Reasons for mn-bank's TrustScore of 1%

The website at https://www.mn-bank.bank/ claims to represent a banking institution named Minnesota National Bank (MNB) offering personal and business banking services: checking and savings accounts, online/mobile banking, loans (including for agriculture/real‐estate), and a team of staff “in towns” such as Sauk Centre, Long Prairie and Pelican Rapids. On its “Our Story” page the bank states it was merged from “Lake Country State Bank” on March 24 2008, and traces origins back to 1902. 

On the face of it, the website appears professional: it uses the “.bank” top-level domain, has sections for personal/business/Ag banking, shows a team page, routing number, contact details, and appears styled like a modest regional bank. However, deeper inspection reveals several red flags: the domain extension usage, possible mismatch with domain registration eligibility rules, lack of obvious correspondence with the name claimed, and confusion between a “.bank” domain vs what the domain actually is (i.e., mn-bank.bank). Moreover, the use of “.bank” does not guarantee that the institution is properly registered or regulated unless the registry process is verified. 

Because of these concerns, our review considers whether this site is a legitimate banking institution or a possible online scam attempting to impersonate or mislead.

Additional Information about mn-bank

Given the information gathered and a conservative approach to online banking safety, the website mn-bank.bank raises enough concerns that I would caution strongly against trusting it at face value without further verification. Here is a deeper rationale:

1. Domain and brand mismatch / suspicion of impersonation
   The institution named “Minnesota National Bank” (MNB) appears to exist as a community bank, with physical locations and a historic legacy dating back to 1902. mn-bank.bank+1 However, whether the domain mn-bank.bank is the officially authorised digital presence of that bank is unclear. The real bank’s mobile app (identified on Google Play) references “www.mn-bank.com” not “.bank”. Google Play This suggests the possibility that someone has registered a similar‐looking domain to mimic the bank’s brand to lure users.

2. Eligibility and regulatory concern with “.bank” domains
   The “.bank” top‐level domain is tightly controlled: only eligible, verified banking institutions may register it. According to the registry, there is a vetting process: initial verification, zone security (DNSSEC), name server requirements. 101domain+1 If the domain “mn-bank.bank” was registered by a fraudster rather than the bank itself, then it would be an unlawful mis-use of “.bank”. The absence of any visible verification or reference to the official registry makes it harder to confirm.

3. Risk of credential/identity theft or financial loss
   If the site is not properly regulated, users who deposit funds, open accounts, or enter personal data may be exposed to phishing, theft of identity, or even loss of funds. Since the bank industry is heavily regulated and most legitimate banks are members of FDIC (or equivalent) and make that clear, the lack of readily verified regulatory disclosure is problematic.

4. Misleading trust indicators
   The website uses a routing number and links to FDIC etc, which may create the impression of legitimacy. But these alone are not sufficient. A scam site can insert such details to appear credible. Users may erroneously trust the domain because it ends in “.bank”, assuming that makes it safe. In reality, you must confirm that the particular institution is registered and the domain is authorised.

5. Recommendation: Verify independently before any engagement
   Before trusting the site with money or personal details, you should:

   • Visit the real bank branch (if accessible) or call the official phone number (ideally from a trusted source, not just what’s on the website).

   • Check the bank’s regulatory registration/licensing (e.g., FDIC certificate) and confirm the domain name matches the bank’s official website.

   • Look for customer reviews or complaints about the domain/website (none found easily so far).

   • Avoid providing full personal data or funding until you are sure the site is legitimate.

Conclusion of this section: On balance, because there are too many unanswered questions and red flags, the site should be treated as high risk. Until proven otherwise, treat it as a suspected scam/unauthorized banking entity rather than a fully legitimate institution.