Several banks who lost their banking license, resorted to spoofed sites.
To nurture the tale that “nothing happens”, they even sent a few payments. While these payments didn't go via the central banking system or banking interfaces, impersonating banks is still a problem.
Chase, for instance, at least is open about the loss of their license:
Others, for instance,
have now spoofed sites. You can easily see that (if you have a little IT knowledge), by clicking on the three dots on the right side of your browser, and then selecting “more tools” “developer tools.”
You can see that this isn't the real banking interface.
Another thing you can do is do a "traceroute.” If you see low-reputation IPs of shady hosting providers, it's likely not your bank.
This is one of the services who offer a tool to do a traceroute: https://dnschecker.org/online-traceroute.php
Then you can check who the IP belongs to, for instance, here: https://www.abuseipdb.com/check/138.197.244.40
As you can see, the login page of NBKC bank now has Digital Ocean IPs. It's one of the worst providers, and certainly not what banks would use.
I heard about this from the Bank for International Settlements. This bank is owned by 63 Central Banks, and certainly a reliable source for banking questions.
The concern is that these payments will be reversed.
I recommend being careful with spoofed sites, and “banks” who don't disclose that they are NOT MEMBER FDIC any longer. These payments come without an insurance.
