Page 1 of 1
First Federal of Lakewood
Posted: Tue Feb 12, 2008 10:29 am
by Justine Cooper
I am being inundated with emails from supposedly this bank about my account, of which I have none. Who do we report these fraudulent emails to, trying to rip people off by getting their personal information? Is there a local place to send them to?
Posted: Tue Feb 12, 2008 10:50 am
by David Lay
Posted: Tue Feb 12, 2008 11:54 am
by Bryan Schwegler
You could probably also forward them to FFL as I'm sure they'll want to look into it also. Here's their e-mail
info@FFL.net
Posted: Tue Feb 12, 2008 11:57 am
by David Lay
I did a trace on the server the email(s) are coming from; it's a server in Macau. I've sent an email to their abuse team to let them know.
Posted: Tue Feb 12, 2008 12:01 pm
by Justine Cooper
Thanks! I did contact FF and they did reply right away with an email saying it is fraud. What abuse team do you mean David?
Posted: Tue Feb 12, 2008 12:06 pm
by David Lay
The abuse team for the server that is hosting the phishing site.
Posted: Tue Feb 12, 2008 1:25 pm
by Jeff Endress
First Fed is well aware of the emails. Talked with Dave Shaw, and FFL is doing all it can to put a stop to this phising expedition.
There's a number of them going out:
A fake customer satisfaction survey that promises an $80.00 participation reward,
An alert that your accounts have been frozen,
An advisory that you have a tax refund due
All seek personal information: account numbers, PINs, etc.
Of course, NEVER release such information in response to an email.....no matter how official it looks.
Jeff
Posted: Tue Feb 12, 2008 1:28 pm
by Corey Rossen
Jeff Endress wrote:
Of course, NEVER release such information in response to an email.....no matter how official it looks.
Jeff
Jeff, I never give them my own info, I just use yours.
Corey
Posted: Tue Feb 12, 2008 1:36 pm
by David Lay
What I've been doing is open up the raw text of the email that will show the message headers. I find the domain that the email came from and send an email to their abuse team, usually
abuse@whateverdomain.com.
More often than not, the sender's account will be cancelled.
I also send an email to the host of the website link in the email as well.