Branch Banking and Trust(BB&T) customers please be aware of "Changes in your Account Activity" phishing emails like the one below. The phishing email messages claim that the recipients have been limited because of irregular activities have been detected on their accounts. The phishing email messages then claim that the recipients need to click on a link to verify their accounts before they can continue using them. But, the link will only take the recipients who have clicked on it, to a phishing website, looking like Branch Banking and Trust’s website, where they will be asked to sign-in with their account credentials. Once the victims enter their account credentials on the fake website, it will be sent to the cybercriminals behind the scam, who will use it to gain access to their victims’ accounts, where they will steal the victims’ money and use their accounts fraudulently.
A Sample of the "We Have Limited Your Account" Phishing Scam
From: BB&T Bank <dasd-f9tyn-rgt22-nbt7mr4-rvy5y@das-fgt-gr8o-tyzx-rt41t.com>
Sent: Friday, November 25, 2016 9:53 AM
Subject: Recent changes in your account activity
Recent changes in your account activity
Dear BB&TIMember,
We have detected irregular activity on your account. So We Have Limited Your Account.
For your protection, you have to verify this activity before you can continue using your account.
PleaseiVisit https://online.bbt.com/login?do=verify
Reference Number: PP-184-107-163
Sincerely,
BB&t Customer Services
It is important for Internet users to remember that they should never click on a link to sign into their online accounts, especially links in email messages. The safest way to sign into their online accounts is to go directly to their online account providers’ websites, by typing the addresses of the websites in their web browsers or using a popular search engine to find the websites.
For example:
BB&T’s customers should go directly to “https://www.bbt.com/” in their web browsers or search for “Branch Banking and Trust” using a popular search engine. And, if there is something wrong with their accounts or there is something that they need to do, they will be notified right after signing in.
Recipients of the phishing BB&T email, who have clicked on the link and have attempted to sign into the phishing website with their accounts’ credentials, should change their passwords and contact Branch Banking and Trust immediately.