Skip to content

Beware: Phishing Email Targets Chase Customers

Aug. 17, 2018
2 min read
laptop email chase phishing
Beware: Phishing Email Targets Chase Customers
The cards we feature here are from partners who compensate us when you are approved through our site, and this may impact how or where these products appear. We don’t cover all available credit cards, but our analysis, reviews, and opinions are entirely from our editorial team. Terms apply to the offers listed on this page. Please view our advertising policy and product review methodology for more information.

It's one of the oldest tricks in the book — scammers send a generic email to thousands or millions of email accounts, prompting the recipient to click a link and "log in" with their account credentials. Rather than granting access to the site as expected, usernames and passwords are transmitted directly to the scammers, who can in turn use that information to access your account.

This week, a new email is making the rounds. TPG Lounge member Hannah Goh shared a message she received that appeared to be from Chase. While a close examination of the email text makes it clear that it's not authentic, it's easy enough to skim the message, click the link and accidentally hand over your banking credentials.

The email text begins:

"Dear Chase Customer: Just to let you know that we noticed unusual activities on your Account during our regular update today. It is either your details have been changed or incomplete..."

It goes on to prompt the recipient to "verify your details to regain access to credit or debit card." If you click the link and enter your credentials, they'll be instantly transmitted to the bad guys. No bueno.

As Hannah suggests in her post, you should forward any such messages to a dedicated address at your bank. I've rounded up some key contacts below:

  • Amex: spoof@americanexpress.com
  • Bank of America: abuse@bankofamerica.com
  • Capital One: abuse@capitalone.com
  • Chase: abuse@chase.com
  • Citi: spoof@citicorp.com
Daily Newsletter
Reward your inbox with the TPG Daily newsletter
Join over 700,000 readers for breaking news, in-depth guides and exclusive deals from TPG’s experts

You should also forward the message to the Federal Trade Commission (FTC) spam address at spam@uce.gov, and consider sharing it in the TPG Lounge, giving your fellow points and miles enthusiasts a heads up.

If you do click a link and unintentionally transmit your credentials, be sure to change your password immediately — for that account and anywhere else you use those details online, since criminals can use your username and password to access other websites, too. This also serves as a good reminder to ensure that two-factor authentication is turned on, and to review and follow our 6 Tips for Keeping Your Credit Card Safe Online.

Featured image by Photo by rawpixel on Unsplash