Fake Butterfield Bank 'fraud investigators' call Bermuda businesses, push AnyDesk via butterfieldcontact.web.app

What happened

Bernews reported on 24 October 2026 that the Bermuda Police Service (BPS) is warning businesses and corporate banking customers about a telephone fraud (vishing) campaign that targeted Bermuda businesses between 20 and 21 October 2026. According to the police statement quoted by Bernews, callers impersonated Butterfield Bank fraud investigators and spoofed the bank's genuine main Bermuda switchboard number so the calls appeared to come from the bank; the real number was spoofed and does not belong to the scammers. Police said the callers claimed suspicious international payment activity had been detected, used customer account information and fabricated fraud case reference numbers to seem credible, then passed victims to people posing as technical support. In some cases victims were told to install remote access software, including AnyDesk, through malicious websites. Police said the criminals used this to make unauthorised international wire transfers or told victims to move money to so-called 'safe accounts'. BPS named two websites connected to the campaign, butterfieldcontact[.]web[.]app and butterfieldhelpdesk[.]web[.]app, and said both have been taken down. Police advise ending such calls, calling the bank back on a number from its official website or card, never installing remote access software at a caller's request, and never moving money to a 'safe account'. Butterfield Bank is the impersonated organisation and is not involved in the scam.

How the scam works

Police listed the tactics used in this campaign. Caller ID spoofing made the calls show Butterfield's real main switchboard number, 441-295-1111. That number belongs to the bank, not to the fraudsters, and a number on caller ID is not proof of who is calling. The callers then offered false reassurance by quoting customer account information and made-up case reference numbers, and passed victims to 'technical support'. Once remote access software was installed, the criminals could see and control the victim's computer and push through international wire transfers. In other cases they persuaded victims to move funds to a 'safe account' themselves.

The BPS said businesses that make large international payments are at particular risk. It urged staff who start or approve payments to check unusual requests independently. Anyone who installed remote access software at a caller's request should disconnect the device from the internet where it's safe to do so and call the bank from a separate, trusted device. Butterfield Bank is impersonated and is not involved.

Source

Bernews, "BPS Warn Businesses Of Banking Phone Scam" (published 24 October 2026), quoting the Bermuda Police Service.