"Capital One New Authentication Procedure" Phishing Scam

The "Capital One We've Suspended Your Online Access" Phishing Scam

From: Capital One <saver@capitalone360.com>

Date: July 31, 2018 at 7:51:16 AM PDT

To: Recipients <saver@capitalone360.com>

Subject: Important Security Update!

Dear Account Holder,

This is an automatic message from Capital One

Starting from Thursday, August 2, 2018, our bank introduces a new authentication procedure in order to protect your accounts from fraudulent and theft activities on our websites.

For your security, we have temporarily suspended access to your accounts, such as (Receive payments, Make payments or Withdraw funds) until account billing verification has

been confirmed.

To restore and secure your Capital One accounts, please click here to get started with the verification procedure.

Note: To ensure your safety, extra steps have been added to verify your identity, failure to complete this measure can result to service interruption.

Thank you,

Online Service Team

Capital One

Capital One’s customers who attempt to sign into the fake and phishing website, will unknowingly send their banking online account credentials to the cybercriminals who have created the fake website. Once the cybercriminals have gotten their potential victims’ Capital One account usernames and passwords (credentials), they will gain access to their accounts, steal their money and use their accounts fraudulently, which will be traced back their victims who may get arrested for something they know nothing about. Therefore, Capital One’s customers who have been or think they have been tricked by the phishing email message above, or others similar to it, should contact Capital One immediately for help.

Capital One customers are advised not to click on a link to sign into their accounts in email messages, even if the email messages that contain the link appear legitimate. They should instead, go directly to www.capitalone.com and sign-in from there. This will prevent them from clicking on links in fake email messages that go to a phishing website that steals personal information, financial information, or account credentials. Once they are signed into their accounts, they will be notified of changes, updates or important things they need to do.