Beware: Phishing Email Targets Chase Customers
It's one of the oldest tricks in the book — scammers send a generic email to thousands or millions of email accounts, prompting the recipient to click a link and "log in" with their account credentials. Rather than granting access to the site as expected, usernames and passwords are transmitted directly to the scammers, who can in turn use that information to access your account.
This week, a new email is making the rounds. TPG Lounge member Hannah Goh shared a message she received that appeared to be from Chase. While a close examination of the email text makes it clear that it's not authentic, it's easy enough to skim the message, click the link and accidentally hand over your banking credentials.
The email text begins:
"Dear Chase Customer: Just to let you know that we noticed unusual activities on your Account during our regular update today. It is either your details have been changed or incomplete..."
It goes on to prompt the recipient to "verify your details to regain access to credit or debit card." If you click the link and enter your credentials, they'll be instantly transmitted to the bad guys. No bueno.
As Hannah suggests in her post, you should forward any such messages to a dedicated address at your bank. I've rounded up some key contacts below:
- Amex: email@example.com
- Bank of America: firstname.lastname@example.org
- Capital One: email@example.com
- Chase: firstname.lastname@example.org
- Citi: email@example.com
You should also forward the message to the Federal Trade Commission (FTC) spam address at firstname.lastname@example.org, and consider sharing it in the TPG Lounge, giving your fellow points and miles enthusiasts a heads up.
If you do click a link and unintentionally transmit your credentials, be sure to change your password immediately — for that account and anywhere else you use those details online, since criminals can use your username and password to access other websites, too. This also serves as a good reminder to ensure that two-factor authentication is turned on, and to review and follow our 6 Tips for Keeping Your Credit Card Safe Online.