment alerts and help lines Dark and deep webCustomer logins and data for sale PiracyCopied content and tools
See all threats →

For your customers

Help customers spot a fake app.

Two short notes you can adapt for your website, app or emails. One shows customers how to tell you apart from the fakes. The other tells them what to do if they’ve been caught.

The copied version leaves blanks for your brand name and official details.

Solstice MoneyStaying safe

How to spot a fake Solstice Money

  • Only download our app from the App Store or Google Play.
  • We’ll never ask for your one-time code, by phone, text or chat.
  • Our support team won’t message you first on X, Facebook or WhatsApp.
  • We never ask you to move money to a “safe” account.
  • We don’t promise guaranteed returns.

Seen a fake? Report it at solsticemoney.com.au/report

Example
Solstice MoneyCustomer support

Think you’ve been scammed?

  1. Stop: don’t send more money or share any codes.
  2. Contact us through the app or the number on our website so we can lock your account.
  3. Delete the fake app and change your password.
  4. Call your bank if you paid from another account.
  5. Report it to Scamwatch, and contact IDCARE if your details were taken.

We’ll never ask you to pay to get money back.

Example

FAQ

Fintech questions, answered.

Why are fintech brands targeted?

Customers move money in a few taps and trust app alerts and support replies. Scammers copy the app, the login and the support team to get between customers and their money. Impostor scams cost Americans $3.5bn in reported losses in 2025, according to the FTC.

What are the most common scams using fintech brands?

Copied apps on APK download sites, fake login and one-time code pages, fake support accounts that reply to complaints, fake investment platforms, and fake payment requests by text.

Can you remove copied apps outside the official app stores?

Yes. 97% of the copied app listings we pursued were on third-party app sites outside the App Store and Google Play. We report each one to the site and its host with evidence.

Do you remove fake customer support accounts?

Yes. We find fake support accounts on X, Facebook and other platforms and report them with evidence. Across all our clients, 99% of the fake support accounts we pursued were taken down.

How long does a takedown take?

It depends on the platform, host, app site or registrar involved and how they respond. We follow every case through until it's resolved, and you can see where each one is up to in the Unphish portal.

Does this help with the FTC Impersonation Rule?

The FTC Impersonation Rule lets the FTC pursue scammers who impersonate businesses, with penalties up to $53,088 per violation. Unphish helps you detect, disrupt and document impersonation of your brand, and our case records show the action you've taken. This isn't legal advice.

What do you need from us to get started?

Your brand names, official domains, social accounts and app listings, plus a letter of authority so we can act on your behalf. Then we start monitoring.

Other industries

See how scams hit other sectors.

Every industry gets targeted in its own way. Explore the threats we find and take down in each.

01

Airline and Transport

Fake booking sites, points scams and support accounts.

02

Banking and Financial Services

Fake bank sites, support lines and investment scams.

03

Crypto

Fake bonus sites, wallet drainers and support accounts.

04

Public Sector and Government

Fake refund texts, login portals and service sites.

05

Retail and E-Commerce

Fake stores, sale ads and delivery texts.

06

Lottery and Gambling

Fake casinos, VIP hosts and promo codes.

07

Non-Profit Organisations

Fake appeals and donation pages.

08

Film and Entertainment

Fake tickets, streams and giveaways.

Solutions for fintech brands

SolutionDomain ProtectionLookalike domains and payment pages → SolutionPhishing ProtectionFake logins and code pages → SolutionSocial Media ProtectionFake support accounts and ads → SolutionMobile App ProtectionCopied apps on APK sites →
See all solutions →

Try it

Real or fake?

Five things a Solstice Money customer might see. The brand only uses solsticemoney.com.au, its app from the official stores and its verified accounts. Which would you trust?

The quickest check: a real fintech won’t ask for your one-time code, message you first, or send you to an app outside the official stores. If in doubt, open the app.

Report a fake →

See which threats are using your brand.

Book a demo and we'll show you the fake apps, logins and accounts using your brand right now.

Book a demoRequest a takedown