Email purporting to be from UK bank Lloyds claims that the bank was unable to process your transaction summary statement of accounts and you will therefore need to immediately click a link to confirm and update your billing information.
The email is not from Lloyds Bank. It is a phishing scam designed to trick you into divulging your account login credentials, your credit card numbers, and other sensitive personal information to online criminals.
Subject: ImportantLloyds Account Billing ConfirmationWe were unable to process your Transaction summary statement of accounts. This might be due to either of the following reasons:
1. A recent change in your personal information. (eg: billing address, phone)
2. Submitting incorrect Payment information during online payment process.
3. Login from unrecognized location or device.
4. Too many incorrect password login attempt.
Due to this, to ensure that your service is not interrupted, we request you to confirm and update your billing information immediately by following the reference giving below.
Please Note: Failure to confirm and verify online account information might lead to your account permanently suspended
We apologies for the inconvenience and thank you for your co-operation.
Lloyds Bank plc
According to this “important” email, which claims to be from the UK’s Lloyds Bank, the bank was unable to process your transaction summary statement of accounts. The email lists several possible reasons for the supposed processing problem and explains that you must now click a link to confirm and update your billing information. It warns that, if you fail to confirm your information as requested, your bank account may be permanently suspended. The email includes the Lloyds Bank logo.
However, the email is not from Lloyds Bank and the claim that you must click to confirm and verify your account is not true. In fact, the email is a typical phishing scam.
If you click the link in the email, you will first be taken to a fraudulent website that closely resembles the genuine Lloyd Bank login page. You will be instructed to begin the verification process by logging in to your account with your Lloyds Bank user ID and password. Next, you will be taken to a second fake page that asks for your credit card numbers, name and contact details, and other identifying information. After submitting the requested information, you will be taken to a final page that claims that you have successfully validated your account and avoided the threatened suspension.
Meanwhile, online criminals can collect the information you supplied and use it to hijack your Lloyds Bank account and steal your money. They can also commit fraudulent transactions using your credit card details. And, if they have gathered enough of your personal information, they may also be able to steal your identity.
Bank phishing scams like this one are very common and regularly target banks all around the world. Lloyds Bank customers have been targeted by a number of similar phishing campaigns in recent years.
It is always safest to login to all of your online accounts by entering the address into your browser’s address bar or via an official app.
Lloyds Bank has published information about phishing scams on its website.
Last updated: September 11, 2016
First published: September 11, 2016
By Brett M. Christensen