Victims are tricked into handing over tons of sensitive information

Apr 17, 2013 21:01 GMT  ·  By

In a phishing scheme that has been doing the rounds since last month, cybercriminals have spoofed the security guidance page of a poplar credit card services company in an attempt to trick users into handing over their personal and financial information.

Symantec reports that users are led to believe that their details are needed in order to activate their payment card and enhance its security.

Victims are requested to hand over tons of information, including their names, address, date of birth, card type, cardholder name, card number, expiration date, social security number, password, 3D password, ATM PIN, payment service email address and payment service password.

Once the information is submitted, victims are presented with this message: “Congratulations! Your card is fully securised now and ready to be used safely.”

Remember that financial institutions will never ask you to hand over passwords, PINs or other sensitive information. Whenever entering your personal data on a website, make sure it’s protected by a secure https connection. If it’s not, it’s likely part of a scam.

If you’re a victim of this scam, be sure to contact your credit card issuer immediately. Also, change all your online account passwords.