Natwest Email Question

Angelic

Hi ,

I've banked online for a couple of years now and Natwest NEVER sent emails until last December when I started receiving emails from [EMAIL="OnlineBanking@Information.natwest.com"]OnlineBanking@Information.natwest.com[/EMAIL]. I thought it looked dodgy so googled a bit and found out it was a phishing scam , I now receive the same "Your statement is ready to view" email monthly and click "phishing scam" button.

Anyway , today I checked my email account and found an email from Natwest stating it was from [EMAIL="NatWest@i.natwest.com"]NatWest[/EMAIL][EMAIL="NatWest@i.natwest.com"]@i.natwest.com[/EMAIL] and that my Terms were changing. It's the first time i've ever recived an email from that add so i'd like to know other people's opinions on whether it's genuine or not

natweststaffmember

Angelic wrote: »

Hi ,

I've banked online for a couple of years now and Natwest NEVER sent emails until last December when I started receiving emails from [EMAIL="OnlineBanking@Information.natwest.com"]OnlineBanking@Information.natwest.com[/EMAIL]. I thought it looked dodgy so googled a bit and found out it was a phishing scam , I now receive the same "Your statement is ready to view" email monthly and click "phishing scam" button.

Anyway , today I checked my email account and found an email from Natwest stating it was from [EMAIL="NatWest@i.natwest.com"]NatWest[/EMAIL][EMAIL="NatWest@i.natwest.com"]@i.natwest.com[/EMAIL] and that my Terms were changing. It's the first time i've ever recived an email from that add so i'd like to know other people's opinions on whether it's genuine or not

Does it say "do not reply to this email"? Don't and report it by sending it to phishing@natwest.com and the bank will deal with it.

Kavanne

I am pretty sure the Bank are now sending T&C change notification by email to people who have paperless statements.

Angelic

natweststaffmember wrote: »

Does it say "do not reply to this email"? Don't and report it by sending it to [EMAIL="phishing@natwest.com"]phishing@natwest.com[/EMAIL] and the bank will deal with it.

I was told not to forward emails from my inbox to Natwest as it means opening the emails.
Today's email looks genuine as it even has part of my postcode and real name , something the phishing emails don't have.

It ios a very long email listing the changes to my account but says at the side- "If you wish to read this information in PDF format please type the following address natwest.com/t&cchange into your internet browser "

I should still be receiving paper statements unless the fools have changed without informing me! Looks like i'll have to call them

davethorp

I've had these e-mails about the statement being ready to view and they contain absolutely no links and have the last 3 digits of the account number they are concerning.

Seem pretty genuine to me and given it has no links to take me to a dodgy site to enter my details, if it is a phishing scam then its not a very good one. The e-mail it is from and replies to is a natwest.com domain (information.natwest.com is a subdomain of natwest.com in the same way that forums.moneysavingexpert.com is a subdomain of moneysavingexpert.com)

bev309

The 'your statement is ready to view' emails are genuine. You get them if you have opted out of receiving paper statements, & are just sent to let you know that the latest statement is available to view/download online.

bev309

Kavanne wrote: »

I am pretty sure the Bank are now sending T&C change notification by email to people who have paperless statements.

I don't receive paper statements, but get t&c changes through the post - they always send a booklet.

Angelic

bev309 wrote: »

The 'your statement is ready to view' emails are genuine. You get them if you have opted out of receiving paper statements, & are just sent to let you know that the latest statement is available to view/download online.

They aren't genuine so please don't fall for it. I've checked and the name is flagged up on so many sites it's silly. This thread isnt about the view your statememnts emails as knew they were a scam but today's email looked genuine and was just a long , boring list of changes.

I haven't opted out of receiving paper statements and never would

Kavanne

bev309 wrote: »

I don't receive paper statements, but get t&c changes through the post - they always send a booklet.

I believe this change has only come in for the newest t&c change and it may only be a pilot so might not apply to all customers

jamesd

Angelic, your statement is ready to view emails are both legitimate and scams. Sent by the bank and also sent by scammers. The main difference will be the inclusion of private details (like part of account number, address or your name) in a genuine one and if they are sensible, no use of links but instead addresses to type so you can be sure you go to the real NatWest site. Something like http://anythingornothing.natwest.com/ is going to be a genuine NatWest page because it's controlled by NatWest and not available for scammers to use.

Scammers don't know your personal details so they can't so easily include name or account number or address details. They can't use genuine natwest.com addresses so they use things like natwest.customer.134.net (which goes to 123.net, not under NatWest control) and hide this with links that pretend it goes to natwest.com.

The From address in an email is easy to forge and means nothing. You shouldn't use it as any sort of indication that an email is genuine.

NatWest terms and conditions are changing and I received postal notification of that a few days ago.

So your latest email:

"Today's email looks genuine as it even has part of my postcode and real name , something the phishing emails don't have."

Very likely to be genuine because the postcode wouldn't be known to scammers. A real first name or real last name might be tried but getting both or a middle initial right is harder. Getting account numbers or parts of them right is quite hard for a scammer. Correct part of name and part of postcode almost certainly means that an email is genuine.

"If you wish to read this information in PDF format please type the following address natwest.com/t&cchange into your internet browser "

Only NatWest (and it's RBS parent) control content at natwest.com/t&cchange so if you type that into your browser you can be sure it's really at NatWest's own web site.

Your latest email has several key indications of being genuine: personal details not knowable to scammers and use of the real NatWest web site that scammers can't control. It's almost certainly legitimate.

If you want to be more secure when looking at emails, tell your email program to show you only the text view of the email, not HTML view. You lose the pretty pictures and most of the tools that scammers can use to trick you, like hidden real web addresses.

Angelic

jamesd wrote: »

If you want to be more secure when looking at emails, tell your email program to show you only the text view of the email, not HTML view. You lose the pretty pictures and most of the tools that scammers can use to trick you, like hidden real web addresses.

Thanks James! You deserve some cake for such a detailed and helpful post:money:

My surname isn't common so there's not much chance of just guessing right. I was worried when I received the first phishing email in Dec as the last 3 digits of my account were used but someone told me they were in the public domain. My emails don't show links and pics unless I know the sender.
I think the new email IS genuine and that Natwest have stopped my paper statements without telling me:mad:

I use big name sites when shopping online but only started receiving such emails a month after buying something from an Amazon seller. Probably a coincidence but still..