Debunking email hoaxes and exposing Internet scams since 2003!

Hoax-Slayer Logo Hoax-Slayer Logo

Home    About    New Articles    RSS Feed    eBook    Contact
Bookmark and Share

Yorkshire Building Society - Egg Account Transfer Phishing Scam

Email purporting to be from the Yorkshire Building Society claims that, due to the transfer of Egg Savings and Mortgage accounts, existing customers are required to update their details by filling in and submitting an attached form.

Brief Analysis
The Yorkshire Building Society (YBS) did buy part of Internet bank Egg in 2011 and all Egg mortgage and savings accounts must therefore be transferred to the YBS systems. However, this message is not from Yorkshire Building Society and has no connection to the transfer of accounts from Egg. The email is a phishing scam designed to trick account holders into submitting their private personal and financial information to Internet criminals.

Bookmark and Share
Detailed analysis and references below example.

Scroll down to submit comments
Last updated: October 4, 2012
First published: October 4, 2012
Article written by Brett M. Christensen
About Brett Christensen and Hoax-Slayer


Subject: Our commitment to online security
From: Yorkshire Building Society

Dear Customer,

Egg Savings and Mortgage accounts have now been transferred to Yorkshire Building Society's systems.
As a Yorkshire Building Society customer you'll continue to enjoy all the services you used with Egg.

We believe it's important to keep up to date with the latest online security measures, We recently upgraded our database
system for new security measures. We have tried to contact you but have been unable to do so.

Please proceed via attached file to automatically upgrade your details.
If you do not confirm your details until 05 October 2012 your online account will be interrupted for security reasons.

Yours sincerely,
Security Department,
Yorkshire Building Society.

Yorkshire Building Society Scam

Detailed Analysis
This email, which claims to be from the UK's Yorkshire Building Society (YBS), informs users that, due to the transfer of savings and mortgage accounts from Egg, customers must update their account details by filling in an upgrade form contained in an attached file. The message warns that customers who do not comply with the request to update their information will find that access to their accounts will be "interrupted for security reasons".

However, the email is not from the Yorkshire Building Society and has no connection to the transfer of Egg accounts. Instead, the message is a phishing scam designed to trick both Yorkshire Building Society and previous Egg customers into divulging their personal and financial data to cybercriminals. Those who comply with the request and open the attached file will be presented with a bogus form that asks for their YBS login credentials as well as credit card information and name and contact details. When users click the "Submit" button on the bogus form, all of this information can be retrieved by the criminals responsible for the phishing attack. The criminals can then use the stolen information to access real YBS accounts and make fraudulent credit card transactions.

In this instance the scammers have attempted to capitalize on a real event in order to make their claims seem more legitimate. In 2011, the Yorkshire Building Society acquired Internet bank Egg's savings and mortgage accounts and all existing Egg savings and mortgage accounts were thus required to be transferred to the YBS's own systems. By wrapping their story in a veil of truth, the scammers hope that at least a few YBS and Egg customers will fall for the ruse and supply the requested information.

If you receive this email, or one similar to it, do not follow any links or open any attachments that it may contain. Phishing is a very common scam that continues to find new victims all around the world every day. Be cautious of any message that claims that you must update or verify your account information by following a link or opening an attached file. Legitimate organizations are unlikely to request sensitive personal information from customers via an unsolicited email. It is best to adopt the simple safety precaution of always logging into your online accounts by entering the account address into your browser's address bar rather than by clicking links.

Yorkshire Building Society and Egg customers can find legitimate information about the transfer of Egg accounts on the YBS website.

Bookmark and Share


Yorkshire building society to buy Egg's savings and mortgage accounts
Phishing Scams - Anti-Phishing Information
Information for Egg Customers

Last updated: October 4, 2012
First published: October 4, 2012
Article written by Brett M. Christensen
About Brett Christensen and Hoax-Slayer