CIMB Bank PH says it’s now returning unauthorized online fund transfers

CIMB Bank Philippines said it has started reversing funds to customers affected by unauthorized fund transfers, as the lender moves to contain the fallout from the issue.

Insider spotlight:

• Fund reversal ongoing: CIMB Bank PH has started reversing funds for customers affected by unauthorized fund transfers.
• Customer advisory issued: Customers are advised to check their accounts for the reversed amounts.
• Apology and assurance: CIMB apologized for the inconvenience and stressed that "your security continues to be of utmost importance to us."
• Investigation underway: The bank is conducting a "thorough investigation" into the incident.
• System and sata remain secure: CIMB assured clients that its core banking systems and customer data "remain secure and intact."
• Customer assistance channels: Customers with questions can contact CIMB through the 'Help Center' in the app or visit www.cimbbank.com.ph.

In a Facebook advisory on the morning of Sunday, April 27, 2025, the digital bank announced: "We would like to update you that we have started the reversal of funds to customers who have been impacted by the recent unauthorized fund transfers. You may check your accounts."

CIMB said it will issue further communication once the reversal process is fully completed. "We apologize for any inconvenience this has caused. Rest assured that your security continues to be of utmost importance to us," it added.

The latest update came hours after the bank first acknowledged the incident involving unsolicited withdrawals from customer accounts.

"We are aware of an issue currently affecting a few customers regarding unauthorized fund transfers," CIMB said in an earlier statement. "The bank is actively conducting a thorough investigation and is committed to ensuring a swift and thorough resolution of the unsolicited withdrawals."

The bank reiterated its commitment to return all impacted funds to affected clients. CIMB also sought to reassure the broader customer base that the bank’s core systems remain uncompromised.

"Our core banking system and customer data remain secure and intact, as your security continues to be of utmost importance to the bank," it said.

CIMB apologized for the inconvenience caused and thanked customers for their patience and understanding as it worked to resolve the issue.

Customers who have concerns were advised to contact the bank’s Customer Care team through the 'Help Center' feature on the CIMB Bank PH app or by visiting the website at www.cimbbank.com.ph.

CIMB Bank Philippines, which operates fully online, is part of CIMB Group Holdings Berhad, one of the largest banking groups in Southeast Asia. The lender has been positioning itself aggressively in the Philippine digital banking sector since it began operations in 2018.

The incident is the latest in a series of cybersecurity-related challenges faced by digital financial institutions globally, as cyberattacks and unauthorized transactions have become more frequent with the rapid shift toward online banking services.

— Edited by Daxim L. Lucas