Capital One Financial Corporation's customers, if you have received email messages like the sample below or something similar to them, please delete them. This is because the email messages are fakes and phishing scams that are being sent by cybercriminals to trick you into clicking on the link within them, which goes to a phishing website that will steal your online banking accounts’ usernames and passwords. The phishing website was created to look exactly like the legitimate Capital One 360’s website, to trick Capital One customers into believing that they are signing into their accounts on the legitimate Capital One 360’s website.
Sample of the "Capital One 360" Phishing Email Scam
-----Original Message-----
From: Capital One security@tclsllp.com
Sent: Fri, Mar 17, 2017 6:29 pm
Subject: Fraudulent Notice:
Please Contact
We’re currently updating our systems to bring enhanced features to your Online Banking experience. As, as result, your details are unavailable.
You can do this by reviewing your details:
Signing in to capitalone360.com and select the "My Info" table
Further proof of identity may be required before online access is restored. This reduces the risk of others accessing your information from you unattended computer.
Thanks.
Member
FDIC
Capital One 360’s customers who attempt to sign into the fake and phishing website, will unknowingly send their banking online account credentials to the cybercriminals who have created the fake website. Once the cybercriminals have gotten their potential victims’ Capital One 360 account usernames and passwords (credentials), they will gain access to their accounts, steal their money and use their accounts fraudulently, which will be traced back their victims who may get arrested for something they know nothing about. Therefore, Capital One 360’s customers who have been or think they have been tricked by the phishing email message above, or others similar to it, should contact Capital One immediately for help.
Capital One customers are advised not to click on a link to sign into their accounts in email messages, even if the email messages that contain the link appear legitimate. They should instead, go directly to www.capitalone360.com and sign-in from there. This will prevent them from clicking on links in fake email messages that go to a phishing website that steals personal information, financial information, or account credentials. Once they are signed into their accounts, they will be notified of changes, updates or important things they need to do.