Halifax customer service: your account! - Halifax Phishing Scams

Halifax


Date Reported: 22nd March 2008	Risk Level: MEDIUM-HIGH

Email Subject:

Halifax customer service: your account!

Apparent Sender:

Halifax

Return Address:

< clientcareservice.id8861- 0867538HOF@halifax.co.uk >

Email Format:

HTML

URL of Web Content:

http://halifax.co.uk.mymiditroblt.nu/_ mem_bin/onlineform.asp?source= 704952819320880976198529165938 68899715337399953710

Location:

Scam number:

aa-6749

Comments:

Email asks you to confirm/update/verify your account data at Halifax by visiting the given link. You will be taken to a spoof website where your details will be captured for the phishers.

Halifax never send their users emails requesting personal details in this way.

The REAL URL of the spoof website is disguised as "http://halifax.co.uk/_mem_bin/ onlineform.asp?source=7049528193 208809761985291659386889971533739 9953710".

The REAL URL of the spoof website has been chosen to look very similar to the actual Halifax URL. Do not be fooled!

"We have implemented security measures consistent with our internal information security practices to help us keep your information secure."

Dear Halifax bank customer,

We have implemented security measures consistent with our internal information security practices to help us keep your information secure. These measures include technical and procedural steps to protect your data from misuse, access or disclosure, loss, alteration or destruction.

One of these security measures is HOF (Halifax Online Form) to help us to keep your personal and banking data up to date.

You should complete HOF on a regular basis.

Please complete HOF using the link below:

http://halifax.co.uk/_mem_bin/ onlineform.asp?source=704952819 32088097619852916593868899715337 399953710

Halifax Automated Mail Service. Please do not respond to this mail.

Website:

See our most recent scam reports

Browse our scam report archives

Search

Please send us any scam/phishing emails you have received by reporting them here

For access to our huge blacklist of domain names and to sign up to our live feed of ALL the scams we receive please take a look at our Honeytrap service

If you have received the email below, please remember that it is very common for these email scams to be redistributed at a later date with only slightly different content, such as a different subject or return address, or with the fake webpage(s) hosted on a different webserver.

We aim to report every variant of the scams we receive, so even if it appears that a scam you receive has already been reported, please submit it to us anyway.