Users should never trust websites that request ATM PINs

Apr 12, 2012 11:09 GMT  ·  By

A malicious email warns HSBC customers that their account is suspended because someone entered the “Internet Banking Password” incorrectly three times.

According to Hoax Slayer, this is what the fake notification looks like:

Dear [email address], Your Internet Banking Password was entered incorrectly 3 times. For the protection of your account we have suspended access to it. To restore access please Log on correctly.

Previous notifications have been sent.

Thank you for choosing Uk HSBC Plc . Copyright HSBC Plc. 2012. All rights reserved.

Once the Log on link is clicked, the victim is redirected to a shady website that replicates the legitimate one of HSBC, requesting information such as user ID, birth date, security number, name, sort code, account number and even ATM PIN.

What the user doesn’t know is that every piece of information he/she provides is actually stored in a database controlled by the cybercriminals that run the operation.

Internauts, especially HSBC customers, are advised to be on the lookout for these types of scams and refrain from providing information to sites that request sensitive data.

Note. My Twitter account has been erroneously suspended. While this is sorted out, you can contact me via my author profile or follow me at @EduardKovacs1