Identity Theft Scam Examples

ONLY IN SCAMS does an email ask you to confirm account information for a bank or other account. Pretending to link to eBay or Citibank or wherever and having fake look-alike pages (that are sometimes pretty damn convincing) should always raise a flag.

If a legitamate company wants you to review your information, they will SHOW YOU your “current” information, proving they already have it, and will only ask you to log in the usual way at the site you usually go to. NO EXCEPTIONS.

Don't believe me? Next time you get such an email, put in a fake account username, password whatever, and it wont even notice …

14 Responses to Identity Theft Scam Examples

  • admin says:

    I don't even have an account with this bank …

  • admin says:

    Fake PayPal email … notice how it is for “your safety” not to give information to “fraudulent websites”? They're your buddies, on your side, right?

  • admin says:

    Going all out to pretend they are PayPal, here's another … note all the “information” they supply to give themselves credibility …

  • admin says:

    Some people, however, use far less effort … not even graphics.

    ——————————————-

    Dear PayPal user,
    As part of our continuing commitment to protect your account
    and to reduce the instance of fraud on our website, we are undertaking a
    period review of our member accounts.
    You are requested to visit our site by following the link given below.
    http://www.paypal.com/verification/%?6488820019=20

    Please fill in the required information. This is required for us to continue to offer
    you a safe and risk free environment to send and receive money online,
    and maintain the PayPal Experience.
    Thank you.

    Accounts Management As outlined in our User Agreement, PayPal will periodically
    send you information about site changes and enhancements.
    Visit our Privacy Policy and User Agreement if you have any questions.

    Copyright 2003 PayPal.
    All Rights Reserved. Designated trademarks and brands are the property of their respective owners.

  • admin says:

    I don't even know what the this one was about …

  • admin says:

    Another place I have no bank account …

  • admin says:

    Never even HEARD of this bank.

    Scary creativity, too. Read the bold print about not accessing your account for 2 days …

    {note: see next post}

  • admin says:

    Okay, here's an example of what happend when you click to verify the information. As common in many scams, some of the links on the fake page on their own server go to the REAL pages of the real bank (or eBay, PayPal) website.

    CitizenBank_emailscam.pdf (89.1 KB)

  • admin says:

    And another SunTrust one …

  • admin says:

    And the link from the previous post actually goes to
    http://80.162.206.152/
    (wherever the that is …)

    From here, you can input ANY username and password and it will accept it because it has no idea if it's real or not and assumes it is. Then it will ask you for all sorts of personal identification you don't want them to have.

    And the rest of the links are all dead, as they hope you wont click on them.

  • admin says:

    And another Suntrust one … identical to some others I received in the past.

    Dear SunTrust Bank customer,

    Recently there have been a large number of identity theft attempts targeting SunTrust Bank customers.In order to safeguard your account, we require that you confirm your banking details.
    This process is mandatory, and if not completed within the nearest time your account may be subject to temporary suspension.

    To securely confirm your SunTrust Bank account details please click on the link below:

    https://www4.SunTrust.com/internetBanking/R…isplayLoginPage

    Thank you for your prompt attention to this matter and thank you for using SunTrust Bank.

    Sincerely,
    SunTrust Bank Internet Banking & Support department.

  • admin says:

    As if I needed more examples … this one links to a site that links directly to SunTrust itself.

  • admin says:

    Sovereign Business Banking

    Dear Sovereign customer,

    We recently reviewed your account, and suspect that your Sovereign Internet Banking account may have been accessed by an unauthorized third party. Protecting the security of your account and of the Sovereign network is our primary concern. Therefore, as a preventative measure, we have temporarily limited access to sensitive account features.

    To restore your account access, please take the following steps to ensure that your account has not been compromised:

    1. Login to your Sovereign Internet Banking account. In case you are not enrolled for Internet Banking, you will have to use your Social Security Number as both your Personal ID and Password and fill in all the required information, including your name and your account number.

    2. Review your recent account history for any unauthorized withdrawals or deposits, and check your account profile to make sure not changes have been made. If any unauthorized activity has taken place on your account, report this to Sovereign staff immediately.

    To get started, please click the link below:

    https://www.site-secure.com/cgi-bin/cgig2.e…nk/SID/GetLogon

    We apologize for any inconvenience this may cause, and appreciate your assistance in helping us maintain the integrity of the entire Sovereign system. Thank you for your prompt attention to this matter.

    Sincerely,

    The Sovereign Team

    Please do not reply to this e-mail. Mail sent to this address cannot be answered. For assistance, log in to your Sovereign account and choose the “Help” link in the header of any page.

  • admin says:

    Washinton Mutual

    We recently reviewed your account, and suspect that your Washington Mutual Banking account may have been accessed by an unauthorized third party.  Protecting the security of your account and of the System network is our primary concern. Therefore, as a preventative measure, we have temporarily limited access to sensitive account features.

    To restore your account access, please take the following steps to ensure that your account has not been compromised:

    1. Login to your Internet Banking account. In case you are not enrolled for Internet Banking, you will have to use your Social Security Number as both your Personal ID and Password and fill in all the required information, including your name and your account number.

    2. Review your recent account history for any unauthorized  withdrawals or deposits, and check your account profile to make sure not changes have been made. If any unauthorized activity has taken place on your account, report this to Internet Banking Staff immediately.

    To get started, please click the link below:

    http://login.personal.wamu.com/logon/logon.asp?dd=1

    We apologize for any inconvenience this may cause, and appreciate your assistance in helping us maintain the integrity of the entire Internet Banking system. Thank you for your prompt attention to this matter.

    Sincerely,

    The WaMu, Inc Team

    Please do not reply to this e-mail. Mail sent to this address cannot be answered. For assistance, log in to your Online Banking account and choose the “Help” link in the header of any page.

    Familiar???

Leave a Reply

Your email address will not be published. Required fields are marked *