Phishing - The Halifax Bank Plc Email Scam
Redirects to spoofed (Fake) website: http://macblog.it
You may have received an email like the one below that looks very authentic,
like it came from Halifax Bank Plc. This email was not sent by Halifax Bank Plc; Halifax Bank Plc is a victim as well. If you receive
an email similar to the one below, DO NOT click on the link, and do not enter
any information on the forms there.
The website that the link leads to is a spoof; a fake website, not created by
Halifax Bank Plc. It goes to http://macblog.it, not Halifax Bank Plc! When you enter the information they ask for, you will simply be
handing the thieves the keys to your bank accounts. That is how spoofing
and phishing works.
Remember, no reputable business would send you
an email requesting your personal account information. Any such email you
receive asking for this information should be considered phony and brought to
the attention of the business being 'phished'.
Anytime you need to go to a website for your bank, credit card companies or
other personal, financial or confidential information; do not follow a link in
an email; just type their address in your browser directly (such as
www.Halifax Bank Plc.com )
Below are actual phishing emails that started circulating in early 2008. The
Verify Account link went to the phisher's website,
http://macblog.it/usati/halifax-online.co.uk/_mem_/formslogin.asp/.
Halifax PLC. has been receiving complaints from our
customers for unauthorized use of the Halifax Online accounts.
Due to this, you are requested to follow the
provided steps and confirm your Online Banking details for the safety of
your Accounts.
Verify Account
However, Failure to do so may result in temporary
account suspension. Please understand that this is a security measure
intended to help protect you and your account.
Thanks for your co-operation.
Security Center Advisory
Halifax PLC.
Other examples:
Due to several failed attempts to access to your
account , we temporary deactivated your online-access for your account for
security reasons.
Other examples:
We recently upgraded our Online Banking security
system with a newly established security server in which guarantee's your
maximum protection when accessing your account online.
More Information and What to Do
Halifax has an online demonstration of phishing:
click
here to learn more with Halifax's phishing demo.
Halifax also offers the following advice:
At first glance, phishing emails look like the genuine article. They may
have an official looking logo and information taken from legitimate websites.
But look a little closer - and there are things you can look out for:
- First and foremost, Halifax would never send you an email asking you to
verify your secure online banking details. Any email asking you to 'verify
your account', 'confirm your sign in details', or using a similar form of
words, is certainly a scam.
- Secondly, beware of links in emails. Web addresses in phishing emails
can be disguised so that they appear to be taking you to a trusted address
when, in fact, they take you somewhere different. This is usually a spoof
site that has been set up by the fraudsters to try and get you to hand over
your details.
- Genuine emails from the Halifax do contain links, but never to the
online banking sign-in page. If you are in any doubt about whether an email
is genuine, don't click the link.
What to do if you think that you have received a suspicious email
that appears to come from Halifax?
For more information about phishing, see
this page.
| 
