Phishing season: Don't get hooked
By Jo Rafferty, Staff Writer
Tuesday, December 09, 2008 |
Banks warns of online, e-mail scams
COOS BAY — Elizabeth Krambeal of North Bend was lucky. She received a fraudulent e-mail this week bearing the Wells Fargo bank red-and-gold logo, but decided not to open a link that said “click here.”
“That was the signal,” Krambeal said. “We thought it just didn’t sound right.”
Krambeal reported it to her bank branch in Coos Bay on Friday.
That click would have sent Krambeal to a spoof Web site, Coos Bay Wells Fargo Branch Manager Debbie Williams said. After that, any personal information she might have entered the criminals would have seen, too.
“If you open up that link, they can see everything that’s in your computer,” Williams said.
Others have not been so fortunate.
Williams says complaints about phishing e-mails come in cycles. Phishing is the act in which a scammer sends fraudulent e-mails that use clever and compelling language to entice people into giving out personal information. Williams receives five or six customer complaints a month, then she won’t hear anything for a couple months. Although the bank reimburses money lost through fraud, an investigation can take a couple weeks to a month.
“We’ve had to do loans because people have gone into the hole,” Williams said.
Krambeal’s e-mail said the bank had been receiving complaints about unauthorized use of accounts and has been making extra security checks to protect customers from theft and fraud.
In other scams, phishers have sent people e-mails indicating an e-mail address has changed and the bank needs to verify a customer’s address, or maybe an account was locked and personal information is needed to unlock it. Another e-mail tells people there are insufficient funds in their accounts, so “click here to access your account.”
These e-mails are sent to a wide audience, according to Wells Fargo.
Scammers obtain the e-mails through the Internet or sometimes they buy them. Sometimes phishers guess e-mail addresses, in hopes that some of the e-mails go to actual bank customers.
When someone does enter information, the phisher takes that account number, or Social Security number, pin number, address or any other personal information, and uses it to access or transfer money from one account to another.
Williams said it’s important to remember that your bank would never ask for personal information by phone or e-mail. A customer would be notified about any account problems in messages accessed through their online bank account.
The bank Web site is protected by fire walls that don’t allow hackers in. Home computers have to have fire walls to set up online banking, too.
Williams recommends customers sign up for their bank’s online bill pay, which is protected unlike general business Web sites on which customers can pay bills.
“If you have to give out your account number and debit number, you’re giving them control,” she said.
Fraudsters use other methods, too. They approach unsuspecting people and offer them money for personal checks, Williams said. They steal mail. Once they have an account number they can print out checks with a computer program that can be purchased at a computer supply store.
“It’s scary,” Williams said.
People should only keep what they need to pay their bills in their checking accounts, Williams said. The rest should be deposited into a savings account.
Williams said she believes in customers getting to know their bankers too. She has made calls on suspicious banking transactions before, just to check and make sure everything is legitimate.
“Just about the time you think, this is Coos Bay, it’s not going to happen, it happens,” Williams said.
Don’t get scammed
Where to call: Wells Fargo customers who have provided personal information through an e-mail or suspicious Web site should call the fraud prevention hotline, (866) 867-5568, to report it.
Where to send reports: Forward suspicious e-mails and Web sites that say they’re from Wells Fargo to
reportphish@wellsfargo.com.
Embed This Article
Feel free to embed this article onto your website by copying the
code below and pasting it into your site's HTML.
The comments below are from users of theworldlink.com and do not necessarily represent the views of The World or Lee Enterprises. Participation Guidelines
Note: There is a maximum of 200 words per comment. If you wish to post more, please visit our forum.
Not already registered?
The World welcomes your comments about stories, and we encourage a robust dialogue on this site. All comments must meet reasonable standards of decency and civility.
Please follow these basic rules:
- No defamatory comments about individuals or businesses.
- No deliberately false information.
- No obscenity or racially offensive language.
- No harassment, verbal abuse, threats or personal attacks.
- No information that invades another person's privacy.
- No business solicitations or charitable solicitations.
Comments that violate these standards will not be posted. Users with repeated violations may be banned from future posting.Comments will be approved throughout the day during business hours. After hours and weekend comments may not appear until the following business day. It may take a couple of hours before comments are approved.
The World generally does not edit comments, but we reserve the right to edit any comment that does not meet our standards.
Close Guidelines