"Metro Bank Automated Pending E-Payment" Phishing Scams

Comments: 0
Views: 193
Save
Updated: Dec. 17, 2017 2017-12-17T23:48:48
Posted: Nov. 16, 2017 2017-11-16T08:00:45
Online Threat Alerts (OTA)

Metro Bank customers who have received emails which claim they should click on a link in the same emails to confirm their profiles before an e-payment transfer can be completed, should delete them. This is because the emails are phishing scams being sent by cybercriminals. The link in the email message goes to a phishing website that looks Metro Bank Bank’s website where visitors will be asked to sign-in with their account credentials. But, once the visitors attempt to sign-in their account credentials on the fake or phishing website, their credentials will be sent to the cybercriminals behind the scam, who will use it to gain access to their accounts. Once the cybercriminals have access to the accounts they will steal the owners' money and use their accounts fraudulently.

A Sample of the "Metro Bank Automated Pending E-Payment" Phishing Scam

From: Metro Bank <epayment@yourmetro.co.uk>

Subject: Automated Pending E-Payment REF: OLA11506651

Date: 16 November 2017 at 11:53:41 GMT

Valued Customer,

Please note that starting from November 15, 2017 we will be introducing new online banking authentication procedures in order to protect the private information of all online banking users.

There is a pending transfer payment into you account from our account department. For security reason invalid record or your 8 digits Security number. We require you to confirm your profile on file with us before this transfer can be completed.

This can be done using the reference provide below.

Complete incoming Payment

Please remember to check 'e-Documents' regularly as we may send you documents which you need to action. Your online documents are stored for 7 years and can be viewed, downloaded and printed at any time.

Regards

Customer Service

Metro Online Banking Team

It is important for internet users to remember that they should never click on a link to sign into their online accounts, especially links in email messages. The safest way to sign into their online accounts is to go directly to their online account providers’ websites, by typing the addresses of the websites in their web browsers or using a popular search engine to find the websites.

For example:
Metro Bank’ customers should go directly to https://www.metrobankonline.co.uk/ to sign into their accounts or use Metro Bank's mobile app. Once they have signed in, if there is something wrong with their accounts they will be notified.

Recipients of the phishing Metro Bank email who have clicked on the link and have attempted to sign into the phishing website with their account’ credentials should immediately change their passwords and contact Metro Bank Bank for help.