YOUR ACCOUNT HAS BEEN DEACTIVATED - Tesco Bank Phishing Scams

Tesco Bank


Date Reported: 31st March 2016	Risk Level: MEDIUM-HIGH

Email Subject:

YOUR ACCOUNT HAS BEEN DEACTIVATED

Apparent Sender:

Tesco Bank

Return Address:

info29@luppr.onmicrosoft.com

Email Format:

HTML

URL of Web Content:

http://juntto.com.br/wp2/wp-admin/maint/index.php

Anchor text of URLs:

1) Tesco Security Center
Dear Customer,
We notice an unrecognize account access on
your account and we have deactivated access
to your account to protect you. As part
of our new security system, we will be
screening activity in the Tesco system. We
recently contacted you after noticing an
issue on your account. We requested
information from you for some reason.
Please continue below to reactivate your
account. Continue here, 2) Tesco
Online System, 3) reporting it

Location:

SAO PAULO, SAO PAULO, BRAZIL

Scam number:

24855-139428-382567

Comments:

Email asks you to confirm/update/verify your account data at Tesco Bank by visiting the given link. You will be taken to a spoof website where your details will be captured for the phishers.

Tesco Bank never send their users emails requesting personal details in this way.

TESCO SECURITY CENTER

Dear Customer,

We notice an unrecognize account access on
your account and we have deactivated access
to your account to protect you.

As part of our new security system, we will
be screening activity in the Tesco system. We
recently contacted you after
noticing an issue on your account.

We requested information from you for some
reason. Please continue below to reactivate
your account.

Continue here

TESCO Memb...

Website:

See our most recent scam reports

Browse our scam report archives

Search

Please send us any scam/phishing emails you have received by reporting them here

For access to our huge blacklist of domain names and to sign up to our live feed of ALL the scams we receive please take a look at our Honeytrap service

If you have received the email below, please remember that it is very common for these email scams to be redistributed at a later date with only slightly different content, such as a different subject or return address, or with the fake webpage(s) hosted on a different webserver.

We aim to report every variant of the scams we receive, so even if it appears that a scam you receive has already been reported, please submit it to us anyway.