Lloyds TSB E-mail Hoax: Online Membership Verification

Home / Lloyds TSB E-mail Hoax: Online Membership Verification

Lloyds TSB E-mail Hoax: Online Membership Verification

There’s another phishing scam, found by Hoax-Slayer, involving Lloyds TSB in the latest attempt to trick users in to handing over their identity and banking details. This latest scam includes a genuine-looking e-mail that directs users to a web site that mimics the official Internet banking web site for Lloyds TSB and then continues to a form, titled “Online Membership Verification”, which asks for details including your pin number.

The trick

Unlike most phishing scams, this e-mail and the subsequent web pages are not full of spelling and grammatical errors, and include the bank’s logo, are styled in the familiar green colour, and are signed by the correct name of the bank’s Digital Banking Director.

The e-mail has the subject, “Important Message – Your Internet Banking Account Status“, and is then styled as if it were a genuine marketing e-mail outlining the benefits of online banking.

Lloyds TSB phishing scam e-mail
Image courtesy of Hoax-Slayer

It includes a button, “Take me to Internet Banking”, which directs the user to a web site hosted in Serbia that appears virtually identical to the official Internet banking site for Lloyds TSB.

Lloyds TSB phishing scam fake login page
Image courtesy of Hoax-Slayer

Once the user enters their user ID and password and clicks the”Continue” button, they are presented with another page titled,”Online Membership Verification”, which asks for personal details, including name, phone number and date of birth. It also requests details including your account number, sort code, telephone banking pin, credit card number and ATM pin number.

Lloyds TSB online membership verification
Image courtesy of Hoax-Slayer

Look out for phishing scams

Despite users being more wary of phishing scams, it seems all too easy for cyber-criminals to trick users with scams like this. Whenever you are connected to a web site that is requesting log in or payment details, always check the address bar contains the domain name of the web site that you are intending to visit, such as “lloydstsb.co.uk”. Whilst this isn’t full-proof, most web sites that are requesting personal information will also be secure connections and the secure padlock icon should be highlighted.

The latest web browsers include anti-phishing tools to help identify suspicious web sites and you should be able to view the web site’s credentials, such as this, shown with Mozilla Firefox.

Lloyds TSB web site credentials with Firefox

Get free security tools

Having the latest anti-virus and anti-spyware software can also help protect you as most now monitor your browsing activity and will alert you to potential dangers. If you’re looking for free security tools for your PC or Mac, visit this page for some suggestions.

Leave a Reply