Outline:
Email claims that the UK’s Tesco Bank is giving customers a chance to shop for free by handing out Tesco store vouchers. The email urges you to click a link to input your details and qualify for one of the vouchers.
Brief Analysis:
The email is not from Tesco Bank. It is a phishing scam designed to steal your personal and financial information. If you receive one of these fraudulent emails, do not click any links or open any attachments that it contains.
Example:
Subject: Tesco Savings Important Notification (ID:2949-54363)
Dear Customer,
TESCO is giving you a chance to shop for free this season at any of our outlets or online by giving out free vouchers.
This offer is only for Savings Account Users and it will be on until the end of [Date changes in different versions].
To Accept, follow the reference below and input all the details required
After validation, if selected your voucher will be sent via text message or posted to your Mailbox.
Thanks for taking part,
The Tesco Team
Detailed Analysis:
According to this email, which purports to be from the ‘Personal Finance Team’ at the UK’s Tesco Bank, you may have a chance to shop for free at Tesco outlets. Supposedly, the bank is handing out free Tesco vouchers to Tesco Savings bank customers. To qualify, claims the email, you need to click a ‘register’ link and provide the requested details.
But, the email is not from Tesco Bank and there are no free vouchers. Instead, it is a phishing scam designed to steal your personal and financial information.
If you click the link in the hope of getting your free voucher, you will be taken to a fraudulent website designed to emulate the genuine Tesco Bank site. The fake site will contain a form that asks you to provide your credit card and bank account numbers as well as your ID information, address, and contact details. The form will claim that you must provide this information if you want to receive one of the free vouchers.
All of the information you submit on the fake form will be collected by online criminals and used to commit financial fraud and identity theft.
Versions of this phishing scam have been distributed for several years. If you receive one of these scam emails, do not click any links or open any attachments that it contains.
Tesco Bank has published information about such phishing attacks and how to identify them on its website.
Last updated: December 31, 2017
First published: March 11, 2016
By Brett M. Christensen
About Hoax-Slayer
References
How to identify a genuine Tesco Bank email
‘Unclaimed Tesco Voucher’ Phishing Scam
Phishing Scams – Anti-Phishing Information
