new scams on current accounts and credit cards

Unicredit, BNL and Sanpaolo These are the most common banking channels in Italy and for this reason, they are targeted by the cybercriminals they implement. new scams. They launch intimidating messages here and there and perfecting the attacks can cause the user to fall into a trap. We must be very careful because sometimes it is easy to understand that it is a bait but sometimes the hook is well hidden in the phishing email it seems threatening and official.

Scams on Unicredit, BNL and Sanpaolo accounts

The latest episode of fraudulent scams dates back to a few days and directly concerned the personal accounts of Sanpaolo users. On this occasion, it was the postal police which raised the alarm concerning the new extortion attempts. Cybercriminals always use the same methods: phishing – pharming – smishing. A dangerous combination.

In most cases, it's easy to understand that this is a false message. Syntax and punctuation point to serious language gaps due to rough translation. These are foreign hackers ready for everyone to get us into the network of scams.

In any case – valid for e-mails and SMS – you receive a formal and peremptory communication inviting you to consult a Suspicious URL with false link. The topics chosen to complete the application form are always the same:

• incorrect user data
• need to change the access code
• suspension of the card for non payment of the annual subscription
• correction of data and map details for IBAN exchange
• account lockout and withdrawals for justified reasons

Online scams for bank accounts: methods and actions of defense

This may seem correct. the the Pirates copy the official websites of the institutions and reproduce the marks and right of author by inserting them in the text of the email. A quick look at the sender and you understand that you are in the presence of a scammer. We can also copy the site URL and perform a search on the domain registration via the WhoIS service. Here are all the contact information, the certificate holder and the servers used.

If all this is not enough, know that in any case, it is forbidden for individual companies to:

• request data by e-mail
• communicate declaration Officials by SMS or other non-certified means
• propose a form with mandatory compilation

What we need to do is:

• ask our bank for information
• report the incident by presenting a proof of the message
• delete the email or the fraudulent SMS without transferring it to other contacts