« BANQUE DE FRANCE: a FICP registration procedure was recorded in your name on 07/10. Failing a challenge within 24 hours, it will be forwarded to your banking institution. Check here: banque-france-contestation[.]info »
Jean-Claude, 68, a former owner of a small joinery business in the Loiret, read that message four times before clicking. He had no payment incidents, no outstanding loans, an account always in the black. But the word "flagged" brought back a very specific memory: in 2009, a customer had paid him with a cheque that bounced, and he had received a letter from his bank. He opened the link, filled in an "account holder identification" form, then hung up on a fake adviser who called him back twenty minutes later to "halt the procedure." Four transfers, €11,400.
What makes this scam so formidable is not its sophistication. It is its premise: it promises you nothing, it accuses you. And faced with an accusation of a banking nature, the French reflex is not to verify — it is to justify oneself.
Why "Banque de France" is the most effective name in smishing
An institution everyone knows and nobody understands
The Banque de France is one of the few institutions whose name conveys both absolute authority and operations that are entirely opaque to the general public. Ask the people around you: how many of them know that it manages no personal accounts at all, that it never sends you text messages, and that it has absolutely no means of debiting or freezing anything in your account?
That grey area is the perfect playground. Scammers don't need to replicate a complicated interface: writing the name is enough. The recipient fills in the rest of the story with what they think they know.
The language of credit registers frightens everyone, including people with nothing to hide
The Banque de France does indeed maintain incident registers: the FICP (the national register of consumer credit repayment incidents), the FCC (the central cheque register) and the FNCI (the national register of irregular cheques). These systems are real, documented on the official Banque de France website, and their consequences are concrete: loan refusals, withdrawal of the right to issue cheques.
The trouble is that the phrase "being flagged with the Banque de France" has entered everyday speech as a vague synonym for "having money problems." The result: even someone who has never once been overdrawn feels a twinge. The scammer isn't targeting logic — they're targeting that twinge.
The target isn't who you'd think
You might assume this scenario would target people drowning in debt. The opposite is far more profitable. The most exploitable profiles are:
- retired homeowners, with savings available and a strong fear of "administrative irregularity";
- self-employed people and small-business owners, for whom an actual listing would have immediate professional consequences (loan refusal, overdraft facility cut);
- first-time buyers in the middle of a mortgage application, who know a listing would sink their loan — a formidable seasonal target;
- people who have just had a genuine minor incident (a rejected direct debit, a declined card) and for whom the text seems to arrive "at just the right moment."
Anatomy of the message: the six signals that give away a fake
These texts vary in wording but almost always rest on the same building blocks. Recognising them takes ten seconds.
| Element of the text | What the fake says | The reality |
|---|---|---|
| Sender | "BQ-FRANCE", "BDF-INFO", or an 06/07 mobile number | The Banque de France does not notify register listings by text message |
| Deadline | "within 24 h", "before midnight" | A listing is contested in writing, with no such urgency |
| Link | a .info, .top or .cc domain, multiple hyphens | French public-sector sites use .gouv.fr or an official .fr |
| Request | identity details, IBAN, banking credentials | No organisation asks for credentials via a web form sent by text |
| Amount | a precise sum "to be settled" | The Banque de France collects nothing from private individuals |
| Follow-up | a phone call from the "disputes department" | That's where the real trap lies, not in the link |
The legal detail scammers never get right
A genuine FICP listing is not announced to you by the Banque de France. It is notified to you by your lender or your bank, by letter, stating the reason, the date and the duration of the registration. This is a disclosure obligation that falls on the reporting institution, not on the Banque de France.
In other words: a message claiming to come directly from the Banque de France to tell you about a listing is fake by construction, regardless of its content. That is the only test you need.
The text is just a doorbell: the real heist happens on the phone
Why the form isn't the end of the scam
Many victims think they're in the clear because they "only gave their name, date of birth and phone number." That is precisely what the scammer is after. With those three pieces of information plus the name of your bank (often requested via a "your institution" drop-down list), they have everything they need for the next stage: the call.
The call comes anywhere from ten minutes to forty-eight hours later. The number displayed may be your branch's actual number — caller ID spoofing is still in use despite the number-authentication mechanism rolled out by French operators since 2024. The person on the line knows your name, your bank, and the "case" you have just opened. The credibility is total.
