NatWest 'security update' scam email: how to stay safe
NatWest ‘security update’ scam takes you through to a site with a padlock and approved security certificate.
Scammers have set up a ‘NatWest’ page that contains convincing security features, Action Fraud is warning.
The scam starts with the typical email tactic, warning customers of a security update that needs to be carried out by clicking on a link.
However, the scam gets interesting, or rather worrying, because it actually takes victims through to a 'https' page that contains a padlock and a legitimate SSL certificate, which is a security protocol used by many businesses.
Although this particular example targets NatWest customers, it’s likely scammers have created variants for other high street rivals, so it’s worth being on your guard regardless of who you bank with.
How to tell it’s fake
As you can see from the tweet below, the real telltale sign you’re on a scam site is that the url string contains the word ‘natwiest’ rather than ‘natwest’.
It seems obvious when pointed out like this, but it’s entirely possible it would be missed if you thought you were logging into your banking as usual.
Article continues below
This is a screenshot of the fake website that's been set up with the misspelled URL! pic.twitter.com/ns3tkuuimb
— Action Fraud (@actionfrauduk) August 17, 2017
While the above shows you the fake website, below is an example of how the dodgy email looks.
Article continues below
Alert: Fake Natwest emails lead to a HTTPS page that's got a legit SSL certificate🔒! We're working with Natwest on taking that URL down 👊! pic.twitter.com/CsAWgh8dBT
— Action Fraud (@actionfrauduk) August 17, 2017
A padlock doesn’t mean you’re safe!
This is a worrying new development, as people often mistake signs like the padlock and https in the url as an indication that a site is official, or secure.
It’s stating that the connection is secure. So, in this instance, it just means that other scammers won’t be able to get in on the act of stealing your details!
As always, if you receive an email claiming to be from your bank calling on you to take any action, never click on any links.
Close it down, look up their contact details (ideally from an existing statement) and ask for further information that way.
Think you may have fallen for a scam? Check your credit report today
Most Recent
Comments
-
Thankfully scam attempts by email and phone seem to on the decline in my household. I like to think that I'm pretty savvy and would never be caught out but as I get older I wonder whether internet banking is losing its relevance to me (I don't use mobile banking!) and while it can be convenient to check certain information, I'm fortunate to have enough money in my account not to need to check for going overdrawn. And having grown up in the pre internet era I'm used to banking the old fashioned way in any case. It wouldn't pain me to stop using the internet for banking- although telephone banking would still be useful.
REPORT This comment has been reported. -
'Lawrence A' you have hit the nail on the head. I have lost count of the times that I have been contacted by telephone by banks and other organisations for whom I am a customer. They are phoning my number because it is the one that they have accepted as part of my personal information. Some are even aware that I live alone and am the subscriber of that phone number yet they still demand when they call me that I prove to them who I am. Why don't these organisations give me a security password that they will initially use so that I can be confident that they are genuine before I provide them with any of my details? I too have responded to such callers pointing out that it is they that have phoned me and therefore they should be giving me information that would convince me that they were genuine. They just don't have an answer for this.
REPORT This comment has been reported. -
Why the heck does anyone 'click the link'? it is the first thing that makes me realise that the email is probably fake. The spelling is usually crappy and the grammar is too. People need to wake up
REPORT This comment has been reported.
Do you want to comment on this article? You need to be signed in for this feature
20 August 2017