"SunTrust You Added a New Recipient to Bill Pay" Phishing Scams
The email message below, which claims that the recipients have added a new recipient to their Bill Pay on their Suntrust accounts is a phishing scam. The links in the email message go to a phishing website, looking like SunTrust Bank’s website, where visitors (potential victims) will be asked to sign-in with their account credentials. But, once the potential victims attempt to sign into the phishing website, their credentials will be sent to the cybercriminals behind the scam, who will use it to gain access to their victims’ accounts. Once the cybercriminals have access to their potential victims' accounts, they will steal their money and use their accounts fraudulently.
One of the "SunTrust You Added a New Recipient to Bill Pay" Phishing Scams
From: SunTrust - suntrustbillpay-customercenter@email.com
Sent: Fri, Jul 28, 2017 5:00 pm
Subject: Mary Davids added to Bill Pay
SunTrust
We're confirming that you recently added a new recipient to Bill Pay on your account.
If you added this recipient to Bill Pay, no action is required:
Recipient: Mary Davids
Amount: $13,500.00
Date Added: 07/16/2017
If you didn't authorize this transaction, please visit suntrust.com immediately.
To protect your privacy and security, visit www.suntrust.com to review your account activity.
For quick access to your accounts balances and activities, Sign on to Online Banking.
If you believe you've received this message in error, then you can safely ignore this email.
Thank you for using Bill Pay.
This email was sent by SunTrust Bank, Member FDIC. ©2017 SunTrust Banks, Inc.
You have received this message because you are enrolled in Bill Pay at SunTrust Bank, Inc.
If you have questions, please visit suntrust.com, or Sign on to Online Banking to contact us.
You can also contact us using the secure messaging method in your Online Banking service.
Do not reply to this message. Replies to this message are routed to an unmonitored mailbox.
It is important for Internet users to remember that they should never click on a link to sign into their online accounts, especially links in email messages. The safest way to sign into their online accounts is to go directly to “https://www.suntrust.com/” in their web browsers or search for “SunTrust Bank” using a popular search engine. If there is something wrong with their accounts or there is something that they need to do, they will be notified right after signing in.
Recipients of phishing SunTrust emails like the one above, who have clicked on the link in them and have attempted to sign into the phishing website they were taken to with their accounts’ credentials, should change their passwords and contact SunTrust Bank immediately.
Check the comment section for additional information, or share what you know or ask a question about this article, by clicking the 'View or Write Comment' button below.
Note: Some of the information in samples on this website may have been impersonated or spoofed.