14 DAY TRIAL // A few weeks ago, a phishing scam designed to trick Tesco customers into handing over their personal and financial details started making the rounds. According to reports, the campaign is still going strong.
Potential victims receive emails in which they’re informed that they can get paid for taking part in a Tesco customer satisfaction survey.
“You have been selected to access the Tesco Customer Satisfaction Survey and win a 60£ credit to your account. In order to access this Customer Satisfaction Survey please download the form attached to this email and open it in a web browser. Once opened, you will be provided with steps to claim your prize,” the bogus emails read.
The attachment is actually a form that instructs users to answer five questions and provide various pieces of information, including name, contact information, credit card number, expiration data, CVV and date of birth.
The submitted information is stored on a server owned by the crooks. They can use it for various malicious purposes, including identity theft and illegal transactions on the victim’s bank account.
Tesco is not the only retailer whose name is abused in such scams. In the summer of 2012, a similar scheme was leveraging the name of Woolworths to target Australian users.