Debunking email hoaxes and exposing Internet scams since 2003!

Hoax-Slayer Logo Hoax-Slayer Logo

DividerDivider
Home    About    New Articles    RSS Feed    Subscriptions    Contact
DividerDivider
Bookmark and Share









Reserve Bank Of India Phishing Scam

Outline
Email purporting to be from the Reserve Bank of India claims that all Indian bank customers must update their account details to accommodate a new security system.



Brief Analysis
The email is not from the Reserve Bank of India and the claim that all Indian bank customers must update their online accounts is a lie. The message is a phishing scam designed to trick bank customers into submitting their account login details and other personal information to Internet criminals.

Bookmark and Share





Last updated: November 19, 2012
First published: November 19, 2012
Article written by Brett M. Christensen
About Brett Christensen and Hoax-Slayer


Example
Subject: All Indian Banks Customers Online News Update.

Dear Indian Bank Customer,

Reserve Bank Of India, has lunched a new online security protection, for all banks in India, to reduce fraud and theft in various banking system.

This is to enable all customer's online banking in all Indian Banks to get protected and Secured.

Reserve Bank Of India, has introduced a new online protection, called, "Netsecured".

It's mandatory that all online banking customers in all various banks in India, must update with us to get his/her online bank account secured and protected.

Kindly follow the Official update website link below and select your bank to get your Account Secured and Updated.

Click on our official website below to get started.

[Link Removed]

Thank you for banking with India.
Reserve Bank Of India
Security Team.

[Link Removed]




Detailed Analysis
This message, which purports to be from the Reserve Bank of India, claims that it is mandatory that ALL Indian online banking customers update their account details to allow new security protection systems to be implemented. Recipients are invited to follow a link in the message to get started with the account update.

However, the message is certainly not from the Reserve Bank of India. And the claim that Indian bank customers are required to update their account details is just a trick to get people to click links in the email. Those who do fall for the ruse and click the link will be taken to the following page, which provides an "Online Banking Portal" listing a number of different banks:

Reserve Bank Of India Phishing Email

The user is instructed to click on the name of his or her own bank to complete the update process. Clicking any of the bank names opens further fake pages that ask users to login to their online accounts and provide account and credit card details and other personal information. All of the information submitted can be harvested by cybercriminals and used to hijack real bank accounts, commit credit card fraud and steal identities.

By using this ruse, the criminals are hoping to steal information from customers of a number of different banks. The Reserve Bank of India would never send an unsolicited generic email that required bank customers to follow a link and submit their personal information. Phishing continues to be a very common criminal ploy that finds new victims all around the world everyday. Be wary of any unsolicited email purporting to be from a financial institution that claims that you must click a link or open an attachment to provide or update personal information. It is always safest to login to all of your online accounts by entering the account web address into your browser's address bar rather than by clicking a link in an email.


Bookmark and Share

References

Phishing Scams - Anti-Phishing Information

Last updated: November 19, 2012
First published: November 19, 2012
Article written by Brett M. Christensen
About Brett Christensen and Hoax-Slayer