Scotiabank customers beware because cybercriminals are sending out phishing Scotiabank email and text messages like the one below, which claim the recipients' accounts have been temporarily locked to prevent unauthorized transactions. Therefore, Scotiabank customers who have received similar emails should always go directly to Scotiabank's website at www.scotiabank.com and sign into their accounts, instead of clicking on the link in the same email messages. Once they have signed in, they will be notified of updates, changes or other important activities. This is one of the best protection techniques against phishing scams.
The "Scotiabank Online Security Alert for your Online Account" Phishing Scam
From: Scotia OnLine
Sent: Tuesday, November 28, 2017 10:42 AM
Subject: Security alert for your online account
Scotiabank
Dear Customer,
We are writing to update you about a data security issue on your account. Unfortunately, we have temporarily locked your account to protect you from unauthorized transactions.
Sign on to secure your account;
Account recovery
See your transactions, pay bills, transfer funds, send money, and more via Scotia OnLine or Mobile Banking.
Please do not reply to this e-mail, as it is auto-generated and you will not receive a response.
Scotiabank will never send you unsolicited emails asking for confidential information, such as your password, PIN, Access Code, credit card, or account numbers. We will never ask you to validate or restore your account access through email or pop-up windows.
To change your notification preferences or unsubscribe from InfoAlerts, sign in to Scotia OnLine. Then, go to Manage My Accounts > Alerts > Maintain Alerts.
The link in the phishing email message goes to a fake Scotiabank website. Once on the fake website, visitors will be asked to verify their Scotiabank accounts by submitting their credit card information, personal information, and account credentials. If the requested information is submitted, it will be sent to the cybercriminals behind the scam. The cybercriminal will then use the stolen information to steal their victims' money and use their accounts fraudulently.
Scotiabank customers who know or think they may have been tricked by the phishing scam are asked to contact Scotiabank immediately for help.
Remember, Scotiabank will never:
- send you unsolicited emails or text messages asking for confidential information, such as your password, PIN, access code, credit card and account numbers.
- ask you to validate or restore your account access through an email or text message.