Tuesday, March 23, 2010

Phishing Scam with Absa Banking

Online banking scams seem to be very common these days; you often hear of people who have been conned into entering their personal banking information on fraudulent websites. The main method of this type of identity theft is phishing which is the illegal attempt to acquire personal information such as usernames, passwords and credit card details by imitating a legitimate website.

Most banks will have warnings on their websites insisting that they will never send out emails requesting you to complete your personal details by clicking on a webpage link in an e-mail. I have often seen these warnings and heard of people being scammed, but recently I received my first phishing email from some wicked, low-life foot-soldier criminal.

The email looked like this:




 I suppose it could seem quite legit if you are new to online banking.

Absa’s Security Centre lists the following things to look for when you suspect a email scam:

Deceptive Subject Lines:
These look as if they are genuinely related to the company supposedly sending the e-mail.

Forged Sender’s Address:
An easy deception method to make the e-mail appear as though it has come from the company it is claiming to be.

Genuine Looking Content:
They copy images and text styles of the real sites in order to fool the reader. Trusts and authentication marks are duplicated and they may even have genuine links to the company’s privacy policy and other pages on the legitimate website to create an illusion of authenticity.

Disguised hyperlinks:
E-mails may display a genuine website address, but when you click on it, the hyperlink will take you to a different website. Look out for a long website address as it will take you to the site after the ‘@’ symbol.
Example:http://www.genuine-site.com-name@fraud-site.com

If you clicked on this hyperlink it would take you to http://fraud-site.com as it is after the @ symbol.

E-mail Form
These forms containing your personal information are submitted to remote computers, which the fraudsters access and then use your information to commit fraud on your bank accounts.

No comments:

Post a Comment