What follows is the classic script, documented by the Banque de France itself, which warned in September 2026 about the rise in fraud by manipulation: you're asked to "secure" your funds by transferring them to a temporary account, or to approve a transaction in your app, or to read out a code received by text.
No adviser, no public official, no anti-fraud department will ever ask you to move your money, to read out a validation code or to install remote-assistance software. Zero exceptions.
The six-digit code, the point of no return
The message "Do not share this code with anyone" that accompanies your banking approvals is not a polite formality: it is the last line of defence. In the vast majority of manipulation fraud cases, it is the victim themselves who approved the transaction, which then makes reimbursement considerably harder to obtain.
How to find out, free of charge, whether you really are on a register
This is the most useful part of this article, and paradoxically the very thing scammers exploit: nobody knows how to check. Here are the real routes, all of them free.
1. Online access to your situation
The Banque de France offers an online information service allowing anyone to check whether they are registered on the FICP or the FCC, using FranceConnect authentication. Access is via the official Banque de France website — never via a link received in a message.
2. By post
You can send a written request accompanied by a copy of your ID to the Banque de France. The reply arrives by letter, at your address — which, incidentally, makes it a far harder channel to hijack than a text message.
3. In person
The Banque de France's departmental branches receive members of the public by appointment, notably on matters of over-indebtedness and the right to a basic bank account. A twenty-minute visit settles a worry that a text message planted in three seconds.
4. Your bank
Your adviser can see your situation. A call initiated by you, to the number on the back of your bank card or on your last paper statement, settles it immediately. A simple folder for administrative documents in which you keep statements, contracts and useful numbers beats any app: when a fake adviser is pressuring you, what you need is a reference number to hand, not a frantic Google search.
The habits to build before the next message
Breaking the callback loop
These campaigns work in two stages. If you clicked but entered nothing, the residual danger is low but real: your number is now marked as "active and responsive." Expect a call. The rule is simple: for the weeks that follow, you handle no banking matter on an incoming call. You take note, you hang up, you call back.
Filtering without cutting yourself off from the world
On Android as on iOS, filtering unknown senders and using the built-in reporting tools substantially reduces the volume. Google also strengthened its text-message scam detection in France in autumn 2026, with warnings displayed directly in the Messages app. On the hardware side, older people who struggle with menus often fare better with a mobile phone with large buttons that limits the ability to open links — quite simply because the attack surface is smaller.
Report, every time
Forwarding to 33700 (the free text-message spam reporting service) allows operators to block sender numbers and links. The cybermalveillance.gouv.fr site and the Perceval platform (for fraudulent bank card use) round out the toolkit. For an attempt to impersonate a public institution, Thesee allows you to file a complaint online.
Protecting the front door: your passwords
Most victims reuse the same password for their bank, their email and a shopping site. A password manager, or failing that a paper password notebook kept out of sight, eliminates that cascade risk. It's not glamorous, but it's devastatingly effective.
Educating the family circle
"Banque de France" campaigns target the over-60s heavily. A ten-minute conversation with a parent, a neighbour or a loved one is worth every filter. For those who want to go further, a cybersecurity guide for seniors provides something concrete to leaf through — useful precisely because it's still there when the doubt arrives, with no screen required.
If you have already replied: the order of operations
- Call your bank immediately, on the official number, to block your card and report an attempted fraud. Ask for outgoing transfers to be frozen.
- Change your credentials for banking and email, from another device if possible.
- Check the payees saved in your banking app: scammers often add a discreet one for later.
- File a complaint (police station, gendarmerie or Thesee): it is a prerequisite for most reimbursement claims.
- Dispute the transactions in writing with your bank. The French Monetary and Financial Code provides for reimbursement of unauthorised payment transactions; if refused, the banking ombudsman and then the ACPR are your avenues of recourse.
- Monitor your accounts for 90 days and set up alerts on every movement.
Key takeaways
The "Banque de France listing" text is an authority scam, and it falls apart with a single sentence: the Banque de France never informs a private individual directly about a register listing, least of all by text message. Everything else — the 24-hour deadline, the link, the form, the call from the "disputes department" — is nothing but stagecraft built around that initial lie.
The good news is that checking is free, accessible and entirely under your control. The bad news is that scammers are betting precisely on your not knowing it. Now you do.
