Recently I have been getting emails from banking institutions stating something like the following:
Dear NatWest Bank customer: NatWest Bank is committed to safeguarding customer information and combating fraud. We have implemented industry leading security initiatives, and our online banking services are protected by the strongest encryption methods and security protocols available. We continue to develop new solutions to provide our online banking services and their customers with confidence and security.
The added security measures require all NatWest Bank customers to complete on a regular basis Online Customer Form.Please use the hyperlink below to access Online Customer Form:
http://www.natwest.com/onlinebanking/customerform.aspx?computer_id=029789959191966784907203976137768159766430601810518
Thank you for banking with us!
NatWest Bank Customer Support
The interesting thing here, aside from me never even hearing about NatWest Bank, is the link. When you mouse over the exceptionally long link, you’ll see that the printed domain,
www.natwest.com does not match the site that the link actually points to: www.natwest.com.ke6ue.hk.
You’ll see the actual site destination, or anchor, down at the bottom of your browser in what is called the status bar. If the status bar is not visible and you are using Internet Explorer 6 or 7, go up the menu bar, click on “view” -> “status bar” and the status bar will appear at the bottom of the window.
Incidentally, the target website has a lifespan of about 4 weeks. After that, it disappears only to be reborn as another incarnation, such as www.natwest.com.xoleer.hk, or www.natwest.com.27dec.ph but always with the visible domain of NatWest Bank.
This is what the real NatWest Bank has to say about fraudulent or phishing e-mails:
Watch out for fraudulent (or 'phishing') e-mailsPhishing is a fraud technique commonly used to attempt to trick people into revealing their security number and password to fraudsters.
Here is how a phishing scam typically works: The fraudster sends out a fake e-mail that has been designed to look like it comes from a reputable source (like NatWest). This fake e-mail asks for security details or directs customers to a counterfeit banking or commerce site. At the counterfeit site, the fraudster asks the customer to enter their complete security details - password, security questions, user name... the sky is the limit. These stolen security details are then used to commit fraud.
If you receive an e-mail requesting your security details do not reply and do not follow the instructions even if the e-mail suggests that you need to take immediate action to stop your account being frozen or it indicates that you may incur a fine if you don't. These are just tricks that the fraudster is using to manipulate you in to giving away your vital details.
If you suspect a phishing attack, call us at 0845 605 0789 or forward the suspect e-mail to phishing@natwest.com
See the entirety of the NatWest Online Banking Safety suggestions on their site at the following link:
http://www.natwest.com/global_options.asp?id=GLOBAL/SECURITY/ONLINE_BANKING_SAFETY
Be safe out there.