The "Scotiabank Online Security Alert for your Online Account" Phishing Scam
From: Scotia OnLine
Sent: Tuesday, November 28, 2017 10:42 AM
Subject: Security alert for your online account
We are writing to update you about a data security issue on your account. Unfortunately, we have temporarily locked your account to protect you from unauthorized transactions.
Sign on to secure your account;
See your transactions, pay bills, transfer funds, send money, and more via Scotia OnLine or Mobile Banking.
Please do not reply to this e-mail, as it is auto-generated and you will not receive a response.
Scotiabank will never send you unsolicited emails asking for confidential information, such as your password, PIN, Access Code, credit card, or account numbers. We will never ask you to validate or restore your account access through email or pop-up windows.
To change your notification preferences or unsubscribe from InfoAlerts, sign in to Scotia OnLine. Then, go to Manage My Accounts > Alerts > Maintain Alerts.
The link in the phishing email message goes to a fake Scotiabank website. Once on the fake website, visitors will be asked to verify their Scotiabank accounts by submitting their credit card information, personal information, and account credentials. If the requested information is submitted, it will be sent to the cybercriminals behind the scam. The cybercriminal will then use the stolen information to steal their victims' money and use their accounts fraudulently.
Scotiabank customers who know or think they may have been tricked by the phishing scam are asked to contact Scotiabank immediately for help.
Remember, Scotiabank will never:
- send you unsolicited emails or text messages asking for confidential information, such as your password, PIN, access code, credit card and account numbers.
- ask you to validate or restore your account access through an email or text message.