Click here to see phishing scam example 1

or

Click here to return to previous Useful Links page

or

Click here to go to home page

Free email with automatic encryption, virus scanning and spam filtering - sign up for Hushmail today!

Phishing: Example 2, real email sent to me!

from: HSBC Bank plc
to: webmaster@thisdomain.net

Dear Sir/Madam,

HSBC Internet Banking. always look forward for the high security of our clients. Some customers have been receiving an email claiming to be from HSBC advising them to follow a link to what appear to be a HSBC web site, where they are prompted to enter their personal Online HSBC details. HSBC is in no way involved with this email and the web site does not belong to us.

HSBC Bank is proud to announce about their new updated secure system. We updated our new SSL servers to give our customers a better, fast and secure online banking service.

Due to the recent update of the servers, you are requested to please update your account info at the following link.

https://hsbc.co.uk/1/2/personal/current-home/login

*Important* We have asked few additional information which is going to be the part of secure login process. These additional information will be asked during your future login security so, please provide all these info completely and correctly otherwise due to security reasons we may have to close your account temporarily.

O. D. John
Security Advisor HSBC Bank.

How did I recognize this email as a phishing scam?

1. I do have a HSBC account but email to me are addressed to one specific email address which is not "webmaster".
2. My bank knows who I am by name ... I am on their database ... and would not address me as Dear Sir/Madam
3. The link provided throws up an alert box that says that the link is a mismatch of domains (referred to is 'our new SSL servers'). A Bank would not permit such a foul-up!
4. My email client suggested this was a scam.

NB. I could have checked for the real web site via Google, then forwarded a copy of this email to support@hsbc.co.uk. Or I could have just phoned up and asked for one of their Security Advisors and asked about this email.