Online Threat Alerts (OTA)
An anti-cybercrime community alerting the public.

"Metro Bank Payment Verification" Phishing Scams

Metro Bank customers who have received emails like the one below, which claim they should click on a link in the same emails to check their accounts for fraudulent transactions, should delete them. This is because the emails are phishing scams being sent by cybercriminals. The link in the email message goes to a phishing website that looks Metro Bank Bank’s website where visitors will be asked to sign-in with their account credentials. But, once the visitors attempt to sign-in their account credentials on the fake or phishing website, their credentials will be sent to the cybercriminals behind the scam, who will use it to gain access to their accounts. Once the cybercriminals have access to the accounts they will steal the owners' money and use their accounts fraudulently.

Advertisements

A Sample of the "Metro Bank Account Locked" Phishing Scam

Subject: Reminder: Verify payment - Action Required

Date: Tue, 31 Oct 2017 10:51:49 +0000

From: Metro Bank - jbandy@uccs.edu

Dear Customer.

Thank you for banking with Metro Bank.

As part of our ongoing security effort we are carrying out various spot checks on accounts.

Having checked your account we have noticed that there are transfers that have left your account on the 30th October.

Please log on to our personal homepage and check your account. If there are any transactions that you do not recognise, please call our contact centre as soon as possible.

To view this transaction and your current balance,please use the secure link below :

https://personal.metrobankonline.co.uk/MetroBankRetail/

If you have any questions related to this message or the funds transfer, please contact the our customer service.

Kind Regards,

Online funds transfer to your online account.

Regards

Harvey Griffith

Metro Bank Contact Centre Manager

TRACKING NUMBER: A00001540684-00004644766

Internet communications are not necessarily secure and may be intercepted or changed after they are sent.

cahoot does not accept liability for any such changes.

If you wish to confirm the origin or content of this communication, please contact the sender using an alternative means of communication. This communication does not create or modify any contract.

This email may contain confidential information intended solely for use by the addressee. If you are not the intended recipient of this communication you should destroy it without copying, disclosing or otherwise using its contents.

Please notify the sender immediately of the error.

Copyright 2017 Metro Bank.

It is important for internet users to remember that they should never click on a link to sign into their online accounts, especially links in email messages. The safest way to sign into their online accounts is to go directly to their online account providers’ websites, by typing the addresses of the websites in their web browsers or using a popular search engine to find the websites.

For example:
Metro Bank’ customers should go directly to https://www.metrobankonline.co.uk/ to sign into their accounts or use Metro Bank's mobile app. Once they have signed in, if there is something wrong with their accounts they will be notified.

Recipients of the phishing Metro Bank email who have clicked on the link and have attempted to sign into the phishing website with their account’ credentials should immediately change their passwords and contact Metro Bank Bank for help.

Check the comment section for additional information, or share what you know or ask a question about this article, by clicking the 'View or Write Comment' button below.

Note: Some of the information in samples on this website may have been impersonated or spoofed.

Share this article with others.
Advertisements
Write / View Comments (1)
View on Online Threat Alerts (OTA)
Help Maintain Online Threat Alerts (OTA)