Dear Vercel Trust & Safety Team,

We are reporting a phishing site hosted on your platform that impersonates Ecobank to steal customers' online banking credentials.

Reported URL: https://alert-me.vercel.app/

Brand impersonated: Ecobank (official domain: https://ecobank.com) Abuse type: Phishing / credential harvesting / brand impersonation

Evidence:

The site uses Ecobank's name, its tagline "The Pan African Bank," Ecobank copyright notices, and a page title ("Ecobank Onmi Lite Express") that imitates Ecobank's Omni Lite mobile banking product. The site has no connection to Ecobank's official domains.

The only purpose of the page is a sign-in form asking for the visitor's bank account number and 4-digit PIN, with a fake "Secured by 256-bit SSL encryption" badge. A "demo PIN" note appears to be there to avoid review; it does not change how the page works.

Visitor tracking and remote control. When the page loads, its client-side code: logs "Initializing RemoteSystem for account: [ID]" and assigns each visitor a tracking identifier; tries to open a Socket.IO connection (/socket.io/?clientId=…&EIO=4&transport=polling), which is consistent with real-time phishing panels used to capture logins and one-time codes; asks for the visitor's location; registers a service worker and stores data in IndexedDB ("ecobank_db") and localStorage; requests /storage-config.json, and is built to pose as a mobile banking app.

This deployment violates Vercel's Acceptable Use Policy, which prohibits phishing, fraud and impersonation. It puts Ecobank customers at direct risk of financial loss.

Requested actions:

Take down the deployment at alert-me.vercel.app and any related deployments or aliases on the same account. Suspend the responsible account and keep relevant logs for any law-enforcement or bank investigation.

Group-IB is the official representative of Ecobank.

We are reporting this resource (https://alert-me.vercel.app/).

Please delete it.