The "Scotiabank Misuse or Incident" Phishing Scam
From: ScotiaBank Canada <email@example.com>
Sent: October 23, 2018 3:27 PM
Subject: Misuse/Incident 83WJO8-83W
To our valued customers,
The safety and security of your ScotiaBank accounts is our top priority. We are providing you with this update because we received a claim that fraudsters gained access to certain personal and financial information for some of our customers.
We are calling each potentially-impacted customer to determine if there was any financial impact. Customers will not lose money from this incident, as we will fully reimburse our customers for any financial impact of unauthorized transactions.
We have multiple layers of protection, and a team of dedicated experts monitoring and tracking your accounts 24 hours a day, 7 days a week.
In addition, we require you to visit scotiabank.com/verify-835WJOU83security to update your information so we can better determine if this affected your account and how to protect you better.
We would highly suggest never giving out your password or sharing your account.
For additional information and ongoing updates, please visit scotiabank.com/security.
The link in the phishing email message goes to a fake Scotiabank website. Once on the fake website, visitors will be asked to verify their Scotiabank accounts by submitting their credit card information, personal information, and account credentials. If the requested information is submitted, it will be sent to the cybercriminals behind the scam. The cybercriminal will then use the stolen information to steal their victims' money and use their accounts fraudulently.
Scotiabank customers who know or think they may have been tricked by the phishing scam are asked to contact Scotiabank immediately for help.
Remember, Scotiabank will never:
- send you unsolicited emails or text messages asking for confidential information, such as your password, PIN, access code, credit card and account numbers.
- ask you to validate or restore your account access through an email or text message.