[mtdjed]

Received the following message from Bank of America. It had bank logos and looks very professional.

However, sending site looks suspicious ie admin@deloved.ru.



Also message tells you to do almost everything you should not do.


Also, we do not have a BOA account.


If you receive such a message , I would strongly suggest non response. If anything, your BOA and ask about activity





Security Alert

BA
Bank 0f America <admin@deloved.ru>



Reply
|

Yesterday, 9:58 PM







Attachments








Security Alert
Dear Customer,
We are letting you know that due to an ongoing General system maintenance in our Online Banking Database its mandatory for you to Verify Your Bank of America Account in order to enjoy our online banking service. We request that you complete this quick Verification process. If this is not done as urgent as possible your account might be deactivated at once.
Online Verification
Thanks for your understanding as we are always there to keep you informed
Signed:
DataBase Management.



Remember: We ask for private information such as an account number, card PIN, or Social Security or Tax ID number in email messages.
This is a service email from Bank of America. Please note that you may receive service emails in accordance with your Bank of America service agreements, whether or not you elect to receive promotional email.
Read our Privacy Notice.
Please don't reply directly to this automatically generated email message.
Bank of America Email, NC1-028-09-01, 150 N College St., Charlotte, NC 28255
Bank of America, N.A. Member FDIC. Equal Housing Lender
© 2018 Bank of America Corporation. All rights reserved.

[villagetinker]

Even if I do not have one of these accounts, I contact the bank and find their contact for phishing/scam emails and forward it to them. They can look at the header and possibly trace or shutdown the offender.

[papasetti82]

I just sent link to BOA.

[Carla B]

"admin@deloved.ru" Is this a Russian address?

[manaboutown]

In places the text reflects it being written by a Russian or possibly another non-native speaker. Also some of the phraseology is close to but not the norm - 'privacy notice' for 'privacy policy' and so on.

[BobnBev]

Any site that ends with .ru is from Russia.

Also a lot of words that begin with a capital letter, shouldn't be capitalized. A big red flag.

[TommyT]

And the bad part is "people will" fall for it and do what is asked.....

[Abby10]

I just got one supposedly from Chase the other day. The grammar, etc was fine, but the red flags were the original sender info and the fact that it was sent to "undisclosed recipients". I forwarded it to Chase's abuse email address. They said that they would never inform me by email if there was a problem with my account regarding security. They also stated that they would never send an email where you would go directly to your account from the email itself. Just thought I would pass this info along.....

[LittleDog]

I get these type of letters from various banks where I do not have an account. Phissing???

John

[Abby10]

Originally Posted by LittleDog

I get these type of letters from various banks where I do not have an account. Phissing???

John

Yes, phishing. If you get these types of notifications, don't respond.

[Pinball wizard]

This is quite simple...

If you don't have an account at the particular financial institution you should just delete it and try forwarding it to fraud@the institution name.com. For example: fraud@chase.com.

If you do have an account at that financial institution, the very first thing you should do is check the senders email address to make sure it really did come from the bank. As many pointed out, the email being discussed came from .ru. Obviously not the bank. Then forward it and delete it.

When in doubt, call the institution.

[BobnBev]

Originally Posted by Pinball wizard

This is quite simple...

If you don't have an account at the particular financial institution you should just delete it and try forwarding it to fraud@the institution name.com. For example: fraud@chase.com.

If you do have an account at that financial institution, the very first thing you should do is check the senders email address to make sure it really did come from the bank. As many pointed out, the email being discussed came from .ru. Obviously not the bank. Then forward it and delete it.

When in doubt, call the institution.

BUT----not on the phone # they give you. Call the # on the back of your card.

[aninjamom]

Note that the email also says that they WILL ask for personal info in an email, the exact OPPOSITE of what every company has been telling us for a while now. Don't ever follow links. Get out of your email and go to the website directly if you're checking online.