Page 1 of 1

First Federal of Lakewood

Posted: Tue Feb 12, 2008 10:29 am
by Justine Cooper
I am being inundated with emails from supposedly this bank about my account, of which I have none. Who do we report these fraudulent emails to, trying to rip people off by getting their personal information? Is there a local place to send them to?

Posted: Tue Feb 12, 2008 10:50 am
by David Lay

Posted: Tue Feb 12, 2008 11:54 am
by Bryan Schwegler
You could probably also forward them to FFL as I'm sure they'll want to look into it also. Here's their e-mail info@FFL.net

Posted: Tue Feb 12, 2008 11:57 am
by David Lay
I did a trace on the server the email(s) are coming from; it's a server in Macau. I've sent an email to their abuse team to let them know.

Posted: Tue Feb 12, 2008 12:01 pm
by Justine Cooper
Thanks! I did contact FF and they did reply right away with an email saying it is fraud. What abuse team do you mean David?

Posted: Tue Feb 12, 2008 12:06 pm
by David Lay
The abuse team for the server that is hosting the phishing site.

Posted: Tue Feb 12, 2008 1:25 pm
by Jeff Endress
First Fed is well aware of the emails. Talked with Dave Shaw, and FFL is doing all it can to put a stop to this phising expedition.
There's a number of them going out:
A fake customer satisfaction survey that promises an $80.00 participation reward,
An alert that your accounts have been frozen,
An advisory that you have a tax refund due

All seek personal information: account numbers, PINs, etc.

Of course, NEVER release such information in response to an email.....no matter how official it looks.

Jeff

Posted: Tue Feb 12, 2008 1:28 pm
by Corey Rossen
Jeff Endress wrote: Of course, NEVER release such information in response to an email.....no matter how official it looks.

Jeff
Jeff, I never give them my own info, I just use yours.

Corey

Posted: Tue Feb 12, 2008 1:36 pm
by David Lay
What I've been doing is open up the raw text of the email that will show the message headers. I find the domain that the email came from and send an email to their abuse team, usually abuse@whateverdomain.com.

More often than not, the sender's account will be cancelled.

I also send an email to the host of the website link in the email as well.