Friday, February 18, 2011

Another day, another phishing scam

I've seen hundreds of phishing emails over the past couple years. Some brilliantly written; others that wouldn't fool the clichéd blonde in a bar.

The good ones can be tricky to recognize: they seem to come from a valid service provider, are exact replicas of a real communication, and I reluctantly admit, are rather professionally done.

The bad ones are just that: BAD - Spelling mistakes, grammatical errors, broken images, inconsistent messages. I even received one branded as if from Bank A, but with a call to action for Bank B. Very confusing, and hardly likely to dupe anyone.

But yet these scams must have some level of success or the crooks would hang up their HTML and look elsewhere for easy targets.

The problem is that so many Internet users are just that: easy targets. Some believe that because they don't understand "technology", they can't arm themselves against digital-media fraud. In reality, many of the techniques used to recognize a phishing attempt, have more to do with common sense, than with being an Internet super-user.

The only way to avoid being a victim of phishing is to educate yourself.


How can you tell if an email is fraudulent?

  • Fraudsters don’t know who you are. 99.9% of email phishing is “spray and pray”, so the email is actually not directed at you personally. They happen to have your email address, but they have no other personal information about you. Don’t respond or interact with any email which is not addressed to you personally in the body of the email.
  • Fraudsters want your personal information. The purpose of a phishing email is to get information from you that enables access to your money. A phishing email will ask for your personal security information, such as your ATM pin, or your credit card number and pin. Banks will never send an email requesting your ATM or card pin. Any communication that asks you for your internet banking login or password, or anything to do with an ATM is a scam.
  • Fraudsters pray on ignorance. A phishing email is designed to look real, but there are always ways to recognize fraud. Online commerce, internet banking, email statements are all the way of the future. Which means that, unfortunately, scams will also be part of our future online experience. Get informed. Don’t be a passive Internet user.

Use common sense.

If the content of an email seems too good to be true, then it probably is. Be cautious about opening any attachment or downloading any files, regardless of who sent them. Don’t email your personal, financial or password information, EVER.

Stay on top of announcements from your Bank about their email communication and Internet Banking policies. Banks regularly update their fraud notices, as well as provide fraud detection software and tips on how to avoid becoming a victim.

If you do receive a suspicious email, take the time to report it to your Bank’s fraud division – all relevant information in this regard, as well as contact details should be on your Bank’s website.

Alison Treadaway
striata.com

No comments: