Wednesday 12 December 2007

NatWest - REF# 3101 Important Information Regarding Your Account

A plain looking text message, no fancy graphics, but none the less totally dangerous. The code does its best to break up words that could mean spam blockers detects it.

The link actually points to 'http://7848198702/./~urodr/./sso/r2.php?cdn=[email address] and they do attempt to personalise the email by saying Dear [email address]. But what bank would write to me and address me as my email address?

And why on earth would a bank need a reminder of your security details just because it had upgraded its own website? They know the details, they have no reason to ask or to test you on them. If ever you are asked the security details other than when you are expecting to be asked them, either refuse to continue or offer something different. If they accept the wrong information you know they are trying to con you. But don't think that because they ask you to repeat them that means the know they were wrong.

Here's the email.

Dear [email address],

Natwest's Internet Banking, is here by announcing the New Security Upgrade.
We've upgraded our new SSL servers to serve our customers for a better
and secure banking service, against any fraudulent activities.
Due to this recent upgrade, you are requested to update your account
information by following the reference below
Reference*
https://www.natwest.com/default.aspx?refererident=4811756850A8E3C53
We appreciate your business. It's truly our pleasure to serve you.
NatWest Customer Care
This email is for notification only. To contact us, please log
into your account and send a Bank Mail.

No comments: