What information do fraudsters seek via fake banking emails?

Question

Accepted Answer

Fraudsters Seek Personal and Security Details Through Fake Banking Websites

Fraudsters are targeting bank customers by sending fake emails that mimic official security alerts, aiming to trick recipients into revealing sensitive personal information. These fraudulent emails typically claim there are security problems with the user's account and instruct them to click on a provided link. This link directs victims to a deceptive website designed to look like a legitimate banking portal, such as Maybank2U. Once on the fake site, users are prompted to update personal details, passwords, and telephone numbers, which are then stolen by the criminals.
Deceptive Emails Prompt Users to Click Malicious Links

The initial stage of this scam involves the distribution of emails that appear to originate from a trusted financial institution. These messages are crafted to alarm the recipient by falsely stating that their account is experiencing security issues. The primary objective of these emails is to coerce the user into interacting with a hyperlink embedded within the message.
Fake Websites Mimic Legitimate Banking Portals

Upon clicking the link, users are presented with a fraudulent website that bears a striking resemblance to the actual online banking platform. For instance, the fake site is designed to look identical to the official Maybank2U portal. This visual deception is crucial for the fraudsters to gain the victim's trust and encourage them to proceed with providing information.
Victims Are Asked to Update Sensitive Personal Data

On these imposter websites, unsuspecting individuals are prompted to enter and update critical personal information. This includes details such as their full name, address, identification numbers, account credentials, and contact numbers. The requirement to "update" these details serves as a pretext for extracting the necessary data for fraudulent activities.
Stolen Information is Used for Unauthorized Withdrawals

Following the submission of personal details and passwords on the fake website, the syndicate proceeds to access the victim's legitimate bank account. The gathered information is then exploited to conduct unauthorised transactions, leading to a decrease in the funds held within the victim's account. The police have reported cases where such fraudulent activities have resulted in significant financial losses, with one instance involving RM22,300 from four separate reports.

Reading history

Hide →

This history is cleared when the page is closed.

What information do fraudsters seek via fake banking emails?

Loading

Was this article helpful?

Helpful

Not helpful

Report an issue

1

0

0

Share with friends