Capital One customers who have received email or SMS text messages claiming that Capital One is introducing an enhanced security system which requires a confirmation that your accounts have not been suspended should delete the messages. This is because the messages, like the one below, are being sent by cyber criminals, to frighten and trick potential victims into clicking on the links in them, which go to phishing websites that steal online account credentials.
Sample of "Capital One OnlineSM Customer - New Security Update Alert" Phishing Scam
From: Capital One [mailto:test@ziquan.com.cn]
Sent: Saturday, May 06, 2017 5:05 PM
Subject: [Spam] New Security Update Alert.
Dear Capital One OnlineSM Customer:
We're introducing enhanced security system with new authentication access to help service your accounts to ensure that Capital One online accounts are secured with the new enhanced security system. Before we can activate it we will be checking all online accounts to confirm the authenticity of the holder. We will require a confirmation that your account has not been suspended.
Please confirm now for the new enhanced security to be added to your account so you can continue to enjoy all the benefits of Capital One online banking.
Confirm Now : www.capitalone.com/secured/login
From capitalone.com on your computer mobile device:
1. Log on with your User ?D and ?assword.
2. Click "Secure Message Center" from My ?ccounts.
3. Click the message you'd like to read.
If you are not a Capital One? customer, please disregard the content of this email as an error message.
Thanks for being a Capital One? customer.
Capital One customers who have received messages claiming that they need to do some activity on their accounts, such always go directly to https://www.capitalone.com/ and sign into their accounts. Once they have signed in, they will be notified of security updates, notifications and other important notifications. So, there is no need to click on a link in an email message, which may go to phishing or malicious website.
Also, Capital One customers who have already been tricked by the phishing messages, are asked to change their passwords and contact Capital One immediately, before their accounts are hijacked and used fraudulently by cyber criminals.