Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

Phishing WARNING

Jun 9, 2007 10:48PM PDT

Hi, All.

Unfortunately, Phishing and Malware are a multi-daily occurrence. Most have obvious flaws (like a link to a site with a couple extra phrases and ending in "ru!") so they don't fool for a moment. But occasionally there's one that looks almost perfect, and might trap even the wary on a bad day. This is one of them -- I suspected it from the get-go, but my McAfee Internet Security Suite (which I'm liking a lot more now that I've got a dual-core two GB system, so its memory hogging isn't an issue) tagged it as a "likely phishing site," and in fact the site had apparently been taken down after complaints from someone. But be warned -- at least some of these crooks are getting better at it!

Here's the offending message:

From: "VISA" <security@visa.com>
Subject: Protect Your Credit Card - Activate Now for Verified by Visa
Date: Sat, 9 Jun 2007 20:32:53 -0700

Visa?s multiple layers of security provide cardholders with an extraordinary level of protection so they can feel confident no matter how they use their Visa card. Verified by Visa plays an important role in this strategy in the following ways:

* Improving the security of online payment transactions
* Increasing both cardholder and merchant confidence in Internet purchases
* Reducing disputes and fraudulent activity related to Visa payment cards

Simply activate your existing card with the Verified by Visa service and create your personal password. The service is free to Visa cardholders. You?ll have the added assurance that your Visa card is safer when you shop at participating online stores.

Activate Now for Verified by Visa <<-- legitimate-looking active link to well-disguised phishing site

Avast, mateys -- thar be monsters out there!

-- Dave K, Speakeasy Moderator
click here to email semods4@yahoo.com

The opinions expressed above are my own,
and do not necessarily reflect those of CNET!

Discussion is locked

- Collapse -
How does one officially complain about such scams?
Jun 10, 2007 12:59AM PDT

I have recently received a convincing scam (well, for an innocent it would be convincing) Where a bank asks me to sign into my business account and do something important and time sensitive. The link takes you to a sign in page... you sign in ( no matter what ID/Pass Word combo you put in ) and the page will then jump you to the bank's legitimate index page. One obvious tip off is that any financial institution, including credit cards, don't link you directly to a sign in page (the other was I had no account at such bank).

Anyway... where does one go to warn/complain of such phishing scams? Is the re a central authority or do you just contact every institution that is being used as a front?

grim

- Collapse -
Grim, I usually visit the bank's real web site,
Jun 10, 2007 4:23AM PDT

find the "fraud alert department, and send a copy to them along with the suggestion that they should send an alert out to their customers, since all but the dullest non-customers will know that they don't have an account there and so recognize the phishing expedition.

-- Dave K, Speakeasy Moderator
click here to email semods4@yahoo.com

The opinions expressed above are my own,
and do not necessarily reflect those of CNET!

- Collapse -
I got one ....
Jun 10, 2007 5:41AM PDT

........ claiming to be from my bank early last year.

I phoned them and was directed to a special link to which to send the copy of the email/

Banks and credit card companies NEVER have notified me by email for any reason, always by snail mail.

I did recently have a phone call re: a snail mail I had received re: a new interest earning account. However, even then. there were no mentions of my account number, etc.

Angeline
Speakeasy Moderator
click here to email
semods4@yahoo.com

- Collapse -
All bank emails are phishes....
Jun 10, 2007 10:12AM PDT

IMO. My bank never emails me about anything. They send all promotions via snail mail. The only bank emails I ever receive are phishing expeditions.