InfoSecBulletin Cybersecurity for mankind
Bangladesh Bank has issued a public warning regarding a fraudulent website operating under the guise of the country’s official National Card Scheme, TakaPay.
According to the central bank, the fake website (https://takapaycard.com) is illegally collecting sensitive personal information, including names, phone numbers, email addresses, national IDs, and passport numbers. The site falsely promises to issue TakaPay cards, misleading users and posing a serious threat to financial and data security.
PHP shares new RCE flaw (CVE 2026-115560) with no patch but mitigation
US banks faced unauthorized access by AI agents in customer accounts: Axios reports
Atlassian patched 176 flaw in Jira and Confluence: Fortinet Urges to Patch Flaws Affecting FortiOS, FortiManager
Hacker claim to access Rajasthan Police data: 70,000 records allegedly exposed
Update now! PHP2Shell: Critical PHP vulnerabilities patched
Trump says data centres should pay dividends to local community
Hackers Actively Exploiting Palo Alto VPN Flaw Via CVE-2026-0257
DeepSeek AI banned by U.S. Government; federal agencies must remove all related tools
CISA, NSA and NIST Publish New 10 AI Agent Control Guidelines
Claude AI Cracks 25-Year NSA Cryptography Number Mystery in Just 30 Minutes
What’s the Real TakaPay?
TakaPay is Bangladesh’s government-backed National Card Scheme aimed at reducing dependency on foreign card networks, enhancing transaction security, and conserving foreign currency reserves.
Key Warnings from Bangladesh Bank:
No private entity or individual is authorized to issue TakaPay cards except Bangladesh Bank and NPSB-approved banks.
The fake website uses the TakaPay name and logo without authorization — both of which are intellectual property of Bangladesh Bank.
Operating or promoting such fake platforms is a punishable offense under the Payment and Settlement Systems Act 2024 and the Bangladesh Bank Order 1972.
Legal Consequences:
Any individual or organization found responsible for operating such fraudulent platforms may face legal action for violating national financial and cyber laws.
Public Advisory:
Bangladesh Bank urges citizens to:
Avoid sharing personal or financial information on the fraudulent site.
Verify any TakaPay-related services only through official banking channels.
Stay alert and report suspicious activity to relevant authorities.
For official updates, the public is advised to refer to Bangladesh Bank’s verified communication channels.
“Hidden Investigations”: A School Boy Curiosity Turn into Leading Cybersecurity Team
