Martin Lewis
MoneySavingExpert.com Masthead Logo

Phishing Scams

How to avoid scam financial emails

updated yearly

Get all top deals, guides & loopholes in MoneySavingExpert's free, spam free weekly e-mail


Print
Email this
Bookmark
Digg
Facebook
Twitter


Phishing is a special type of spam e-mail, cleverly disguised in an attempt to steal your passwords and bank codes.  Once the phishers have got those, they steal your money.





 
How does Phishing work?
 What can I do about it?
 How about phone calls?
 Phishing Examples
 Final Thought

 


 
Don't get caught Hook, Line and Sinker


How does it work?


You receive a professional and plausible looking email from your bank.  These are sent at random in the hope they may just catch someone who has a bank account with that bank and thinks it is genuine.  Often you’ll realise it’s a con because you don’t have an account with that bank, but sometimes you may get caught.

At the bottom of the e-mail, there will be a link.  Often it looks like a real one.  When you click on it, it'll probably take you through to a professional looking website – a mirror image of the real thing.  You’ll comfortably put your password in – and then you can say bye bye to your cash. 


What can I do?


NEVER EVER EVER EVER click a link and enter your password - no matter how genuine it looks.  If it looks a genuine security concern, call your bank or visit its published website address.  If it is genuine you can handle it that way, just never click on these links.


What about phone calls?


These are likely to be more genuine, however I would still suggest that as good practice, you never give your password.  Always call the bank back by its published number and that way you know it is genuine. 


 My Rough Rule of Thumb

   Mistaking the genuine for a scam is nowhere near as bad as
mistaking a scam for the genuine


Examples of phishing


I receive phishing emails constantly, so I thought I would share a couple of them with you.  These have NOTHING to do with the parent banks.  I have slightly changed the links in them to prevent anyone clicking them in error.


PHISH No. 1 – The Invisible Text Phish


Run your mouse over the email and select it.  You'll see invisible text appearing.  The additional characters you can see in this help it beat some anti-spam software.

CItI

©

The technicaI2services of this BankNare carrying out a3planned software upgrade.
We earnestly
jask you9to visit the folIowingilink to start the procedureaof confirmation ofLcustomers'Hdata. Hea
lth in 1939
https://web.da-us.citibank.com/Iogin.ref.XXXX1449/scripts/client_conf.jsp Mau I ask ThisRinstruction has beenxsent to allYbank customersEand is obIigatory to foIlow. NBA LycosWe0present ourDapologies and thankxyou forCco-operating.Will you, please...
in 1961 Pictures in 1910 may closeWorld War II in 1845The NFLin 1935 Pearl Harbor AnmemberSofRcitigroup

in 1978 in 2000 CopyrightG©R2004cCiticorp

d

PHISH No. 2 - The Earnest Approach
 
What I love about this one is it purports to be a genuine protective email aimed at stopping just this type of problem.  Cunning devils.


Email address this seemed to come from: Citybank Email Security.
Underlying address it actually came from: Security-Alert@bank.alert.it.rd.yahooX.com

CItI©


Dear Citibank Member,

This email was sent by the Citibank server to verify your email address and your identity. You must complete this process by clicking on the link below and verifying your Citibank account.

Citibank will test your identity due to latest security check.

Some of our clients recived calls from individuals pretending to be Citibank.

Tip of the day:
===============

If you receive a suspicious phone inquiry, like one asking you to verify personal information, don't provide any information and call us right away.

In order to verify your account please click on the link below !

http://it.rd.yahoo.com/*%48%54%74p%3A%2f/un%69ver%73%61lpr%69%63%65%Z  



Final Thought


Phishing e-mails can appear to come from any bank or building society, or financial organisation for that matter, such as the Inland Revenue or HM Customs & Excise.  They are extremely professionally done, look at the above, it's very easy to be fooled.
 
Just follow the golden rule.  Never click a banking/financial link in an e-mail.  Always go to the published website address yourself.

These people are scum, but clever scum.  Protect yourself.

Test your knowledge

Now you know all about phishing, try this quick quiz to see how savvy you are.   

 




Other Articles You May Be Interested In...

Get MoneySavingExpert's free, spam-free weekly email
Ensure you don't miss any new top guides, deals & loopholes


contacts

Always double check the product details before signing up to them
Spotted out of date info/broken links? Let us know via brokenlink@moneysavingexpert.com

LINKS THAT HELP THIS SITE
(all have a * in above article)
(this has no impact on product or pick - see explanation below)

N/a

Explanation (of * links)

How this site is funded. Two types of contacts are listed. The first, which all have a * within the main body of the articles, help MoneySavingExpert.com stay ad-free and free to use, as they're ‘affiliated links' which invisibly take you usually via affiliate linkage or commercial money sites, which then pay this site. The second type doesn't help and therefore doesn't have a *.

You shouldn't notice any difference, the links don't impact the product at all and the editorial line (the things we write) is NEVER impacted by the revenue. If it isn't possible to get an affiliate link for the best product, it is still included in exactly the same way. For more details read how this site is financed.


LINKS THAT DON'T HELP THIS SITE

(please only use if necessary)

No * Link Available: Mailfrontier

Duplicate links of the * links above for the sake of tranparency, but this version doesn't help MoneySavingExpert.com:
N/a

This website is based on journalistic research. It does not constitute financial advice. Any information should be considered in regard to specific circumstances. All tips are followed at your own risk and should be followed up with your own research . See Full Terms & Conditions and Privacy Policy. ® Martin Lewis and MoneySavingExpert.com. 'Martin Lewis' and 'Money Saving Expert' are registered trademarks belonging to Martin Lewis.