Beware of Bank Fraud

[Reds6]

Today I got an email from Bank of America stating that an Online Transfer account had been added to my account. We of course I had not added an account. I lokked at my account and somebody set up an account and attempted to transfer $1000.00 out of my account. I immediately called BOA and had to change ALL of my banking onformation and had to cancel my bank cards.
How did they access my information? Well I feel real stupid, but I recieved an email from supposedly BOA asking to update my information. I was hesistant but the email, fine print, and everything looked official. Well it wasn't and I got screwed. So beware of this fraud attempt. I must now also inform the Credit Bureaus that I am a victim of Online Identity theft. this sucks, but I'm happy I did get my money back.

[christiangirl]

!!!! Did they manage to catch who it was, or at least trace where the money was being transferred to?

[1browngirl]

Originally Posted by Reds6

How did they access my information? Well I feel real stupid, but I received an email from supposedly BOA asking to update my information. I was hesitant but the email, fine print, and everything looked official.

Don't feel stupid. I got an email from Chase a few weeks ago that looked official and I almost started to fill it out with all my information until I noticed they asked for my SS# and mother's maiden name. I called Chase and confirmed they would never ask for that info. I forwarded the email to Chase's fraud division.

Sometimes I get three or four emails from banks that I don't even use asking me to update my info because their system has been compromised. I delete the emails and keep it moving.

[Drolefille]

Your banks will NEVER ask you to provide that private information over email. If you get that kind of email and you actually have an account with the bank and you're unsure. Go to the real bank website by your own links or through Google and logon that way.

Originally Posted by Drolefille

Your banks will NEVER ask you to provide that private information over email. If you get that kind of email and you actually have an account with the bank and you're unsure. Go to the real bank website by your own links or through Google and logon that way.

This needs to be said over and over again. Not only will they NOT ask for private info over email, in order to view any transactions/activity, they'll usually ask you to log in to their secure website. Speaking of secure websites, they're indicated by the https:// at the beginning of the URL.

Chances are they probably didn't even know you had a BofA account until you filled out the info. I also get dozens of emails from FCUs that I don't even have accounts with.

If your email provider has a phishing notification option (I know GMail does), let your email provider know what's going on. The providers then notify the financial institution and it helps them investigate and hopefully catch these scammers.

It's very unfortunate that you fell victim to this, but again...everyone has to remember that banks/credit card companies, etc. etc. WILL NEVER ASK FOR PERSONAL INFORMATION VIA EMAIL.

[NiaX]

Originally Posted by 1browngirl

Don't feel stupid. I got an email from Chase a few weeks ago that looked official and I almost started to fill it out with all my information until I noticed they asked for my SS# and mother's maiden name. I called Chase and confirmed they would never ask for that info. I forwarded the email to Chase's fraud division.

Sometimes I get three or four emails from banks that I don't even use asking me to update my info because their system has been compromised. I delete the emails and keep it moving.

I see those emails in my junk inbox... I am like I don't do bidness with you? The things folks do for a buck!

Soror S, I am glad that you were able to get this straightened out.

[Reds6]

Originally Posted by OTW

This needs to be said over and over again. Not only will they NOT ask for private info over email, in order to view any transactions/activity, they'll usually ask you to log in to their secure website. Speaking of secure websites, they're indicated by the https:// at the beginning of the URL.

Chances are they probably didn't even know you had a BofA account until you filled out the info. I also get dozens of emails from FCUs that I don't even have accounts with.

If your email provider has a phishing notification option (I know GMail does), let your email provider know what's going on. The providers then notify the financial institution and it helps them investigate and hopefully catch these scammers.

It's very unfortunate that you fell victim to this, but again...everyone has to remember that banks/credit card companies, etc. etc. WILL NEVER ASK FOR PERSONAL INFORMATION VIA EMAIL.

And you know I know all of that, which makes me kick myself even more. What got me was when I clicked on the link it appeared as though I was on BOA's site, you could even click on other links to visit other places of the site.

[Reds6]

Originally Posted by NiaX

I see those emails in my junk inbox... I am like I don't do bidness with you? The things folks do for a buck!

