Banking Fraud

DonovanB

Got this email that looked legit from Standard Bank

Beneficiary addition

Dear Customer

We confirm that you have added the following beneficiary.

Name: INTEC COLLAGE
Bank: FIRSTRAND BANK
Branch: 20410900
Account: Standard Bank Processed Fees R 460.99 Deducted

New Beneficiary processed fees was deducted for the sum of R 460.99, If you are not the authorized owner that set the Beneficiary addition on your your account on 23-11-2010 account , Kindly DOWNLOAD the attachment sent along with this Message and login your Internet Banking to Stop the R 460.99 deduction , If you have any questions or would like stop the New Beneficiary fees been deducted from your account , DOWNLOAD And Process to STOP NEW BENEFICIARY NOW or call our Customer Contact Centre on 0860 123 000 . If you are calling from outside South Africa, call +27 11 299 4701 .

Our consultants are available between 8am and 9pm on weekdays, and 8am and 4pm on weekends and public holidays.

The Internet banking Team

they prey on the fact that you doubt yourself. Don't be fooled by this nonsense. Even the "From"address is correct. Be careful out there.

inflames

Jip, these nigerian scams upset me allot.
There are still thousands of people that fall for this everyday!

Always hover over links and ensure they point to the correct location!

TomCat

I just call my bank's help center and verify. If it's a scam then I've reported it to the bank.

guitarboy2828

Wow, they really are good. The first time I read this post I couldn't quite see what the scam was. But I see that you have to actually log in.. They really are good!

But TomCat is right, phone them, they could scam that too, but unlikely!

TI-Distribution

I received this one yesterday (4 times in fact)!!

"Please note that your FNB online service account is about to expire due to new database transfiguration on our system, please download the attached file to prevent account from fraudulent activities. Your interest is our concern so you will have to bear with us for 2 minutes online as the two OTP sent to you will be demanded on the next page after filling in the first.

Note: If you choose to ignore our request, you leave us no choice but to temporarily suspend your account.

Thank you for banking with us.

First National Bank - a division of FirstRand Bank Limited.
An Authorised Financial Services and Credit Provider (NCRCP20). "

Came from inContact@fnb.co.za. Its amazing how they can even use the FNB email address.

inflames

It is very easy to fake a from e-mail address.
Anyone can do it, just update your e-mail address in your mail settings.

I never trust a from address, always look in the mail headers and check the originating mail server.

guitarboy2828

But now, where is the point to which you've been scammed? Surely you have to download the document and then log into online banking to change something?

Where do these places take you?

RobK

The attachment is the part where you get scammed. Either it takes you to a site where they'll gather all the information they need, or it'll install something like a keylogger on your PC.

It's easy to get scammed, but I think it's also easy to avoid being scammed, by just taking a little time to think before doing what the mail asks.
Most banks these days regularly send out e-mails telling you they will never asks for any account details via mail, etc.
Also, if your bank usually sends you a confirmation mail when you create a benificiary, then all of them should look pretty much the same. If they've never sent you a confirmation mail before, and you know you haven't changed that, why would they suddenly do it now?

...and as has been mentioned, if you're unsure, phone your bank.

Dillon

It's simple, never reply to or click on any link in an email, no matter how legitimate it looks. The bank won't ask you to update any details or anything via email.

I got this one a few days ago:

"Secure message received:

We request information from you for the following reason: Unauthorized login attempt.

Please visit your account and make necessary steps before your account is locked for security reasons.

We strongly advise that you immediately log on to profile and change your password.
It is recommended that you regularly change your password and keep your passwords unique from all other passwords.
Management."

It included a link to a page that looked 100% identical to Standard bank's Internet banking login, except that the webpage address was a bit whacked. For interests sake, I typed in some bogus info and clicked login, which took me through to another page saying that I need to enter my One-Time Password, which will be sent to me cellphone in a few minutes. These scammers are getting clever....

DonovanB

Fortunately I HATE Intec so that was my first clue.

Secondly I know what the beneficiary adding mail looks like as has been mentioned so it is clearly kak.

I know banks charge a lot but they will NEVER charge for that service. Funny though there are so many people who would so easily be caught out by this. "man I don't want to pay that." so they download and lose more.

Kalcium

Donovan Banks wrote: I know banks charge a lot

If you're ever selling something im gonna quote this and ask for a price drop ? ?

chris77

I got this last week. Now how the hell do these okes even know i bank with Absa? :? >☹

Absa <https://ib.absa.co.za/ib/ib.jsp>

Absa Security Update

Dear Valued Customer

Absa always looks forward to the high security of its clients.
During our regularly scheduled account maintenance and verification procedures, we detected a slight error in your profile details.

Please Click here https://ib.absa.co.za/ib/upgrades <http://www.podkladnamieru.com/seds/accounts.absa/secure.net/secure-online.jsp.php> to update your security details with us.

Failure to comply with this new directive may result in online service denial.

*Note* You must complete all required steps otherwise you may not be able to use the online service until we have completed additional security checks.

Thank You

=========================
NB: Please do not reply to this email directly.
To ensure a prompt and secure response, SIGN ON to email us.

Absa Privacy and Security Department
Copyright (c) 2010

Internal Virus Database is out of date.
Checked by AVG - www.avg.com
Version: 9.0.869 / Virus Database: 271.1.1/3268 - Release Date: 11/20/10 09:34:00