An information stealing phishing scam targeting Santander Bank customers is currently being distributed via email.
The email, which has the subject line “Santander Alerts Service Update”, claims that the bank is introducing new online banking authentication procedures to help protect your private information. Because of this change, claims the message, you are required to click a link to confirm your online banking details.
Supposedly, you will not be able to access your account until the update is completed.
But, Santander did not send the email and the claim that you must update your account details is untrue.
In fact, this phishing scam is an attempt to steal a large amount of your personal and financial information.
Here is what the scam email looks like:
Subject: SANTANDER ALERTS SERVICE UPDATE
Please note that starting from July 27, 2017 we will be introducing new online banking authentication procedures in order to protect the private information of all online banking users.
You are required to confirm your online banking details with us as you will not be able to have access to your accounts until this has been done.
As you’re already registered for online banking all you need to do is to confirm your online banking details.
Confirm your details
Once you’ve completed this you’ll be able to manage your money whenever you want, giving you more control of your finances.
If you fall for the trick and click the link, you will be taken to a fraudulent website that has been built to emulate Santander Bank’s genuine login page. Once you “log in” on the fake page, the following ‘Verification Form” will load in your browser:
Scammers can then collect your account login credentials, your credit card details, and the other personal information requested on the fake form. They’ll use this information to hijack your bank account and steal your money, conduct fraudulent transactions with your credit card, and attempt to steal your identity.
If you receive an email like this one, do not click any links that it contains. It is safer to log in to your online accounts by entering the address into your browser’s address bar or via a trusted app.
The Santander Bank website includes information about avoiding fraud and reporting scam attempts.