ANZ Phishing Email Scam - "We noticed unusual activity in your Anz Account"
The Phishing ANZ Email Message
From: "Anz Bank" *@anz.com
Subject: We noticed unusual activity in your Anz account
Date: Tue, 18 Jun 2013 22:11:40 +0500
Dear Anz Card member,
Recently, there's been activity in your Anz account that seems unusual compared to your normal account activities. Please log in to Anz to confirm your identity and update your password.
To help protect your account, no one can send money or withdraw money.in addition, no one can close your account, send refunds, remove any bank accounts, or remove credit cards.
We're concerned that someone is using your Anz account without your knowledge. Recent activity from your account seems to have occurred from a suspicious location or under circumstances that may be different than usual.
Log in to your Anz account as soon as possible. We may ask you to confirm information you provided when you created your account to make sure you're the account holder.
Log in using the following link:
Let's work together to restore your account. After you complete all of the tasks, we should respond within 48 hours.
Thank you for using Anz!
Although the email appeared as if it came from anz.com, it was not. It was spoofed. Spoofing is the process of altering an email message to make it appear as if it came from someone else.
The scammers created the file name "www.anz.com.html" on the Chinese website "www.truemetrics.cn". So, this would make the link to this phishing web page: http://www.truemetrics .cn/www.anz.com.html .
They did this to trick you into thinking the link goes to the ANZ website, which is located at website address http://www.anz.com. But, clicking on the link will only take you to the Chinese website hxxp://www.truemetrics.cn, and not the legitimate website http://www.anz.com.
The Phishing ANZ web page located hxxp://www.truemetrics.cn:
If you were tricked into entering your ANZ user name and password on this website, please change your password and contact ANZ as soon as possible.
Check the comment section below for additional information, share what you know or ask a question about this article by leaving a comment below. And, to quickly find answers to your questions, use our search
Click here help maintain Online Threat Alerts (OTA).
Note: Some of the information in samples on this website may have been impersonated or spoofed.
Comments, Questions, Answers, or Reviews
To protect your privacy, please do not post or remove sensitive information in or from your comments, questions, or reviews.
Write Your Comment, Question, Answer, or Review
NB: We will use your IP address to display your approximate location to other users.