Debunking email hoaxes and exposing Internet scams since 2003!


Hoax-Slayer Logo Hoax-Slayer Logo

DividerDivider
Home    About    New Articles    RSS Feed    Subscriptions    Contact
DividerDivider
Bookmark and Share









Issue 170 - January, 2014 (2nd Edition) - Page 18

Sainsbury's 'Customer Satisfaction Survey' Phishing Scam

Issue 170 Start Menu

Previous Article            Next Article

Outline
Email purporting to be from UK supermarket chain Sainsbury's, claims that the recipient can receive a credit of £100 just for filling in a customer satisfaction survey contained in an attached file.

Thief with Credit Card

© Depositphotos.com/dedMazay



Brief Analysis
The email is not from Sainsbury's and users will not receive £100 for completing a survey. It is a phishing scam designed to steal credit card details and other personal information from recipients.

Bookmark and Share

Example

Subject: Customer Satisfaction Survey!

Congratulations!

You have been selected by Sainsbury's Online Department to take part in our quick and easy reward survey.

In return we will credit 100 Pounds to your account - Just for your time!

Helping us better understand how our members feel, benefits everyone.
With the information collected we can decide to direct a number of changes to improve and expand our services.
The information you provide us is all non-sensitive and anonymous. No part of it is handed down to any third party groups.
It will be stored in our secure database for maximum of 3 days while we process the results of this nationwide survey.

To access the form, Please download the attachment

and open the form in a browser and follow the instructions on your screen.

Email contains a HTML attachment that displays the following form:

Sainsbury's Survey Phishing Scam 1
Sanisbury's Survey Phishing Scam 2


Detailed Analysis


This email, which purports to be from UK based supermarket chain Sainsbury's, claims that recipients can earn a credit of £100 if they open an attached file and fill in a customer satisfaction survey.

However, the email is not from Sainsbury's and the supposed survey is bogus. Users will certainly not receive £100 for participating. In fact, the email is a phishing scam designed to steal credit card details and other personal information from users.

Clicking the attached file will load a HTML form in the user's browser. The form begins with a brief set of questions about the user's experience when shopping at Sainsbury's. The second part of the form asks for credit card details, ostensibly so the £100 survey fee can be deposited in the user's account.

Once the user clicks the "Next" button, he or she will be transferred to the genuine Sainsbury's website.

Meanwhile, the criminals running the scam can collect the information submitted on the bogus survey form and use it to commit credit card fraud and identity theft.

Survey phishing scam messages like this one are quite common and have targeted customers of a number of high profile companies around the world, including McDonald's, Coke, Woolworths and several banks.

Be very wary of any unsolicited email that promises large cash rewards or expensive prizes in exchange for filling in a brief survey.  Of course, from time to time, companies may conduct legitimate customer surveys. And sometimes they may offer an incentive to participate such as the chance to go in the draw for a prize. But, they certainly will not offer a large cash reward for every person that participates in an insignificant survey.

If you receive an email promising a large fee for filling in a survey, do not open any attachments that it contains. Do not click any links in the message either, as some versions of the scam use bogus websites to host the fake forms rather than attached files.

Bookmark and Share

Last updated:January 5, 2014
First published: January 5, 2014
By Brett M. Christensen
About Hoax-Slayer

References
Phishing Scams - Anti-Phishing Information
McDonald's Survey Phishing Scam Email
Coca Cola Survey Phishing Scam
Woolworths 'Customer Satisfaction Survey' Phishing Scam
ANZ 'Quick 3-Question Survey' Phishing Scam



Previous Article            Next Article

Issue 170 Start Menu

Pages in this issue:
  1. 'Paul Walker Still Alive After Accident' Phishing and Survey Scam
  2. 'Profile Visitors for Facebook' Rogue App and Survey Scam
  3. PG & E Energy Statement Malware Emails
  4. Fake Picture: 'Thailand Snake Girl' - Serpentosis Malianorcis
  5. Tom Crist Lottery Win Advance Fee Scam
  6. Legoland Child Abduction Attempt Hoax
  7. Fake Picasa 'New Photos' Emails Point to Dodgy Pharmacy Website
  8. 'Win a Disney Cruise' Survey Scam
  9. Bogus Advice - Block Hackers by Adding 'Security' to Facebook Blocking Function
  10. Fake - Giant Squid Image
  11. Commonwealth Bank 'eStatement Ready' Phishing Scam
  12. 'Singer Rihanna Found to be Dead' Facebook Survey Scam
  13. Satire - Pope Francis and the 'Third Vatican Council'
  14. Snow Canyon Roadway Image
  15. Albert (Tapper) Torney and the Can Car Sculptures That He Did NOT Make
  16. 'Your Atmos Energy Bill is Available' Malware Email
  17. 'Beware Hack Scam Rollercoaster Clip' Facebook Warning Message
  18. Sainsbury's 'Customer Satisfaction Survey' Phishing Scam
  19. Satire - '18 Million Birds Dead New Year's Eve'
  20. Hoax - 'Marijuana Overdoses Kill 37 in Colorado'
  21. Hoax Report Claims Paul Walker Faked His Own Death
  22. 'Shark Eats Swimming Man' Facebook Survey Scam
  23. 'Notice to Appear in Court' Malware Emails
  24. 'Most Fatal Car Accident' Survey Scam
  25. Hoax - Extraordinary Planetary Alignment To Decrease Gravity on January 4
  26. 'World's Largest Snake Video' Survey Scam
  27. Michael Jackson Died Years Ago Hoax
  28. 'My Home is Burning' Facebook Phishing and Malware Scam
  29. Facebook 'Closed for Maintenance' Prank