Warning about 'phishing' turns out to be scam

Australian bank's customers targeted

By silicon.com, 19 December 2003 09:50

NEWS An email purporting to be an advisory from Australian bank Westpac to its customers about the dangers of online fraud is itself fraudulent, a spokeswoman confirmed today.

The email, headlined 'Online Banking: Protect Yourself from Internet Fraud', purports to come from the address validate@westpac.com.au and includes a link to a website below the message: "As part of our ongoing commitment to provide the 'Best Possible' service to all our Members, we are now requiring each member to validate their accounts once per month."

However, a Westpac spokeswoman stressed that the email did not come from the bank and reiterated a warning that the only way to visit Westpac internet banking was by typing www.westpac.com.au into a browser.

"We will never send out emails of this type," the spokeswoman said.

Despite the email itself outlining two examples of common internet scams - the first an attempt to steal a customer's login details by sending out emails which appear to be from a financial institution and requesting personal details and the second involving creation of a 'ghost website' which captures customer details and uses them to transact using the customer's account - it also includes a number of indicators of its fraudulent nature. These include suspect grammar, font variations and the link to a website requiring a customer to input their account details, including passwords.

The spokeswoman said criminals involved in such scams were becoming more and more sophisticated.

Iain Ferguson writes for ZDNet Australia.

Comments

There are 3 comments. Join the discussion

  1. 1. paul johnson

    i recently received the exact same email purporting to be from PayPal. Beware big time

  2. 2. anonymous

    Hello .. I think I have a nearly fool-proof litmus test to identify a scam. In short, ANY solicitation for personal information not readily available in the public domain is likely a scam to be rigorously avoided.
    Skip

  3. 3. anonymous

    Be careful of the same scam from PayPal. I have received several "messages from PayPal" using the company logo with the same tactic-log in from the bogus email to let the operator grab log in and password info.

Post your comment

In order to post a comment you need to be registered and logged in.

Log in or create your silicon.com account below

Will not be displayed with your comment

By signing up for this service, you indicate that you agree to our Terms and Conditions and have read and understood our Privacy Policy.

Questions about membership? Find the answers in the Membership FAQ