The "Scotiabank Safeguard Your Data Account Suspension" Phishing Scam
From: <ScotiaBank-message-TheBankofNovaScotia.msg20181109-6267308063@necn.com>
Date: November 9, 2018 at 7:19:00 PM EST
Subject: Safeguard your data [626RF6]
View online
Scotiabank(R)
You have 1 new alert,
Your Alert ID: RFR626RFRV
We are writing to notify you about an issue that may involve your account information. We understand that you value your privacy and we take the protection of your information seriously. Due to this we have temporarily suspended your online access.
What You Have to Do
We take our obligation to safeguard your personal data very seriously and are alerting you about this issue so you can take steps to help protect your information. To avoid permanent account suspension please follow the link below and verify your information:
https://www.scotiabank.com/vrf-FNK243FNKB/usr2018101124
We are working with leading data security firms to assist in our investigation. We have also notified and are coordinating with law enforcement authorities. We continue to make enhancements to our systems to detect and prevent unauthorized access to user information
Sincerely,
Paul Fipps
ScotiaBank Chief Digital Officer
The link in the phishing email message goes to a fake Scotiabank website. Once on the be aware website, visitors will be asked to verify their Scotiabank accounts by submitting their credit card information, personal information, and account credentials. If the requested information is submitted, it will be sent to the cybercriminals behind the scam. The cybercriminal will then use the stolen information to steal their victims' money and use their accounts fraudulently.
Scotiabank customers who know or think they may have been tricked by the phishing scam are asked to contact Scotiabank immediately for help.
Remember, Scotiabank will never:
- send you unsolicited emails or text messages asking for confidential information, such as your password, PIN, access code, credit card and account numbers.
- ask you to validate or restore your account access through an email or text message.