Bank of Montreal customers who have received text or emails like the one below, which claim their profile data has been changed are asked not to click on the links or follow the instructions in the emails. This is because the fake emails are phishing scams being sent by cybercriminals to trick Bank of Montreal customers into clicking on the links in the same fake messages, which go to a phishing website that steals online account credentials and personal information.
Once the cybercriminals have received their potential victims’ online account credentials, they will gain access to their accounts, steal their money and use their accounts fraudulently.
The "BMO Changes Made in your Internet Banking Profile" Phishing Scam
From: "BMO Bank of Montreal -Online Banking" <qpdoll@shaw.ca>
Date: November 6, 2017 at 7:22:06 AM GMT+11
Subject: -Action: Changes made in your Internet Banking Profile-
-Action: Changes made in your Internet Banking Profile
-Date: November 05 2017.
-This is to inform that your profile data was changed by you or by someone logged in using r BMO DEBIT Card Number
and password on 11.05.2017 from IP 91.59.65.8
-If you didn't change your profile data please visit and complete our BMO Online security measures:
hxxp://profileuser-bmoinfo.selfip.org/bmoaccess-profile/
-2017 BMO Support Center
Bank of Montreal users who have received messages asking them to click on a link or visit a website in order to update, re-confirm or verify their accounts, should always go directly to https://www.bmo.com/ and sign-in from there. Once the Bank of Montreal users have signed into their accounts, they will be notified of updates and other important changes, if there is any.
Going directly to Bank of Montreal’s website (www.bmo.com) will prevent users or customers from becoming victims of phishing scams that steal personal information or online account credentials.