Soror S, I am glad that you were able to get this straightened out.

Thanks. I just wanted to let folks know when your guard is down and your mind is on a thousand different things you can get got.

[Drolefille]

Originally Posted by Reds6

Thanks. I just wanted to let folks know when your guard is down and your mind is on a thousand different things you can get got.

I understand. I'll get a dozen emails from Fifth Thirds bank and (as I don't have an account there) they don't get a second glance. But every now and then an eBay or Paypal email makes me look twice because I'm not sure what they're asking and they just might be real.

I do have the benefit of having worked at a bank though and you get educated in ALL the schemes out there.

The fake website trick is a common one. Most of the time the web address will show up as a number: http://253.352.569.32 for example. Or be something like BankofAmericaonlinebankingverification.com. They'll even link to the real webpage like you saw.

Also, you bank won't ever call you asking for that information. If someone does, ask for their name and say you'll call them back through the bank. (I doubt you'll get a name ) But then call the bank with their real number and let them know what happened. They appreciate being let know when their customers are the target of phishing.

[pinkies up]

Originally Posted by Drolefille

I understand. I'll get a dozen emails from Fifth Thirds bank and (as I don't have an account there) they don't get a second glance. But every now and then an eBay or Paypal email makes me look twice because I'm not sure what they're asking and they just might be real.

I do have the benefit of having worked at a bank though and you get educated in ALL the schemes out there.

The fake website trick is a common one. Most of the time the web address will show up as a number: http://253.352.569.32 for example. Or be something like BankofAmericaonlinebankingverification.com. They'll even link to the real webpage like you saw.

Also, you bank won't ever call you asking for that information. If someone does, ask for their name and say you'll call them back through the bank. (I doubt you'll get a name ) But then call the bank with their real number and let them know what happened. They appreciate being let know when their customers are the target of phishing.

I get fake mail from ebay ALL THE TIME!!! I love shopping online, but after this fiasco, I may have to rethink this...

[1908Revelations]

I got an e-mail from PayPal saying I had to verify an e-mail address added to my account. Of course I didn't add an e-mail to my account! I clicked the link ane it was really long instead of saying www.paypal.com . Then I went to the paypal website....I compared the two and noticed the diference. I forwarded the e-mail to paypal and they confirmed it was a fraud.

ETA
On regular websites you can browse different pages. On the 'Phishing' website if I clicked on anything it prompted me to log in...regardless of what I clicked on.

[Lyoness]

Originally Posted by 1908Revelations

I got an e-mail from PayPal saying I had to verify an e-mail address added to my account. Of course I didn't add an e-mail to my account! I clicked the link ane it was really long instead of saying www.paypal.com . Then I went to the paypal website....I compared the two and noticed the diference. I forwarded the e-mail to paypal and they confirmed it was a fraud.

I got the same email from PayPal yesterday. My best friend fell victim to this scam a few months ago from BOA. AND just before it happened, I got a similar email from Chase. I told her about it but I guess she didn't remember.

[black_princess]

It's funny how so many of us have had some sort of experience or run in with these scammers. I remenber when I got an e-mil senior undergrad year. The email wnated me to click on some link and follow the instructions . .Gladly I had heard of these things and what not to do. I brought it to the local campus branch of the bank and they were totally suprised and asked " where did you get this ???!!! " When I told they where they informed me that this was called a "fishing skeem" and that I was lucky that I didn't enter any information or click on the lik in the e-mail. they made copies and told me to take the e-mail printout of the e-mail to the branch where I originally opened my account. Thankfully nothing ever happened but I did have a close call.

[mccoyred]

I received a phishing email from Amazon.com a little while ago. It just didn't feel right so I copied the email and the URL into the body of the online form directly on Amazon.com's website; they answered and confirmed that it was a scam. I have also received emails from Paypal scammers.

Shopping online is fine as long as you get to the secure site directly from the merchant's page.

[Missam05]

You can also hover over the website (and look at the bar at the bottom of your screen--if you have SBC yahoo) and see the website it will take you to. Usually those phishing scams don't have the bank/website/etc. that you're looking for FIRST. That's another way you KNOW it's not official.