Banking Phishing Emails - Who to forward to.

antispam246

I've been meaning to do this for awhile. If like me and alot of other people you get inundated with fake e-mails from various banking institutions, savings, investments etc.. this is (will be) a complete list of official phishing addresses to forward those e-mails to. What I would suggest you do is, add all these e-mail addresses to your e-mail account address book so you can easily forward each junk/spam/phishing e-mail you receive to the appropriate persons.

Usually I'd just be emptying my junk folder of these everyday, but the more I kept getting the more annoyed I felt so I started forwarding them appropriately, whether it actually achieves anything in the long run or not, I atleast felt like I was contributing to hitting back.

If I've missed anything, feel free to add or perhaps even request.
Remember to never click through to any links or open attachments of any e-mail you suspect is fraudulent or suspicious, just forward it to the appropriate address and let them deal with it. Opening the e-mail to view it/read it won't do any harm, just don't go any further.

In no particular order (can always use ctrl-f to search)

Paypal - spoof@paypal.com
Santander - phishing@santander.co.uk
Barclays - internetsecurity@barclays.co.uk
Halifax - security@halifax.co.uk
eBay - spoof@ebay.co.uk
Lloyds - [EMAIL="emailscams@lloydstsb.co.uk"]emailscams@lloydstsb.co.uk[/EMAIL]
RBS - [EMAIL="phishing@rbs.co.uk"]phishing@rbs.co.uk[/EMAIL]
Capital One - [EMAIL="abuse@capitalone.com"]abuse@capitalone.com[/EMAIL]
ING - [EMAIL="phishing@us.ing.com"]phishing@us.ing.com[/EMAIL]
Natwest - [EMAIL="phishing@natwest.com"]phishing@natwest.com[/EMAIL]
The Co-Operative - ihaveseenascam@co-operativebank.co.uk
Tesco Finance - phishing@tescobank.com
HSBC / First Direct - phishing@hsbc.com
Egg - [FONT=Arial, Helvetica, sans-serif]spoof@egg.com
Smile - [/FONT][EMAIL="ive_seen_a_scam@smile.co.uk"]ive_seen_a_scam@smile.co.uk[/EMAIL]
Nationwide - phishing@nationwide.co.uk
Virgin Money - [EMAIL="info@virginmoney.com"]info@virginmoney.com[/EMAIL]
Clydesdale - reportphishing-cb@cbonline.co.uk
Neteller - phishing@neteller.com
M & S Money - money@mandsmoney.com
Sainsbury Finance - [EMAIL="onlineinvestigations@sainsburysbank.co.uk"]onlineinvestigations@sainsburysbank.co.uk[/EMAIL]



Visa - [EMAIL="phishing@visa.com"]phishing@visa.com[/EMAIL]

[EMAIL="phishing@visa.com"][/EMAIL]
HMRC - [EMAIL="phishing@hmrc.gsi.gov.uk"]phishing@hmrc.gsi.gov.uk[/EMAIL]


If an industry is not listed above or as an alternative to all you can also forward any suspicious financial emails to reports@banksafeonline.org.uk
This is "Bank Safe Online" which covers the majority of online banks and strives to adequately follow up and shutdown those responsible for phishing emails. You can find out more here
http://www.banksafeonline.org.uk/index.html

Reporting to banksafeonline will cover all financial institutions, including the above and the unmentioned such as
Cahoot

Another large organization that deals with phishing and covers a huge variety of organizations is http://www.antiphishing.org/index.html
You can report phishing emails to [EMAIL="reportphishing@antiphishing.org"]reportphishing@antiphishing.org[/EMAIL]
This website contains alot of useful information.

Others:
Amazon - stop-spoofing@amazon.com

Metropolitan Police (Info on Fraud/links/what to do) - http://www.met.police.uk/fraudalert/identity_fraud.htm

thenudeone

Also - copy anything to phishing@cityoflondon.police.uk, although I have no idea if they have the resources to do anything about them

antispam246

Once you've added them all to your address book in your e-mail account you can simple forward to multiple addresses, better chance it's going to be dealt with appropriately.

Biggles

I'm pretty sure it achieves nothing and find it simpler to delete immediately. I don't imagine the banks concerned have the resources to take action even if there were any they could take.

A year or two ago, we were requested to forward all suspect fraud emails to ActionFraud but one day they replied and said they couldn't be bothered either. That says it all.

glider3560

Unless you send the full headers (which you won't by clicking Forward), you aren't actually achieving anything by forwarding these. Even with the headers, they probably won't be able to do anything as these can be amended/spoofed/proxied anyway.

antispam246

Understood, like I said myself, however there's more to it than that. If anything, not everyone is tech savy or eagle eyed to spot a fake from a real, if your not sure, forward it, you'll find out for sure. The e-mail addresses aren't just for phishing, if you suspect, or are worried, about anything related to anything sent, be it, e-mail, postal or other or worst case scenario, you're a victim of fraud due to phishing or the many other alternative methods then the links and addresses can atleast serve the purpose of helping you know where to go and what to do.

thenudeone

Even without the email headers, the banks' fraud departments can see the URL which users are being directed to.

I don't think they're particularly interested to find out exactly which spammer sent the email. All they want is for the fake site to be shut down, which they can start doing (as best they can) as soon as they know the URL.

Biggles

antispam246 wrote: »

If anything, not everyone is tech savy or eagle eyed to spot a fake from a real, if your not sure, forward it, you'll find out for sure.

How will you find out? Your email will just be ignored or, at best, filed. I think it highly unlikely that any bank wil send anything more than an autoresponse in reply.

antispam246

Biggles wrote: »

How will you find out? Your email will just be ignored or, at best, filed. I think it highly unlikely that any bank wil send anything more than an autoresponse in reply.

Didn't want to spell out the the obvious but other than simply forwarding, you ask. I've done it with a few mails I wasn't 100% sure of and got a response that wasn't automated.

Zebrdee

I tried to report a banking spoof but the email bounced. It worked before.

This message was created automatically by mail delivery software. A message that you sent could not be delivered to one or more of its recipients. This is a permanent error. The following address(es) failed: reports@banksafeonline.org.uk

Plxply

It's probably best to report to these two places:

http://www.google.com/safebrowsing/report_phish/
https://www.phishtank.com/

The first gets the link blocked in Firefox and Chrome plus it will mean any email that links to it will be flagged as phishing within Gmail and any Google results will show a warning. The second is a service dedicated to analysing phishing emails and will get it blocked across the OpenDNS network.

If you're using Internet Explorer you can also create a report from inside the browser:
http://support.microsoft.com/kb/930167