Natwest scam?

Castle_Rock

Ive recently been getting emails from someone called Paul Riley(Head of credit cards) at Natwest, I think it may be dodgy but not sure.

Each email varies slightly ie;

This is a short emailto let you know that your NatWest Credit Card Online Services security detailswas recently changed on Sunday, November 03, 2013 at 10:32:48 AM. Pleaseconfirm that this request was made by you.

Yes I made this request
No, I did not make this request.


Important
Many internet users have recently been targeted through bogus emails byfraudsters claiming to be from the bank. These emails ask customers to providetheir internet banking security details in order to reactivate their account orverify an email address. Please be on your guard against emails that requestany of your security details. If you receive an email like this you should notrespond. Please remember that, for security reasons, apart from when you createthem at registration or when you change your Internet PIN or Password, we willonly ever ask you to enter random characters from your Internet PIN andPassword when you logon to this service. We would never ask you, by email, toenter (or record) these details and we would therefore request that you do notrespond to emails asking for this information.

Disclaimer
This email was sent from a notification-only address that does not accept emailreplies. Please do not reply directly to this email.

Legal Information
This email message is confidential and for use by the addressee only. If themessage is received by anyone other than the addressee, please delete themessage from your computer. Internet emails are not necessarily secure.National Westminster Bank plc does not accept responsibility for changes madeto this message after it was sent.

Whilst all reasonable care has been taken to avoid the transmission of viruses,it is the responsibility of the recipient to ensure that the onwardtransmission, opening or use of this message and any attachments will notadversely affect its systems or data. No responsibility is accepted by NationalWestminster Bank plc in this regard and the recipient should carry out suchvirus and other checks as it considers appropriate.

National Westminster Bank plc. Registered in England and Wales (RegisteredNumber 929027)
Registered Office: 135 Bishopsgate, London EC2M 3UR.

Authorised and regulated by the Financial Services Authority.

__________________________________


Does this seem odd or legitimate?

Le73Uq86Uv

I VOTE Scam

This is a short emailto let you know that your
NatWest Credit Card Online Services security detailswas
recently changed on Sunday, November 03, 2013 at 10:32:48 AM.
Pleaseconfirm that this request was made by you.

Why dont you phone NatWest and ask them?

Blackdog

I reckon it could be a scam. Don't click on yes or no until you know. If I were you I would call Nat West and check it out.

Rollinghome

If that's a hyperlink then it's very unlikely to have come from a bank. Check the headers to see where it would actually take you. Probably on a phishing trip. No idea if Paul Riley exists or not but his name has been used before for phishing emails, see http://www.millersmiles.co.uk/email/email-alert-resolve-your-account-natwest-card-services

Castle_Rock

Rollinghome wrote: »

If that's a hyperlink then it's very unlikely to have come from a bank. Check the headers to see where it would actually take you. Probably on a phishing trip. No idea if Paul Riley exists or not but his name has been used before for phishing emails, see http://www.millersmiles.co.uk/email/email-alert-resolve-your-account-natwest-card-services

[Link Removed by Forum Team]

[Deleted User]

Castle_Rock wrote: »

[Link Removed by Forum Team]

Hmm, I'm just not sure!


Just assume everything is a scam unless it comes through the post, and if it comes through the post then phone them to confirm if it isn't something you requested

dzug1

Does it start 'Dear Castle Rock?

If so there's a chance it's legit.

Try logging on to your account normally - as if you hadn't received the e-mail. If you succeed then the message is a scam

Castle_Rock

dzug1 wrote: »

Does it start 'Dear Castle Rock?

If so there's a chance it's legit.

Try logging on to your account normally - as if you hadn't received the e-mail. If you succeed then the message is a scam

Logged on without a problem. Each email starts with Dear valued customer.

Its very odd, certain parts of the emails look very legitamte, other parts do not.

jimjames

Castle_Rock wrote: »

Its very odd, certain parts of the emails look very legitamte, other parts do not.

The art of a scammer is to make it look real. They wouldn't work if they looked obviously scams.

To anyone thinking this could or may be real. Please just delete it and get a safer email service that removes them for you.

I get dozens of these a day via Gmail for almost every bank under the sun but they all go into the spam automatically.

Banks do not send emails repeatedly with this kind of message and certainly not ones with links to sites like that.

I'd really urge anyone who uses the internet and believes these messages could be real to take steps to protect themselves from fraud and by being extremely sceptical of any message coming in via email and assume it is fake unless you can prove otherwise.

mikb

Castle_Rock wrote: »

Each email starts with Dear valued customer.

Its very odd, certain parts of the emails look very legitamte, other parts do not.

Your name is not Mr Valued Customer, is it? -- it's a scam, it doesn't address you by your actual name, they haven't bothered to scrape up enough data to get your real name.

The best example I had of one of these was

"Dear PayPal Customer"

(blah blah blah for 3 paragraphs)

"We will only address you directly by name so you know this is genuinely from PayPal"

Ummm, but you didn't? Stoopid spammers.

The bits that look legitimate are probably cobbled from a real bank's email. The links to bogus websites are certainly not.

thenudeone

It will be a scam.

It's dead easy to forge a hyperlink. See how easy it is: www.itv.com

Use your email program's option to view the plain text headers. In google mail, click "show original". Just before the text which appears as a link when you view the email, will be the real domain name and URL. They are usually domains in countries with lower law enforcement standards: .ru, .ro, .in.

You'll see something like this:
<a href="http://TRUEURL.??/?????????????&quot; target="_blank">http://www.URL_IT_LOOKS_LIKE.co.uk/???</a&gt;