Beware of “Halifax Online Service Message” Phishing Scam

[Starbuck]

It’s not uncommon for Halifax bank customers to be targeted by phishers. Currently, a new scam email is making the rounds, informing recipients on the introduction of a new online banking authentication procedure starting with March 23, 2012.

 

Bearing the subject “IMPORTANT - Halifax Online Service Message”, the phony email, provided by Hoax Slayer looks something like this:

 

Dear Customer,

 

Please note that starting from March 23, 2012 we will be introducing new online banking authentication procedures in order to protect the private information of all online banking users.

 

You are required to confirm your online banking details with us as you will not be able to have access to your accounts until this has been done.

 

As you're already registered for online banking all you need to do is to confirm your online banking details.

 

Confirm your details

 

Once you've completed this you'll be able to manage your money whenever you want, giving you more control of your finances.

 

Best wishes,

 

Security Team

Halifax Online Service

 

If the “Confirm your details” link is clicked, the unsuspecting Internet user is redirected to a phishing site that requests a username and password.

 

Once the login credentials are entered another form appears asking for other details such as name, telephone banking PIN, date of birth and the account recovery question.

 

After submitting the information, the victim is taken to the legitimate website of Halifax UK in order to avoid raising any suspicion.

 

Unfortunately for the user, at this point all the data is safely stored in a database controlled by the crooks, allowing them to gain access to the online banking account from which they can make illegal transfers.

 

Internauts are advised to ignore such claims and report the malicious emails to the bank. Those who have already completed the form and provided the phishers with their account details are recommended to immediately contact the financial institution, which can take the appropriate measures to protect the account’s integrity.

 

 

Source:

http://news.softpedia.com/news/Beware-of-Halifax-Online-Service-Message-Phishing-Scam-260777.shtml

[Armageddon]

Cheers for this Pete , their is a similar mail going around from crooks pretending to be The Co - op bank

[KenB]

Thanks for drawing this to our attention Pete.

 

I will just add that here in the UK no bank will email you asking for personal login details.

If you get such an email - it will be phishing ( crooks ).

Delete it immediately.

You have no need to worry - the crooks do not know who you are, where you live or anything about you.

(Unless of course you tell them :) )

[Plastic Nev]

In my case, I know that any e mail supposedly from my bank has got to be a phishing attempt. My bank doesn't have my e mail address.

 

Nev.