Metro Bank's customers who have received email alerts like the one below which ask them to authenticate some activity in order to protect their accounts are asked not to follow the instructions in them. This is because the link in the email alerts will only take the recipients who have clicked on it to a phishing website, looking like Metro Bank’s website, where they will be asked to sign-in with their account credentials. But, once the potential victims attempt to sign into the fake website, their credentials will be sent to the cybercriminals behind the scam, who will use it to gain access to their victims’ accounts. Once the cybercriminals have access to their potential victims' accounts, they will steal their money and use their accounts fraudulently.
A Sample of a "Metro Bank Authenticate Activity" Phishing Scam
Date: 19/11/2017 11:15
Subj: Ѕесuгіtу Αlегt
Wе dеtесtеd unuѕuаl асtіνіtу оn уоuг ргоfіlе оn 11/19/2017. Fог уоuг ргоtесtіоn, уоu muѕt аuthеntісаtе thіѕ асtіνіtу Ьеfоге уоu саn соntіnuе uѕіng сегtаіn fеаtuгеѕ іn уоuг ргоfіlе.
Рlеаѕе сlіск hеге tо соntіnuе.
Оnlіnе Ваnкіng Теаm
It is important for Metro Bank's customers to remember that they should never click on a link to sign into their online accounts, especially links in email messages. The safest way to sign into their online accounts is to go directly to www.metrobankonline.co.uk in their web browsers or search for "Metro Bank" using a popular search engine. If there is something wrong with their accounts or there is something that they need to do, they will be notified right after signing in.
Recipients of phishing Metro Bank emails like the one above, who have clicked on the link in them and have attempted to sign into the phishing website they were taken to with their accounts’ credentials, should change their passwords and contact Metro Bank immediately.