Online Threat Alerts (OTA)
An anti-cybercrime community alerting the public.

"SunTrust Bank Urgent Account Verification Suspension" Phishing Scam

SunTrust Bank customers are asked not to follow the instructions in phishing email messages like the one below, which appear as an urgent SunTrust verification alert. The phishing email messages claim that SunTrust Bank was unable to validate important details about the recipients' accounts. The fake email messages then claim that the recipients need to click on a link in the same email messages to unlock their accounts, or else their accounts will be suspended. But, the link will only take the recipients who have clicked on it, to a phishing website, looking like SunTrust Bank’s website, where they will be asked to sign-in with their account credentials. Once the victims enter their account credentials on the fake website, it will be sent to the cybercriminals behind the scam, who will use it to gain access to their victims’ accounts, where they will steal the victims’ money and use their accounts fraudulently.

Advertisements

The "SunTrust Bank Urgent Account Verification Suspension" Phishing Scam

Subject: URGENT: Account Verification

Date: Sun, 09 Apr 2017 16:38:00 +0000

From: SunTrust philip.w.siragusa@Vanderbilt.Edu

We were unable to validate important details about your SunTrust account.

Your account has been placed on hold pending additional verification.

You will not be able to log into your Suntrust.com or access our resources.

Click Here to Unlock Your Account

If you do not respond within 5 days of this email (by Friday, April 14, 2017),

your account will be suspended and you will no longer be able to access our services.

Kind Regards,

SunTrust Support

It is important for internet users to remember that they should never click on a link to sign into their online accounts, especially links in email messages. The safest way to sign into their online accounts is to go directly to their online account providers’ websites, by typing the addresses of the websites in their web browsers or using a popular search engine to find the websites.

For example:
SunTrust’s customers should go directly to “https://www.suntrust.com/” in their web browsers or search for “SunTrust Bank” using a popular search engine. And, if there is something wrong with their accounts or there is something that they need to do, they will be notified right after signing in.

Recipients of the phishing SunTrust email, who have clicked on the link and have attempted to sign into the phishing website with their accounts’ credentials, should change their passwords and contact SunTrust Bank immediately.

Check the comment section for additional information, or share what you know or ask a question about this article, by clicking the 'View or Write Comment' button below.

Note: Some of the information in samples on this website may have been impersonated or spoofed.

Share this article with others.
Advertisements
Write / View Comments (2)
View on Online Threat Alerts (OTA)
Help Maintain Online Threat Alerts (OTA)