Internet banking scam- WARNING!!

24 Sep 2004

Evening all!
I do all my banking via the net, and I hope youre all aware of the various scams that abound-- I am, but actually experienced it last night-- I had an email (from an address that looked like it was my bank) with a hyperlink attached- I thought 'Oh-Oh' and clicked on it- Damn! It was good!! It was a form asking for my details- passwords etc- but it was so realistic- even the script/font was exact!! logos, terms, even the ads for services were convincing!! Needless to say Ive just forwarded it to my banks security dept,
So, be aware please, your bank will NEVER send you an e-form like this, no matter how good it looks-its a scam. If you want to know which bank im with, please pm me.

24 Sep 2004

for us to take your warning seriously we need you to supply us with your full name, date of birth, bank account number, national insurance number.. and possibly a copy of your last credit card statement!
thanks! :twisted:
WBB
thanks for the warning guys
x

24 Sep 2004

yeh I have seen some really good ones... ebay and paypal forgeries are getting really good these days... I forwarded a few to e-bay never heard anything back.... but then e-bay don't really go a bundle on customer service at the best of times.
My main gripe with it is after a scam has gone out my bank suspends the ability to do any online banking for a few days... which really screws up my ability to actualy use their service... I think its a boneheaded response... it punishes smackbottom

the wrong people.
..just my thoughts on the latest anoyance

24 Sep 2004

Quote by EnglishChris99
yeh I have seen some really good ones... ebay and paypal forgeries are getting really good these days... I forwarded a few to e-bay never heard anything back.... but then e-bay don't really go a bundle on customer service at the best of times.
My main gripe with it is after a scam has gone out my bank suspends the ability to do any online banking for a few days... which really screws up my ability to actualy use their service... I think its a boneheaded response... it punishes the wrong people.
..just my thoughts on the latest anoyance

I've actually had 2 scam emails purportedly from eBay in the last 2 weeks and reported both to eBay (they have a special team dealing with these fraudulent emails) and they responded very quickly both times and confirmed that the emails were fake.
I think the rule to follow is that ANY email supposedly from your bank or any online shop/auction site that asks you to click on a link where you then need to 'log in' should immediately be regarded as fraudulent. Personally I wouldn't even bother to click on any link and would report it immediately.

24 Sep 2004

I always fill in these forms and orders for viagra etc etc with the ex's details....
Hey I gotta get some pleasure outa life besides being married to the most beautiful, sexy woman on this earth.

24 Sep 2004

:laughabove: Thats such a good idea!! must remember that one!!

24 Sep 2004

The affect of these is lessened on me because I get five or six of them a day - mostly for banks I don't have an account with anyway! rolleyes

24 Sep 2004

I tell everyone I know not to give any information over requested via email from banks, etc. It makes me mad that anyone could be fleeced like this.
The respective organisations need to get their arses in gear and sort out a way so that you can be sure (or as sure are possible) that you can trust the sending email address is trustworthy. There are a couple of ways they are looking at doing this. Its all still up in the air at the moment.

24 Sep 2004

Dear Mr kangaroo,
please fill in the form and send to swinging heaven.
first name _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

24 Sep 2004

Quote by Kangaroo
I tell everyone I know not to give any information over requested via email from banks, etc. It makes me mad that anyone could be fleeced like this.
The respective organisations need to get their arses in gear and sort out a way so that you can be sure (or as sure are possible) that you can trust the sending email address is trustworthy. There are a couple of ways they are looking at doing this. Its all still up in the air at the moment.

You can't mittigate against stupid people... all the banks warn you very clearly not to give you details out... all their login procedures ask for random password characters... and still people are forking over the key to their money... you wouldn't give your bank card or car keys to someone just cos they said they were from the bank. don't do the same with passwords!! mad

:x

24 Sep 2004

Quote by EnglishChris99
You can't mittigate against stupid peoplet

I think stupid is a bit harsh. People who don't know any better, are perhaps a little gullible, and maybe don't even know this kind of thing happens, can be fooled into thinking these emails are genuine. I saw one that looked like it was from Lloyds TSB, it looked geniune to the unsuspecting eye. It linked to a site that looked like the real Lloyds TSB site. These guys can get (although not all the time) pretty sophisticated.
A small percentage of people will be fooled and that's all the scammers need. Send anough of these emails out and a small minority will bite.

25 Sep 2004

Quote by Kangaroo
You can't mittigate against stupid peoplet

I think stupid is a bit harsh. People who don't know any better, are perhaps a little gullible, and maybe don't even know this kind of thing happens, can be fooled into thinking these emails are genuine. I saw one that looked like it was from Lloyds TSB, it looked geniune to the unsuspecting eye. It linked to a site that looked like the real Lloyds TSB site. These guys can get (although not all the time) pretty sophisticated.
A small percentage of people will be fooled and that's all the scammers need. Send anough of these emails out and a small minority will bite.
I agree, they send out these scam emails to randomly generated emails* in the hope that if they send out enough, some will get to the inbox's of people who actually do use the particular bank or online shop.
A lot of those recipients will know enough that they will report the bogus emails knowing that they're likely to be scams but a smaller proportion of the recipients will actually act upon the emails ... job done!
It's also going to look more feasible to people who don't know anything about how big computer systems and databases work and the huge investment in time and money to protect and back up those systems. It would be inconceivable for systems to crash such that ANY data is lost and/or cannot be recovered from system backups etc.
There is NO way that these companies would ever have to resort to asking customers to re-enter and verify their account details! They may occassionally ask you to check your general account details are still up-to-date (eg. correct email address or phone number, never account numbers or passwords), but they'd always tell you to log on from the usual URL to do this, never to use a link in the email.
* or harvested ones! Some companies use programs (email spiders, I think) that search the web for occurences of email addresses ... look for an @ sign and grab what's either side!