"Phishing" Examples
Can You Spot the Phony Phishing Emails? Here's a hint: They are all phony phishing emails designed to fool you into going to a bogus website, where you'll be asked for passwords, PINS, credit card numbers, or other sensitive information that can make you a victim of fraud or identity theft. Never, ever, supply sensitive information online after following a link sent to you via email. If you need to log in to a financial web site, you should always either type in the "www" address, or follow one of your own bookmarks. For more information on how to avoid being "hooked" by phishing schemes, follow this link. The examples below are real emails, received by TCCU staff and members. The links to the spoofed websites have been disabled, but if you had followed them, you would have seen an exact replica of the real financial institution's web site. The only difference would have been those phony web sites are run by criminals looking to steal your information! Phony Wells Fargo email asking you to to "verify your PIN." Phony Bank of America email phishing for your credit card number. Phony PayPal email, again, seeking your credit card information. Phony "You just won the lottery" email. Never mind the fact that you never entered any lottery! Phony job offer email. What's the job? It usually involves laundering their bad checks! Phony "Someone just died and left you money" letter. If it's fromn a lawyer, it must be real, right? A Nigerian 4-1-9 Scam email from a woman who "wants to give millions to charity." Another Nigerian 4-1-9 Scam email with an military twist. Still another Nigerian 4-1-9 Scam email from "Morgan Stanley," who supposedly works for Fidelity International! Again, never ever submit personal financial information to a web site that you arrived at via an emai link! And remember, the web site you are on may seem 100% legitimate, but can still be a phony, or "spoofed" web site. When in doubt, contact the institution you wish to deal with directly, using a web or email address that you know is legitimate, or calling them on the phone. While many of these scams are easy to detect once you know what clues to look for, it is becoming harder and harder to spot the phony sites, and some are almost impossible to detect. It is usually best to simply treat all such emails as suspect.