Is Santander testing customers security awareness ?

MikeJXE

I have received an email from my main bank Santander 

Asking me if I wish to take part in financial health check up, plenty of links to find out more

Santander always tells us, when we contact you we will always quote your name, the last 4 digits of your account number and the last 3 digits of your post code

Not in this email they haven't so I'm wondering if this is a test to see who falls for it. 

We are not all stupid 

Edit this is a scam email 

CliveOfIndia

In all likelihood it's just an out-and-out phising email, not really from Santander at all.  Who is the email actually from (hover your cursor over the supposed sender's email address, you'll see who it's really from - I'm willing to bet it's not a genuine Santander address).

Whatever, don't go clicking on any links!

flaneurs_lobster

I had an email soon after opening a Lloyds Account

"Fraudsters may try to imitate our emails. If you receive an email that doesn't feature your name and part of your postcode, then don't click on any links it may contain - please forward it to us immediately for investigation at emailscams@lloydsbank.co.uk  then delete it."

Naturally the email did not contain any part of my postcode. I forwarded it to them as requested. I received no reply.

MikeJXE

CliveOfIndia said:

In all likelihood it's just an out-and-out phising email, not really from Santander at all.  Who is the email actually from (hover your cursor over the supposed sender's email address, you'll see who it's really from - I'm willing to bet it's not a genuine Santander address).

Whatever, don't go clicking on any links!

As I said in my post we are not all stupid and yes it could be a phishing email

CliveOfIndia

That address is 100% fake.  So, in answer to your original question, no it's not Santander testing their customers' security awareness, it's just an out-and-out scam/spam/phishing email, nothing at all to do with Santander.

CliveOfIndia

flaneurs_lobster said:

I had an email soon after opening a Lloyds Account

"Fraudsters may try to imitate our emails. If you receive an email that doesn't feature your name and part of your postcode, then don't click on any links it may contain - please forward it to us immediately for investigation at emailscams@lloydsbank.co.uk  then delete it."

Naturally the email did not contain any part of my postcode. I forwarded it to them as requested. I received no reply.

You won't receive a reply from Lloyds, they don't have the capacity to reply to every one of the 1000's of spam reports they receive.  But your email will have been sent to their security teams, who will take whatever action they deem appropriate.  So it's not a wasted effort to forward it on to them

MikeJXE

CliveOfIndia said:

That address is 100% fake.  So, in answer to your original question, no it's not Santander testing their customers' security awareness, it's just an out-and-out scam/spam/phishing email, nothing at all to do with Santander.

Yes I checked it myself and have reported it to report@phishing.gov.uk

eskbanker

CliveOfIndia said:

That address is 100% fake.  So, in answer to your original question, no it's not Santander testing their customers' security awareness, it's just an out-and-out scam/spam/phishing email, nothing at all to do with Santander.

If you're referring to santander@email2.yoursantander.co.uk, that's not fake, in that I've received plenty of legitimate Santander emails from that, all with customer name and partial postcode....

https://forums.moneysavingexpert.com/discussion/6291652/can-i-safely-block-santander-email2-yoursantander-co-uk-or-is-it-ever-used-for-something-important

SiliconChip

MikeJXE said:

Santander always tells us, when we contact you we will always quote your name, the last 4 digits of your account number and the last 3 digits of your post code

Not in this email they haven't so I'm wondering if this is a test to see who falls for it. 

You're wrong about this. What Santander actually say is

So you know that an email is genuinely from us, we'll:

address it to you personally

include the last 4 digits of your account or card number, or the last 3 characters of your postcode

Note the key word in the second point, "or", they don't include both the last 4 digits and the last 3 of the postcode, it's one or the other. My email includes the last 3 of the postcode.

As @eskbanker has said, it is a genuine email and it follows all of the precautions that Santander advise.

MikeJXE

eskbanker said:

CliveOfIndia said:

That address is 100% fake.  So, in answer to your original question, no it's not Santander testing their customers' security awareness, it's just an out-and-out scam/spam/phishing email, nothing at all to do with Santander.

If you're referring to santander@email2.yoursantander.co.uk, that's not fake, in that I've received plenty of legitimate Santander emails from that, all with customer name and partial postcode....

https://forums.moneysavingexpert.com/discussion/6291652/can-i-safely-block-santander-email2-yoursantander-co-uk-or-is-it-ever-used-for-something-important

Mine usually come from donotreply@communications.santander.co.uk

Rob5342

CliveOfIndia said:

flaneurs_lobster said:

I had an email soon after opening a Lloyds Account

"Fraudsters may try to imitate our emails. If you receive an email that doesn't feature your name and part of your postcode, then don't click on any links it may contain - please forward it to us immediately for investigation at emailscams@lloydsbank.co.uk  then delete it."

Naturally the email did not contain any part of my postcode. I forwarded it to them as requested. I received no reply.

You won't receive a reply from Lloyds, they don't have the capacity to reply to every one of the 1000's of spam reports they receive.  But your email will have been sent to their security teams, who will take whatever action they deem appropriate.  So it's not a wasted effort to forward it on to them

They obviously can't reply personally to every one, but I'd expect an automatic response to acknowledge the report.