Halifax Bank Plc Email Scam - Phishing for Your Identity

Phishing - The Halifax Bank Plc Email Scam
Redirects to spoofed (Fake) website: http://macblog.it

You may have received an email like the one below that looks very authentic, like it came from Halifax Bank Plc. This email was not sent by Halifax Bank Plc; Halifax Bank Plc is a victim as well. If you receive an email similar to the one below, DO NOT click on the link, and do not enter any information on the forms there.

The website that the link leads to is a spoof; a fake website, not created by Halifax Bank Plc. It goes to http://macblog.it, not Halifax Bank Plc! When you enter the information they ask for, you will simply be handing the thieves the keys to your bank accounts.  That is how spoofing and phishing works.

Remember, no reputable business would send you an email requesting your personal account information. Any such email you receive asking for this information should be considered phony and brought to the attention of the business being 'phished'.

Anytime you need to go to a website for your bank, credit card companies or other personal, financial or confidential information; do not follow a link in an email; just type their address in your browser directly (such as www.Halifax Bank Plc.com )

Below are actual phishing emails that started circulating in early 2008. The Verify Account link went to the phisher's website, http://macblog.it/usati/halifax-online.co.uk/_mem_/formslogin.asp/.

---

Halifax PLC. has been receiving complaints from our customers for unauthorized use of the Halifax Online accounts.

Due to this, you are requested to follow the provided steps and confirm your Online Banking details for the safety of your Accounts.

Verify Account

However, Failure to do so may result in temporary account suspension. Please understand that this is a security measure intended to help protect you and your account.

Thanks for your co-operation.

Security Center Advisory

Halifax PLC.

---

Other examples:

Due to several failed attempts to access to your account , we temporary deactivated your online-access for your account for security reasons.

---

Other examples:

We recently upgraded our Online Banking security system with a newly established security server in which guarantee's your maximum protection when accessing your account online.

---

More Information and What to Do

Halifax has an online demonstration of phishing: click here to learn more with Halifax's phishing demo.

Halifax also offers the following advice:

At first glance, phishing emails look like the genuine article.  They may have an official looking logo and information taken from legitimate websites.  But look a little closer - and there are things you can look out for:

• First and foremost, Halifax would never send you an email asking you to verify your secure online banking details.  Any email asking you to 'verify your account', 'confirm your sign in details', or using a similar form of words, is certainly a scam.
• Secondly, beware of links in emails.  Web addresses in phishing emails can be disguised so that they appear to be taking you to a trusted address when, in fact, they take you somewhere different.  This is usually a spoof site that has been set up by the fraudsters to try and get you to hand over your details.
• Genuine emails from the Halifax do contain links, but never to the online banking sign-in page.  If you are in any doubt about whether an email is genuine, don't click the link.

What to do if you think that you have received a suspicious email that appears to come from Halifax?

• Check out Halifax's current examples of suspicious emails that are doing the rounds.  See the examples for yourself.
• Forward the suspicious email to security@hbosplc.com
• Delete the email.

For more information about phishing, see this page.