Skip to content
Scammers.com
PhishingReviewed

Fake Nishi-Nippon City Bank / Kyushu Card billing emails lead to www3-vpass.jusisxy.com

Security researcher @harugasumi posted on X on 11 November 2026 about phishing emails impersonating Nishi-Nippon City Bank (西日本シティ銀行) and Kyushu Card (九州カード), using subjects such as a notice of the November payment am…

First reported
Reports
1

Source: x.com · published

Illustration: Phishing, texts and email scams

What happened

Security researcher @harugasumi posted on X on 11 November 2026 about phishing emails impersonating Nishi-Nippon City Bank (西日本シティ銀行) and Kyushu Card (九州カード), using subjects such as a notice of the November payment amount. According to the post, the emails link to phishing sites such as hxxps://www3-vpass.jusisxy[.]com/jeryrkmf. The bank and card company are impersonated and are not the operators. Check card statements only through the official app or website typed yourself, and do not enter card details from links in emails.

How the scam works

Pages that copy a familiar sign-in form are usually reached from an email, text, advert, comment or search result that warns of a problem with an account, a delivery or a payment. The form looks official, but anything typed — a password, a one-time code or a wallet recovery phrase — goes to whoever set up the page rather than to the real company. Those details can be used at once to take over the account, change the recovery email or empty a wallet.

Nishi-Nippon City Bank and Kyushu Card do not send payment-amount notices that link to www3-vpass.jusisxy.com. Both were impersonated and are not involved. Hover or long-press a link to read the hostname before you sign in, and review statements only in the official app or on a site you typed yourself.

Banks and card companies already have your statement in their official app or on the site you type yourself. A payment-amount email that will not let you view the bill without opening a jusisxy.com link is a common lure.

Source

Public post on X, 11 November 2026: https://x.com/harugasumi/status/2120511131454427609

The indicators come from this source and have not been independently checked by scammers.com.

Red flags

  • A sign-in or account page whose address is not the official bank or card site.
  • A message, ad or email that urges you to sign in through a link to fix a problem, pay a fee or claim a reward.
  • A request for your password, one-time login code or recovery phrase on a page you reached from a link.
  • A Nishi-Nippon City Bank or Kyushu Card name in the address or on the page that does not match the company's real website.

If you were targeted

  1. 1Do not enter passwords, card numbers or one-time codes on a page reached from a text, email or ad.
  2. 2Open the official app or type the official bank or Kyushu Card site yourself to check your account.
  3. 3If you entered details, change your password at once and contact the company through its official channels.
  4. 4Report the message and the link to the company and to your national reporting service.
  5. 5Delete the message without replying or tapping any links.
ReportFraud.ftc.gov FBI IC3 More resources

Related reports

All phishing reports