Computer to Computer Phishing
Home ScamsPhishing Scams Fake Emirates NBD Bank Payment Notification Phishes for Passwords

Fake Emirates NBD Bank Payment Notification Phishes for Passwords

by Brett M. Christensen

According to this email, which purports to be from Dubai-based bank Emirates NBD,  a customer payment to your company has been rejected.

The email asks you to open an attached file to confirm that your bank account details are correct.

However, Emirates NBD did not send the email and the claim that you must confirm your account details is a lie.  The email is a phishing scam designed to steal your personal information.

Opening the attachment loads what is supposedly a Microsoft Excel document. However, the attachment is actually an HTML file that will load in your default browser. The content of the document is greyed out.

A popup window claims that the document is protected by Microsoft File Security and you must enter your email address and email account password to gain access. Your login details will then be sent to scammers who can use it to hijack your email account and any services that are linked to it.

In some cases, a second “update form” on the scam website may ask for other personal and financial information, which will also be sent to online crooks.

Be wary of any email that claims that you must authorise or unlock an attached document by entering your account passwords or other sensitive information. Legitimate banks and online services will not send attached documents that have such a requirement.

Email account phishing scams like this are very common. It is always better to login to your account by entering the address into your browser’s address bar or via a trusted app.
Emirates NBD has information about fighting and reporting fraud attempts on its website.

A screenshot of the scam email:

Fake Emirates MDB Payment Email

A screenshot of the attached HTML file:

Fake Excel Login Page

Transcript of the scam email:

Subject: Regarding payment to your beneficiary account

Emirates NBD Bank

Dear media,

Greetings from Emirates NBD Bank

Subject payment as instructed by our customer to your company has been rejected by your beneficiary’s bank citing “Unable to apply to beneficiary account”.

Please check attached swift and confirm if the bank account details are correct and let us have an alternative to re-effect the payment immediately.

Thanks and regards,

Younes Ali
Head Teller
Jumeirah branch Al wasl road

Emirates NBD
Dubai
United Arab Emirates
Telephone
Email
Website



Importance Notice

After considerable thought and with an ache in my heart, I have decided that the time has come to close down the Hoax-Slayer website.

These days, the site does not generate enough revenue to cover expenses, and I do not have the financial resources to sustain it going forward.

Moreover, I now work long hours in a full-time and physically taxing job, so maintaining and managing the website and publishing new material has become difficult for me.

And finally, after 18 years of writing about scams and hoaxes, I feel that it is time for me to take my fingers off the keyboard and focus on other projects and pastimes.

When I first started Hoax-Slayer, I never dreamed that I would still be working on the project all these years later or that it would become such an important part of my life. It's been a fantastic and engaging experience and one that I will always treasure.

I hope that my work over the years has helped to make the Internet a little safer and thwarted the activities of at least a few scammers and malicious pranksters.

A Big Thank You

I would also like to thank all of those wonderful people who have supported the project by sharing information from the site, contributing examples of scams and hoaxes, offering suggestions, donating funds, or helping behind the scenes.

I would especially like to thank David White for his tireless contribution to the Hoax-Slayer Facebook Page over many years. David's support has been invaluable, and I can not thank him enough.

Closing Date

Hoax-Slayer will still be around for a few weeks while I wind things down. The site will go offline on May 31, 2021. While I will not be publishing any new posts, you can still access existing material on the site until the date of closure.

Thank you, one and all!

Brett Christensen,
Hoax-Slayer