Halifax Fraudulent mails

[Ballistic Banana]

I know most of you may now of these but I just recieved one through my mail to an e-mail address i dont even use for banking

the ask you to click on the link to update your details see if you can spot the difference, really is quite similair.

So Test out your sniffer dog skills which one is real

1. [url]Halifax1|https://www.halifax-online.co.uk/_mem_bin/FormsLogin.asp?[/url]

or

2. Halifax2

BB

ps little tip, one allways lets you log in what ever you put so put a load of cr@p in that one

[Einion Yrth]

Without bothering to look I'd suggest the one that uses https:// would be legit.

[groucho]

The first one is real, is has the https.

[minornut]

Or the little ".com.cn" in the web address might give it away

Herro this is Harifax Onrine Banking!

[wolves_wanderer]

Funnily enough, if you click on the security information on the second site it warns you that Halifax would never send out an unsolicited email to get you to update your details

[Ballistic Banana]

wolves_wanderer said:

Funnily enough, if you click on the security information on the second site it warns you that Halifax would never send out an unsolicited email to get you to update your details

yeah I wet myself when i see that too, i think that is Halifaxs actual security information page

[puggit]

Well I put all my details in - now what happens?

[robbieduncan]

https does not imply that the site is who it claims to be. It is simply a protocol for encrypting data between a given website and your browser. The second site above could just as easily be using https and still be bent.

[beano500]

puggit said:

Well I put all my details in - now what happens?

RUN!!!

[Einion Yrth]

robbieduncan said:

https does not imply that the site is who it claims to be. It is simply a protocol for encrypting data between a given website and your browser. The second site above could just as easily be using https and still be bent.

Yes, but who would you expect to encrypt the data, the bank or the phishers? - granted if both were encrypted you could not know, nor could you in any event know for sure only from one piece of evidence, but it's a bloody good clue.

[robbieduncan]

Einion Yrth said:

Yes, but who would you expect to encrypt the data, the bank or the phishers? - granted if both were encrypted you could not know, nor could you in any event know for sure only from one piece of evidence, but it's a bloody good clue.

True. I was just pointing out that https alone is not a good way to make this sort of decision. It costs approx. $0 to set up https.

[cliffe_mafia]

The only reason your bank wants your email address is to bombard you with spam anyway. I don't let them have mine. If they want to contact me they can send me a letter or give me a ring.

It would be easy to stop the phishing if all banks told customers they never send emails.

[BliarOut]

Never reply to an unsolicited e-mail, whatever the content says. They usually say your account is being abused or in danger of closure etc. It's a classic phishing trick. Always log on using the correct url from your browser. I haven't seen a genuine banking site that asks for your complete password or pin.