The email message: "We noticed unusual activity in your Anz account", is a phishing scam and was not sent by the Australia and New Zealand Banking Group Limited (ANZ). Do not click on the link or follow the instructions in this email message, if you have received it. This is because it was designed to steal your ANZ.com user name and password.
The Phishing ANZ Email Message
From: "Anz Bank" *@anz.com
Subject: We noticed unusual activity in your Anz account
Date: Tue, 18 Jun 2013 22:11:40 +0500
Dear Anz Card member,
Recently, there's been activity in your Anz account that seems unusual compared to your normal account activities. Please log in to Anz to confirm your identity and update your password.
To help protect your account, no one can send money or withdraw money.in addition, no one can close your account, send refunds, remove any bank accounts, or remove credit cards.
We're concerned that someone is using your Anz account without your knowledge. Recent activity from your account seems to have occurred from a suspicious location or under circumstances that may be different than usual.
Log in to your Anz account as soon as possible. We may ask you to confirm information you provided when you created your account to make sure you're the account holder.
Log in using the following link:
hxxp://www.truemetrics .cn/www.anz.com.html
Let's work together to restore your account. After you complete all of the tasks, we should respond within 48 hours.
Thank you for using Anz!
Although the email appeared as if it came from anz.com, it was not. It was spoofed. Spoofing is the process of altering an email message to make it appear as if it came from someone else.
The scammers created the file name "www.anz.com.html" on the Chinese website "www.truemetrics.cn". So, this would make the link to this phishing web page: http://www.truemetrics .cn/www.anz.com.html .
They did this to trick you into thinking the link goes to the ANZ website, which is located at website address http://www.anz.com. But, clicking on the link will only take you to the Chinese website hxxp://www.truemetrics.cn, and not the legitimate website http://www.anz.com.
The Phishing ANZ web page located hxxp://www.truemetrics.cn:
If you were tricked into entering your ANZ user name and password on this website, please change your password and contact ANZ as soon as possible.