Debunking email hoaxes and exposing Internet scams since 2003!

Hoax-Slayer Logo Hoax-Slayer Logo

Home    About    New Articles    RSS Feed    eBook    Contact
Bookmark and Share

Chase Online 'Unconfirmed Payment' Phishing Scam

Email purporting to be from Chase Online bank claims the recipient has an unconfirmed payment pending and must therefore follow a link to verify account details or risk having the account deleted.

Brief Analysis
The message is not from Chase. In fact, the email is a typical phishing scam designed to trick users into submitting their bank login information and other personal details to Internet criminals.

Bookmark and Share
Detailed analysis and references below example.

Last updated: July 24, 2012
First published: July 24, 2012
Article written by Brett M. Christensen
About Brett Christensen and Hoax-Slayer


Subject: You Have An Unconfirmed Payment

Dear Chase OnlineSM Customer:
Chase OnlineSM Payment Pending.

You have an unconfirmed payment Pending on your account
Please verify your account information for payment approval

We implore you to follow the link below to verify your account details.

Account Verification

NOTE: You are strictly advised to match your information correctly to avoid service

Thank you for your co-operation.

You May Visit Our Web

Once you have completed the process, we will send you an email notifying
that your account is credited

The information provided will be treated in confidence and stored in our secure database.
If you fail to provide required information your account will be automatically
deleted from Our online database

Chase Phishing Email

Detailed Analysis
This email, which arrives complete with Chase Online bank logos and formatting, claims that there is an unconfirmed payment pending on the recipient's Chase account. The message claims that the recipient must follow a link to login and verify account details. The recipient is warned that failing to supply the requested information will result in service suspension or even the automatic deletion of the account.

However, the email is not from Chase and the claim that the recipient must verify account details is untrue. The message is a phishing scam designed to fool Chase customers into divulging their personal and financial information to cybercriminals. The threat of impending account deletion is intended to panic unwary recipients into clicking the link in the message.

Those who fall for the ruse and click the link will be taken to a fake website built to resemble the genuine Chase Online bank site. Once there, victims will be instructed to login using their Chase User ID and password. After they have entered their login details, victims will next be taken to a bogus "account verification" form and asked to provide personal and financial information. All information entered on the fake site - including user login details - will be collected by the criminals operating the scam. Once they have gained this information, the criminals can then login to the victim's real Chase Online account, withdraw or transfer funds and steal even more personal information. Depending on what other information the victim supplied on the fake form, the criminals may also be able to make fraudulent credit card transactions and commit identity theft.

Chase has published information on its website warning customers about such phishing attacks.

Phishing scams of this nature continue to be one of the most common types of online crime. Be wary of any message from your financial institution or other online service providers that claim there is a problem with your account and you must click a link or open an attachment to verify details. If you receive such a suspect message, do not click any links or open any attachments that it may contain. It is always safest to login to your online accounts by entering the website address into your browser address bar rather than by clicking a link in an email.

Bookmark and Share

Chase - Phishing
Phishing Scams - Anti-Phishing Information

Last updated: July 24, 2012
First published: July 24, 2012
Article written by Brett M. Christensen
About Brett Christensen and Hoax-Slayer