Debunking email hoaxes and exposing Internet scams since 2003!

Hoax-Slayer Logo Hoax-Slayer Logo

DividerDivider
Home    About    New Articles    RSS Feed    Subscriptions    Contact
DividerDivider


Site Navigation










Tesco Christmas Voucher Phishing Scam

Outline
Email claims that Tesco Bank is giving out free Tesco Christmas shopping vouchers to recipients who click a link to validate their account details.



Brief Analysis
The email is not from Tesco. The "validate link" in the message opens a bogus website that asks users to supply their Tesco account login details along with their email account information. This information can be collected by scammers and used for bank fraud and identity theft. If you receive this email, do not click on any links or open any attachments that it contains.

Bookmark and Share

Enter your email address to subscribe to the Hoax-Slayer Newsletter:







Last updated: November 22, 2012
First published: November 22, 2012
Article written by Brett M. Christensen
About Brett Christensen and Hoax-Slayer


Example

Subject: Free Tesco Christmas Voucher Shop For Free

Tesco Voucher Phishing Scam Logo

Dear Customer

Tesco Bank is giving you a chance to shop for free
at any of our tesco outlets or online by giving out
free tesco vouchers.

This offer is only for Tesco Credit Card owners and it
will be on until the 1st of January,2013.
To Qualify,follow the link below and input all the details required

After validation,if selected your voucher will be sent via text message
or posted to your Mailbox.

Tesco Personal Finance Online Service




Detailed Analysis
This email, which purports to be from Tesco Bank, claims that recipients can qualify for a free Tesco Christmas shopping voucher by clicking a "validate" link and supplying their account details. According to the message, the voucher will be sent to them via email or text message after they have completed the validation process.

However, the email is not from Tesco and the promised vouchers are just the bait used to hook unwary recipients. Those who follow the link will be taken to a bogus website and asked to enter their username to login:

Tesco Phishing Scam Login

After entering their username and clicking the "Login" button, they will be taken to a second fake page that ask for bank access details as well as their phone number, email address and email password.

Tesco Phishing Scam Bogus form

After supplying the requested information, and clicking "Next", victims will be automatically redirected to the genuine Tesco website.

Meanwhile, the criminals running this phishing campaign can collect all of the information submitted on the fake website and use it to hijack real Tesco online accounts. They can also use the stolen information to hijack email accounts and use them for further spam and scam campaigns. Of course, victims will never receive the promised shopping vouchers, which never existed in the first place. If you receive this email, do not click on any links or open any attachments that it contains.

It is always safest to login to all of your online accounts by entering the account web address into your browser's address bar rather than by clicking a link in an email.

Bookmark and Share


References

Phishing Scams - Anti-Phishing Information
Friend Stranded in Foreign Country Scam Emails


Last updated: November 22, 2012
First published: November 22, 2012
Article written by Brett M. Christensen
About Brett Christensen and Hoax-Slayer