The domain cibc-verify-digital-business.com was created less than 48 hours ago and is designed to look like it belongs to CIBC, a well-known Canadian bank. But legitimate financial institutions don't use generic registrars or launch verification portals on brand-new domains with no history. This site has no privacy policy, no terms of service, and no way to contact the operator. It also has no presence on Trustpilot or the Wayback Machine. While the SSL certificate is technically valid, that's trivial to obtain and doesn't make a site safe. The domain's name itself tries to trick visitors into thinking it's an official CIBC verification page. That deceptive pattern, combined with the complete lack of transparency, suggests this is a phishing attempt. If you landed here looking for CIBC's real verification portal, close this tab and go directly to cibc.com. Do not enter any login credentials, personal information, or payment details on this site. Is cibc-verify-digital-business.com a scam? All the evidence points to yes. Treat this domain as dangerous.
No — cibc-verify-digital-business.com doesn't look safe
In plain English
This site is dangerous. It was registered just one day ago and tries to impersonate CIBC, a major Canadian bank. There is no contact information, no privacy policy, and nothing to suggest it's a legitimate business. Do not enter any personal or financial information here.
What you should do now
Don't panic. These steps limit the damage, and the sooner you take them the better.
Don't enter any details
No passwords, card numbers or personal information — even if the site looks professional.
Close the tab
Especially if you got here from an email, text message or social media ad.
Already paid? Call your bank
Contact your bank or card provider right away. They can often stop or reverse a recent payment.
Warn others
Report the site and share this check with anyone who sent you the link.
Where the score comes from
The SSL certificate is valid and TLS 1.3 is supported, but the server also accepts outdated TLS versions. That's a minor issue compared to the bigger red flags here.
A domain that's only one day old, registered through OwnRegistrar, and designed to look like CIBC's verification portal is a massive red flag. Legitimate banks don't operate on just-registered domains.
No web archive history, no Trustpilot presence, and not ranked among top sites. For a supposed business tied to a major bank, the total lack of any online footprint is deeply suspicious.
There is no contact information, no about page, and no social presence. A legitimate financial service would clearly state who operates it and how to reach them.
No privacy policy, terms of service, or any legal pages are present. Financial websites are required to have these to handle personal data, and their absence here is a serious compliance failure.
Cloudflare hosting and a valid SSL are standard, but the site doesn't respond to probes and has no email setup. Nothing about the infrastructure suggests a legitimate banking operation.
What we checked
Think this verdict is wrong?
Site owners can request a fresh scan. Scores update automatically as signals change.