Online Threat Alerts (OTA)
An anti-cybercrime community alerting the public.

"CapitalOne Important: Action Required" Phishing Scams

Capital One customers are asked not to click on links in emails to sign into their accounts. This is because cybercriminals are sending out phishing email scams to trick their potential victims into clicking on the link within them, which goes to phishing websites that steal online banking accounts credentials. The phishing websites were created to look exactly like the legitimate Capital One's website, to trick Capital One customers into believing that they are signing into their accounts on the legitimate Capital One’s website.

Advertisements

A Sample of the "CapitalOne Important: Action Required" Phishing Scam

From: Capital One Capital-Message- 4522735200991039066@en.mail.com

Date: October 7, 2017 at 9:35:48 PM PDT

Subject: Important: Action Required

Visit Capital One

Important: Action Required

Due to recent rise in attacks targeted at our customers on the internet we are adding an extra layer of protection to ensure the financial security of our customers.

The security of your credit card is a top priority for us and we want to work together with your email provider to protect it.

What do do next?

Please log in to your account here to complete the steps to connect your email with your account.

In order to protect your account, access will remain limited. In addition, you will not be able to use your credit card until you complete the necessary step.

Capital One's customers who have attempted to sign into the fake and phishing website, will unknowingly send their banking online account credentials to the cybercriminals who have created the fake website. Once the cybercriminals have gotten their potential victims’ Capital One account usernames and passwords (credentials), they will gain access to their accounts, steal their money and use their accounts fraudulently, which will be traced back their victims who may get arrested for something they know nothing about. Therefore, Capital One’s customers who have been or think they have been tricked by the phishing email message above, or others similar to it, should contact Capital One immediately for help.

Capital One customers are advised not to click on a link to sign into their accounts in email messages, even if the email messages that contain the link appear legitimate. They should instead, go directly to www.capitalone.com and sign-in from there. This will prevent them from clicking on links in fake email messages that go to a phishing website that steals personal information, financial information, or account credentials. Once they are signed into their accounts, they will be notified of changes, updates or important things they need to do.

Check the comment section for additional information, or share what you know or ask a question about this article, by clicking the 'View or Write Comment' button below.

Note: Some of the information in samples on this website may have been impersonated or spoofed.

Share this article with others.
Advertisements
Write / View Comments (0)
View on Online Threat Alerts (OTA)
Help Maintain Online Threat Alerts (OTA)