Issue 136 - August 2012 (1st Edition) - Page 10
Chase Online 'Unconfirmed Payment' Phishing Scam
Email purporting to be from Chase Online bank claims the recipient has an unconfirmed payment pending and must therefore follow a link to verify account details or risk having the account deleted.
The message is not from Chase. In fact, the email is a typical phishing scam designed to trick users into submitting their bank login information and other personal details to Internet criminals.
Detailed analysis and references below example.
Last updated: July 24, 2012
First published: July 24, 2012
Article written by Brett M. Christensen
About Brett Christensen and Hoax-Slayer
Subject: You Have An Unconfirmed Payment
Dear Chase OnlineSM Customer:
Chase OnlineSM Payment Pending.
You have an unconfirmed payment Pending on your account
Please verify your account information for payment approval
We implore you to follow the link below to verify your account details.
NOTE: You are strictly advised to match your information correctly to avoid service
Thank you for your co-operation.
You May Visit Our Web www.chase.com
Once you have completed the process, we will send you an email notifying
that your account is credited
The information provided will be treated in confidence and stored in our secure database.
If you fail to provide required information your account will be automatically
deleted from Our online database
This email, which arrives complete with Chase Online bank logos and formatting, claims that there is an unconfirmed payment pending on the recipient's Chase account. The message claims that the recipient must follow a link to login and verify account details. The recipient is warned that failing to supply the requested information will result in service suspension or even the automatic deletion of the account.
However, the email is not from Chase and the claim that the recipient must verify account details is untrue. The message is a phishing scam designed to fool Chase
customers into divulging their personal and financial information to cybercriminals. The threat of impending account deletion is intended to panic unwary recipients into clicking the link in the message.
Those who fall for the ruse and click the link will be taken to a fake website built to resemble the genuine Chase Online bank site. Once there, victims will be instructed to login using their Chase User ID and password. After they have entered their login details, victims will next be taken to a bogus "account verification" form and asked to provide personal and financial information. All information entered on the fake site - including user login details - will be collected by the criminals operating the scam.
Once they have gained this information, the criminals can then login to the victim's real Chase Online account, withdraw or transfer funds and steal even more personal information. Depending on what other information the victim supplied on the fake form, the criminals may also be able to make fraudulent credit card transactions and commit identity theft.
published information on its website
warning customers about such phishing attacks.
Phishing scams of this nature
continue to be one of the most common types of online crime. Be wary of any message from your financial institution or other online service providers that claim there is a problem with your account and you must click a link or open an attachment to verify details. If you receive such a suspect message, do not click any links or open any attachments that it may contain. It is always safest to login to your online accounts by entering the website address into your browser address bar rather than by clicking a link in an email.
Chase - Phishing
Phishing Scams - Anti-Phishing Information
Pages in this issue:
- Facebook Post - Seven Year Old Shot Saving Mom
- Cranky Old Man Poem
- Facebook Survey Scam - Free $500 Coles Voucher
- Amazon Account Review Phishing Scam
- Ellie May Ashley Missing Person Alert (Ellie Has Now Been Found)
- 'Private Message' Phishing and Survey Scam Emails
- AOL Deactivated Account Phishing Scam
- 'Mystery Shopper' Money Laundering Scams
- Hotel Booking Confirmation Malware Emails
- Chase Online 'Unconfirmed Payment' Phishing Scam
- 'Buddha' Shaped Pears
- Yacht Launch Mishap
- McDonald's 'Mega Promotion Award' Advance Fee Scam
- Intuit "Payroll Processing Request" Malware Email
- Facebook Survey Scam - Bestbuy Gift Card
- FBI Arrest Warning Advance Fee Scam