Debunking email hoaxes and exposing Internet scams since 2003!

Hoax-Slayer Logo Hoax-Slayer Logo

DividerDivider
Home    About    New Articles    RSS Feed    Subscriptions    Contact
DividerDivider


Site Navigation








Issue 144 - December 2012 (1st Edition) - Page 4

Virgin Money 'Re-Confirm SiteKey' Phishing Scam

Issue 144 Start Menu

Previous Article            Next Article

Outline
Email claiming to be from Virgin Money and styled as a Virgin Money Magazine claims that recipients must click a link to re-confirm their account SiteKey due to a recent database upgrade.



Brief Analysis
The message is not from Virgin Money. In fact, the email is a phishing scam designed to trick users into divulging their account login details to Internet criminals.

Bookmark and Share

Enter your email address to subscribe to the Hoax-Slayer Newsletter:






Last updated: November 28, 2012
First published: November 28, 2012
Article written by Brett M. Christensen
About Brett Christensen and Hoax-Slayer


Example

Subject: Important E-mail Notification.

Re-Confirm Your SiteKey

Your SiteKey is a security measure that lets you know that you are at our authentic Online Banking site. Once created, your SiteKey will be displayed after you enter your user name when you log on to Online Banking. Do not enter your password without first seeing your SiteKey.

Your SiteKey includes both an image and an image title. You may select the current image displayed or choose a new image from the available selection.

Due to recent upgrade of our database. All bank account holder are requested to re-confirm his/her sitekey to enable our security database recognise your system and can be easily remembered.

Please click on the help centre link below to get started

[Link removed]

Regards
The Virgin Money Team

Virgin Money Phishing Scam




Detailed Analysis
This email, which claims to be from Virgin Money and is designed to emulate a page from the Virgin Money Magazine, informs recipients that they must re-confirm their SiteKey due to a recent database upgrade. Recipients are instructed to click a link to get started. The message comes complete with Virgin Money logos and formatting and associated images. Secondary links in the message open the genuine Virgin Money Magazine website.

However, the message is not from Virgin Money and the claim that account holders are required to re-confirm their SiteKey is untrue. The email is a phishing scam designed to trick recipients into divulging their account login details and other personal information to Internet criminals.

The link in the email opens a bogus Mobile Card Services login webpage that asks users to provide their username and password before clicking a "log In" button. Users are then taken to a second fake page that asks them to provide more personal information and provide the answers to the security questions attached to the account. All information provided can be collected by criminals and subsequently used to hijack real bank accounts and commit bank fraud and identity theft.

Phishing is a very common type of Internet scam and continues to gain new victims every day. Be wary of any email that claims that you must follow a link or open an attachment to upgrade account details. It is always safest to access any of your online account by typing the account address into your browser's address bar rather than by clicking a link in an email.

Bookmark and Share



References

Phishing Scams - Anti-Phishing Information


Previous Article            Next Article

Issue 144 Start Menu

Pages in this issue:
  1. Jetstar 'Flight Itinerary' Malware Email
  2. WhatsApp 'Logo Will Turn Red' Hoax
  3. Christmas Cards for Recovering American Soldiers
  4. Virgin Money 'Re-Confirm SiteKey' Phishing Scam
  5. How to Survive a Heart Attack When Alone Hoax
  6. Facebook Deleting Inactive Users Hoax
  7. Completely Pointless and Misleading 'Facebook Privacy Notice'
  8. Absurd Warning - 'LOL' stands for 'Lucifer Our Lord'
  9. Bogus Prize Offers on Facebook - 'Like and Share To Win'
  10. Tesco Christmas Voucher Phishing Scam
  11. DEW Bottled Water Fatal Poisoning Hoax
  12. ANZ 'Reward for Loyal Customers' Phishing Scam
  13. Chase Paymentech 'Merchant Billing Statement' Malware Email
  14. Undertaker - John Cena 'Bloodiest Fight Ever' Survey Scam
  15. Padlock on Facebook Home Page Hacker Warning Hoax
  16. Woolworths 'Customer Satisfaction Survey' Phishing Scam
  17. Target 'Free Gift Voucher' Survey Scam
  18. Another Pointless Facebook Warning - Hackers Posting Insulting Messages In Your Name
  19. Fake Tsunami Warning 'News' Report Points to Malware
  20. Reserve Bank Of India Phishing Scam
  21. Better Business Bureau 'Complaint Received' Malware Emails