Standard Bank account restricted phishing email scam.

Standard Bank account restricted phishing email scam.

Standard Bank account-restricted phishing email is an easy-to-spot scam that attempts to force you into an emotional fear-based response by clicking on the Confirm Now button which will take you to the cloned website. The scammers behind this Standard Bank account restricted phishing email are trying to get access to your sensitive information such as Banking login details, bank card details, passwords or financial details.

While the email html looks like a genuine Standard Bank email, the first red flag is the use of a non Standard Bank Email address and, moreover no Client ID. Banks always use your Client ID, Hello Customer or Dear Customer indicates the scammers don’t have your Client ID and the email is not from your bank. Note the scammers try to force you into a fear-based emotional response by clicking on the Confirm Now button by using phrases: temporarily restricted access to your account, card has been used unauthorized, and someone using your card without your permission, Click the button below to open a secure browser window and follow the steps to protect your card from fraud and failure to submit the required information may result in limitations being placed on your card. All statements in the email are designed so that you panic and click the Confirm Now button without thinking.

Checking the URL.

HTML button, Confirm Now, masks phishing URL which is disguised as a shortener URL, Standard Bank does not embed URL links, especially URL shorteners in email communications with clients. Phishing scammers use shortened URLs in emails to conceal the true destination of a link. If you want to check the link, it is hidden in the URL Shortener however there are services where you can check the shortened URLs final destination. The shortened URL will lead to a website that looks like Standard Bank where you will login in with your banking credentials and possibly even have to confirm your card details as part of the login process. The phisher will use this information to gain access to your account, and your money, or steal your identity.

Checking the Shortened URL.

Treat all emails with Zero Trust especially Shortened URLs in emails. To check a legitimacy of an URL, you use the mouse to hover over the HTML button, in this case, Confirm Now, to check the URL destination, however to check the end destination of shortener URLs you will need to use a service like https://www.virustotal.com/gui/home/upload and https://www.urlvoid.com/

What to look for in a Standard Bank phishing email:

Banks will address you by your name or client ID.
The email address field will be your email address and not simply you.
View all emails in plain text to view URLs masked by the HTML.
Logos are not correctly aligned/out of shape.
Standard Bank emails do not include links.
Standard Bank does send .html attachments that direct you to a login page.

Standard Bank: Please be aware that there is currently an email scam targeting Standard Bank clients. If you receive an email advising you to update your bank card details, DO NOT click on the link and please delete the email immediately. Remember we will never send you an email with a link asking you to update your card number, online banking profile, or your banking details. Please report suspicious activity to our Fraud Line on 0800 222 050 or report fraud on: reportfraud@standardbank.co.za

Spotting a fake Standard Bank email: https://www.standardbank.co.za/southafrica/personal/products-and-services/security-centre/bank-safely/latest-scams