Phishing - The Commerce Bank Email Scam
Redirects to spoofed (Fake) website: http://commerceconnections.commercebank.com
You may have received an email like the one below that looks very authentic,
like it came from Commerce Bank. This email was not sent by Commerce Bank; Commerce Bank is a victim as well. If you receive
an email similar to the one below, DO NOT click on the link, and do not enter
any information on the forms there.
The website that the link leads to is a spoof; a fake website, not created by
Commerce Bank. It goes to http://commerceconnections.commercebank.com,
which a appears to be a redirected subdomain, not Commerce Bank! When you enter the information they ask for, you will simply be
handing the thieves the keys to your bank accounts. That is how spoofing
and phishing works.
Remember, no reputable business would send you
an email requesting your personal account information. Any such email you
receive asking for this information should be considered phony and brought to
the attention of the business being 'phished'.
Anytime you need to go to a website for your bank, credit card companies or
other personal, financial or confidential information; do not follow a link in
an email; just type their address in your browser directly (such as
www.CommerceBank.com )
Below are actual phishing emails that started circulating in early 2008.
We have put a warning over the links to the phisher's website.
Scam Phishing email:
From:
Commerce Bank
Sent:
Thursday, January 24, 2008 11:49 AM
Subject:
Commerce Bank Customer Service: Important Account Notification. <message
ref: 8<7-15>>
Dear Commerce Bank customer:
Commerce Bank Customer Service requests you to complete Commerce
Connections Form.
This procedure is obligatory for all business and commercial customers of
Commerce Bank.
Please select the hyperlink and visit the address listed to access
Commerce Connections Form.
http://commerceconnections.commercebank.com/cmserver/ccf.cfm?session=41340331692135081674352475201792193619535275314580
Again, thank you for choosing Commerce Bank for your business needs. We
look forward to working with you.
This mail is generated automatically.
Commerce Bank Customer Service
Here is the response from Commerce Bank:
Thank you for your message regarding this matter.
We are aware of this fraudulent e-mail request circulating
among consumers. In the normal course of business, Commerce Bank
does not ask for you to enter (or record) account information in
unsecured email communication for security or any other reason. We
also do not solicit personal information about you or your accounts
through unsecured email. Our best advice is never provide account or
personal information by email and do not share your PIN under any
circumstance.
When you report
fraudulent e-mails that appear to be from Commerce Bank, we take the
necessary steps to protect your account by working aggressively with
law enforcement agencies to investigate the fraudulent activity.
For additional information, you may also visit
us online, at
www.commercebank.com.
Our website can provide you with valuable
information including: tips to protect yourself against Email and
Online Fraud, examples of latest phishing attacks, links to other
consumer fraud information websites, and more.
If you have any other questions, please e-mail
us or call 1-800-986-2265. We are available from 7:30 a.m. to 10
p.m. Monday through Friday and 7:30 a.m. to 4 p.m. on Saturday,
Central Time.
Thank you for using Commerce Bank's Online
Banking Service.
For more information about phishing, see
this page.
| 
