Beware of Bank Fraud

[Reds6]

Today I got an email from Bank of America stating that an Online Transfer account had been added to my account. We of course I had not added an account. I lokked at my account and somebody set up an account and attempted to transfer $1000.00 out of my account. I immediately called BOA and had to change ALL of my banking onformation and had to cancel my bank cards.
How did they access my information? Well I feel real stupid, but I recieved an email from supposedly BOA asking to update my information. I was hesistant but the email, fine print, and everything looked official. Well it wasn't and I got screwed. So beware of this fraud attempt. I must now also inform the Credit Bureaus that I am a victim of Online Identity theft. this sucks, but I'm happy I did get my money back.

[christiangirl]

!!!! Did they manage to catch who it was, or at least trace where the money was being transferred to?

[1browngirl]

Originally Posted by Reds6

How did they access my information? Well I feel real stupid, but I received an email from supposedly BOA asking to update my information. I was hesitant but the email, fine print, and everything looked official.

Don't feel stupid. I got an email from Chase a few weeks ago that looked official and I almost started to fill it out with all my information until I noticed they asked for my SS# and mother's maiden name. I called Chase and confirmed they would never ask for that info. I forwarded the email to Chase's fraud division.

Sometimes I get three or four emails from banks that I don't even use asking me to update my info because their system has been compromised. I delete the emails and keep it moving.

[Drolefille]

Your banks will NEVER ask you to provide that private information over email. If you get that kind of email and you actually have an account with the bank and you're unsure. Go to the real bank website by your own links or through Google and logon that way.

Originally Posted by Drolefille

Your banks will NEVER ask you to provide that private information over email. If you get that kind of email and you actually have an account with the bank and you're unsure. Go to the real bank website by your own links or through Google and logon that way.

This needs to be said over and over again. Not only will they NOT ask for private info over email, in order to view any transactions/activity, they'll usually ask you to log in to their secure website. Speaking of secure websites, they're indicated by the https:// at the beginning of the URL.

Chances are they probably didn't even know you had a BofA account until you filled out the info. I also get dozens of emails from FCUs that I don't even have accounts with.

If your email provider has a phishing notification option (I know GMail does), let your email provider know what's going on. The providers then notify the financial institution and it helps them investigate and hopefully catch these scammers.

It's very unfortunate that you fell victim to this, but again...everyone has to remember that banks/credit card companies, etc. etc. WILL NEVER ASK FOR PERSONAL INFORMATION VIA EMAIL.

[Reds6]

Originally Posted by OTW

This needs to be said over and over again. Not only will they NOT ask for private info over email, in order to view any transactions/activity, they'll usually ask you to log in to their secure website. Speaking of secure websites, they're indicated by the https:// at the beginning of the URL.

Chances are they probably didn't even know you had a BofA account until you filled out the info. I also get dozens of emails from FCUs that I don't even have accounts with.

If your email provider has a phishing notification option (I know GMail does), let your email provider know what's going on. The providers then notify the financial institution and it helps them investigate and hopefully catch these scammers.

It's very unfortunate that you fell victim to this, but again...everyone has to remember that banks/credit card companies, etc. etc. WILL NEVER ASK FOR PERSONAL INFORMATION VIA EMAIL.

And you know I know all of that, which makes me kick myself even more. What got me was when I clicked on the link it appeared as though I was on BOA's site, you could even click on other links to visit other places of the site.

[NiaX]

Originally Posted by 1browngirl

Don't feel stupid. I got an email from Chase a few weeks ago that looked official and I almost started to fill it out with all my information until I noticed they asked for my SS# and mother's maiden name. I called Chase and confirmed they would never ask for that info. I forwarded the email to Chase's fraud division.

Sometimes I get three or four emails from banks that I don't even use asking me to update my info because their system has been compromised. I delete the emails and keep it moving.

I see those emails in my junk inbox... I am like I don't do bidness with you? The things folks do for a buck!

Soror S, I am glad that you were able to get this straightened out.

[Reds6]

Originally Posted by NiaX

I see those emails in my junk inbox... I am like I don't do bidness with you? The things folks do for a buck!

Soror S, I am glad that you were able to get this straightened out.

Thanks. I just wanted to let folks know when your guard is down and your mind is on a thousand different things you can get got.

[Drolefille]

Originally Posted by Reds6

Thanks. I just wanted to let folks know when your guard is down and your mind is on a thousand different things you can get got.

I understand. I'll get a dozen emails from Fifth Thirds bank and (as I don't have an account there) they don't get a second glance. But every now and then an eBay or Paypal email makes me look twice because I'm not sure what they're asking and they just might be real.

I do have the benefit of having worked at a bank though and you get educated in ALL the schemes out there.

The fake website trick is a common one. Most of the time the web address will show up as a number: http://253.352.569.32 for example. Or be something like BankofAmericaonlinebankingverification.com. They'll even link to the real webpage like you saw.

Also, you bank won't ever call you asking for that information. If someone does, ask for their name and say you'll call them back through the bank. (I doubt you'll get a name ) But then call the bank with their real number and let them know what happened. They appreciate being let know when their customers are the target of phishing.

[pinkies up]

Originally Posted by Drolefille

I understand. I'll get a dozen emails from Fifth Thirds bank and (as I don't have an account there) they don't get a second glance. But every now and then an eBay or Paypal email makes me look twice because I'm not sure what they're asking and they just might be real.

I do have the benefit of having worked at a bank though and you get educated in ALL the schemes out there.

The fake website trick is a common one. Most of the time the web address will show up as a number: http://253.352.569.32 for example. Or be something like BankofAmericaonlinebankingverification.com. They'll even link to the real webpage like you saw.

Also, you bank won't ever call you asking for that information. If someone does, ask for their name and say you'll call them back through the bank. (I doubt you'll get a name ) But then call the bank with their real number and let them know what happened. They appreciate being let know when their customers are the target of phishing.

I get fake mail from ebay ALL THE TIME!!! I love shopping online, but after this fiasco, I may have to rethink this...

[12dn94dst]

S, I'm so sorry this happened to you! We all have dumb moments from time to time. I'm just glad you caught it before they did too much damage.

[StarFish106]

If you get fake emails from Ebay or Paypal you can always email them to

Spoof@paypal or spoof@ebay to let them know of these particular sites. They will let you know if they are the the real deal or not with a response.

Sometimes I will click on the link for the BoA just to see what comes up in my browser bar.If it isn't the one I normally use it goes to the trash bin but I usually delete without doing that.