A Sample of the "Metro Bank Pending Incoming Payment" Phishing Scam
From: Metro Bank <email@example.com>
To: Recipients <firstname.lastname@example.org>
Sent: Thursday, December 7, 2017, 1:07:31 PM EST
Subject: Pending Incoming Payment REF: MET1108S
Please note that starting from December 06, 2017 we are introducing new online banking authentication procedures in order to protect private information of all online banking users.
There is a pending transfer payment into you account from our account department. For security reason invalid record or your 8 digits Security number. We require you to confirm your profile on file with us before this transfer can be completed.
This can be done using the reference provide below.
Complete incoming Payment
Please remember to check 'e-Documents' regularly as we may send you documents which you need to action. Your online documents are stored for 7 years and can be viewed, downloaded and printed at any time.
Metro Online Banking Team
It is important for internet users to remember that they should never click on a link to sign into their online accounts, especially links in email messages. The safest way to sign into their online accounts is to go directly to their online account providers’ websites, by typing the addresses of the websites in their web browsers or using a popular search engine to find the websites.
Metro Bank’ customers should go directly to https://www.metrobankonline.co.uk/ to sign into their accounts or use Metro Bank's mobile app. Once they have signed in, if there is something wrong with their accounts they will be notified.
Recipients of the phishing Metro Bank email who have clicked on the link and have attempted to sign into the phishing website with their account’ credentials should immediately change their passwords and contact Metro Bank Bank for help.