The number of phishing emails purporting to be from our bank are on the wane as criminals switch to new email scam tactics. Here’s how to stay safe.
The number of phishing email attacks from 'banks' has dropped substantially as scammers switch their tactics.
According to Financial Fraud Action (FFA), an organisation set up by the UK payments industry to tackle fraud, criminals are now mimicking an increasing range of organisations in their fake email scams.
In the past, fraudsters tended to focus on sending fake mails purporting to be from our bank in an attempt to trick us into handing over personal data.
What emails scammers are doing instead
In 2015, the FFA uncovered 16,462 phishing websites targeting UK banks and building societies, down from a peak of 256,641 in 2012.
Now, fraudsters are branching out by sending emails purporting to be from a whole host of reputable trades and companies in an effort to steal your personal information.
“Banks have worked hard to tackle the problem of phishing emails, with a large drop in attacks against bank websites in recent years,” says Katy Worobec, director of Financial Fraud Action UK.
“However, intelligence suggests that fraudsters are still using phishing emails to steal people’s personal and financial details by claiming to be from other organisations such as Government departments, utility companies, technology companies or major retailers.”
How a phishing email scam works
A phishing email looks like a genuine mail from your bank, building society, the taxman, or another reputable company.
It will encourage you to click on a link within the email, usually to update or verify your password and log in details.
But, you are then taken to a bogus website or form where whatever details you enter are seen by the criminals who can then use that information to commit fraud.
“It remains vital to be ware of any unsolicited emails asking for your information,” says Worobec.
How to stay safe
Millions of phishing emails are sent out each year and some are far more genuine looking than others. But, there are ways to protect yourself from these fraudsters.
Signs an email may be dodgy:
- Be wary of unsolicited emails asking for personal information.
- Watch out for emails that don’t address you by your proper name. For example, they may have a vague greeting such as “Dear customer” or “Dear Sir/Madam”.
- Think twice if an email is asking you for personal information such as your username, password or bank details.
- The email contains a link supposedly to the website of the organisation but the address is different.
How to protect yourself
Firstly, never reply to an unsolicited email with your personal details. Secondly, don’t click on links within emails, instead find out the website of the organisation via an internet search and type it into the address bar yourself. If you are in any doubt at all call the organisation on a number you have found for yourself, not one in the email, and ask if they have emailed you.
If you think you may have been the victim of a phishing scam contact your bank immediately.
More scam warnings from loveMONEY:
Look out for this SIM-swapping scam