A business-banking email asks you to update company documents for new regulations. No money is asked for — until an adviser walks you through codes, an approval and one last SMS.
The final SMS activated the bank’s app on the attacker’s phone. From there, they could approve transfers as the company.
In October 2026 CERT Polska and the Polish financial-sector CSIRT warned businesses about fake “update your company documentation” bank emails that ended with an SMS registering the attacker’s device.
In Painted Sky you’re born at random somewhere on Earth and live a whole life — and this scam is one of the fakes that can find you. Make the call yourself, then replay the same life with a lens that shows what was fake.
Play Painted Sky — free →