Web Scams and What to Look For
January 12th, 2007
Recently I have noticed more and more web scams coming into my inbox. The latest one that I have seen is one for Bank of America. The email goes something like this
Hello,
We here at Bank Of America are working 24 hours a day to keep you protected from identity theft.
It has come to our attention that you must update your Bank Of America account.
Please fill out this form below
to verify your information. If you do not update you Bank Of America account
within 24 hours the account will be suspended until further notice.NOTE : Bank Of America will never ask for your personal pin , dont give it to anyone.
Please Click Here ToFill OutThe Form.
Rick Hamilton
Bank Of America Fraud Division
www.bankofamerica.com
This one is sorta different from other scams because most scammers do not use that same language as the company would. For instance, most banks including Bank of America (BOA) always say that they will never ask for your pin number nor should you give it to them. In this case the scammer includes that exact wordage in his email.
Here are some tips so you don’t get bitten by the bullet;
- Look at the From email address that you received. Does it look bogus? Look at the text after the @ symbol. However, scammers are now able to mask the email address the letter is sent from.
- If it looks fake or your feel something odd about it then don’t do it. Most companies will contact you by postal mail if they need information.
- If the site requires you to log in to see your account, then everything you do to your account should be when you are logged in. Example - BOA requires a log in to access account information. You are not able to change your address or phone number with BOA unless you are logged into your account.
- Look at the address bar of your browser. All sites will be “something.com ” if the address is an IP address (###.###.###.###) then its a fake. They use the IP address because they are unable to us bankofamerica.com. To check where the IP address is registered to click here and place the IP address into the text box at the top and click the “Search Whois” button. This will tell you where the IP address is registered to and maybe who. (This scam is out of Amsterdam)
- Your browser should prompt you! If your browser does not warn you that this site may be bogus then get a new browser. In Firefox 2.0 they pop up a message. Click on the thumbnails to see!
- Lastly use common sense. People practicing bad common sense will get bit by the bullet.
FYI - Internet Explorer’s Phishing Filter did not pick up this site. However, it looks like there filter is based on sites that are submitted to Microsoft. So if the site has not been submitted then it will most likely not show up. If a site is phishing for your data then a pop up message warning you about its content will appear.