First Federal of Lakewood

Justine Cooper · Post by **Justine Cooper** » Tue Feb 12, 2008 10:29 am

I am being inundated with emails from supposedly this bank about my account, of which I have none. Who do we report these fraudulent emails to, trying to rip people off by getting their personal information? Is there a local place to send them to?

David Lay · Post by **David Lay** » Tue Feb 12, 2008 10:50 am

http://www.phishtank.com

Bryan Schwegler · Post by **Bryan Schwegler** » Tue Feb 12, 2008 11:54 am

You could probably also forward them to FFL as I'm sure they'll want to look into it also. Here's their e-mail info@FFL.net

David Lay · Post by **David Lay** » Tue Feb 12, 2008 11:57 am

I did a trace on the server the email(s) are coming from; it's a server in Macau. I've sent an email to their abuse team to let them know.

Justine Cooper · Post by **Justine Cooper** » Tue Feb 12, 2008 12:01 pm

Thanks! I did contact FF and they did reply right away with an email saying it is fraud. What abuse team do you mean David?

David Lay · Post by **David Lay** » Tue Feb 12, 2008 12:06 pm

The abuse team for the server that is hosting the phishing site.

Jeff Endress · Post by **Jeff Endress** » Tue Feb 12, 2008 1:25 pm

First Fed is well aware of the emails. Talked with Dave Shaw, and FFL is doing all it can to put a stop to this phising expedition.
There's a number of them going out:
A fake customer satisfaction survey that promises an $80.00 participation reward,
An alert that your accounts have been frozen,
An advisory that you have a tax refund due

All seek personal information: account numbers, PINs, etc.

Of course, NEVER release such information in response to an email.....no matter how official it looks.

Jeff

Corey Rossen · Post by **Corey Rossen** » Tue Feb 12, 2008 1:28 pm

Jeff Endress wrote: Of course, NEVER release such information in response to an email.....no matter how official it looks.

Jeff

Jeff, I never give them my own info, I just use yours.

Corey

David Lay · Post by **David Lay** » Tue Feb 12, 2008 1:36 pm

What I've been doing is open up the raw text of the email that will show the message headers. I find the domain that the email came from and send an email to their abuse team, usually abuse@whateverdomain.com.

More often than not, the sender's account will be cancelled.

I also send an email to the host of the website link in the email as well.