How to spot phishing

HSBC BM
Financial education
How to spot phishing

Criminals often use fake emails and fake websites to trick people into giving away their passwords and bank details. The technical word for this is 'phishing'.

Many of these criminals are very good at making their emails and websites look realistic. But you can often spot the fake ones with some careful examination.

View transcript This link will open in a new window

Warning signs to watch out for

Disguised or modified links

Fraudsters will often try to create a URL that looks like the real thing, but if you examine it more carefully you may see signs that something is not right.

For example, 'H5BC.bm' – this URL has been set up to look like it says HSBC.bm, but the number 5 in place of the letter 'S' is a clear sign that the website is a fake.

If the link is contained in a word or phrase, such as 'visit our website' - you can hover over the link with your mouse to see the URL without clicking.

Bad grammar and typos

Poorly written sentences, bad grammar, and misspelled words often indicate a phishing scam.

Requests for personal information

You should be very wary of messages that ask you to share your personal information over the phone, through email or over an instant messaging service. If you are ever unsure, simply end the conversation and get back in touch with us through one of our official channels. If the person who contacted you is a real employee, they will not be offended by this.

Urgency and account threat

Another common trick used by fraudsters is trying to frighten you into giving away your details. They may do this by warning you that your account has already been hacked, or threaten to lock you out of your account unless you verify your details.

Again, if you are unsure whether a warning is real, simply end the conversation and get back in touch on one of our official channels.

Logos or signatures

Don't assume an email is legitimate because it includes official looking graphics. Many fraudsters steal or copy the logos of legitimate companies. Read everything carefully, and don't respond to an email or letter if you’re unsure.

Email Challenge 1: Spot the signs of fraud

Fraudsters often send emails to people to trick them into sharing access to their bank accounts or sending money. It’s sometimes hard to tell the difference, but there are some common clues.

Can you spot the four warning signs in this email?

From: The Bank

To:

Dear customer

We have detected a slight error in your account information, we notice an attempt to use your Visa debit card for online shopping from two different devices (a PC, a Laptop, a Tablet or a Mobile)

As part of our commitment to help keep your account secure we have detected an irregular activity on your account and we are placing a lock on your account for your protection. please follow the reference below to un-lock your account,

http://www.thebank.com.default.aspz.refirident=545CBA49

we are here to assist you anytime. Your account security is our priority. Thank you for choosing the bank.

Warning #1 'Dear customer': Your bank will know your name and include it when they write to you with a personal offer or alert.

Warning #2 From: The Bank. Hover over this section to reveal the sender's actual email address. If this looks suspicious, it may be a fraudster.

Warning #3 Poor grammar and spelling mistakes. This email contains numerous typos, inconsistent grammar and it is repetitive and hard to understand. This is often a sign that something isn't right.

Warning #4 Suspicious looking web link. This one is very long and looks unusual. Don't click on any web links that you don’t recognise

Email Challenge 2: Spot the signs of fraud

Sometimes emails can sound very official to make you think that they are legitimate. But the signs are still there - can you spot them?

From: The Bank Security Team

To:

Voice ID

Thank you for registering your voice ID over the phone. Your Voice ID has been successfully registered into our banking system.

As part of these procedures we will be implementing our two-step authentication feature this will prevent unauthorised access to your account.

If you did not make these changes kindly visit the URL below to secure your account

Get Started

Please note: failure to comply with this request can lead to temporary suspension of access to our online banking service.

Best regards

The bank customer support team

Warning #1: Selecting the link could be a risk - for example it could direct you to a fraudulent web site or allow access for a fraudster to information held on your computer. Hover over the link to see where it goes before you click.

Warning #2: Poor quality of the message with different font sizes should raise suspicions

Warning #3: No customer name included again

Warning #4: Have you registered for voice ID? The person who received this email had not. Always think about if the purpose of the message makes sense to you

SMS Challenge: Spotting a fraudulent text

What about text messages, can you spot the signs that this is a fraudulent SMS?

Message from: The bank

The bank has noticed your debit card was recently used on 18-07-2020 15.59.03 at APPLE ONLINE STORE for $359. If not you please urgently call fraud prevention on 033333440547. Do not reply by SMS.

It's even harder to tell if a text message is real or attempted fraud. Stop and think. Do you remember buying what’s described? Has the mentioned amount actually been charged to your account?

Don't call the number in the text message. This type of fraud is growing quickly. If you are unsure, call the bank’s usual phone number (such as the number on the back of your card) not the number in the message.

Final Check

Put your security skills to the test with these quick-fire questions:

1. A friend at school asked you to tell them your pin number. Do you give it to them?

A. Yes

B. No

2. You see a social media message offering to pay you for keeping some money safe for somebody in your account. Do you accept?

A. Yes

B. No

3. You receive a social media friend request from somebody you don’t recognise. Do you accept?

A. Yes

B. No

B. No, this may leave you open to criminals seeing personal information about you which they can use to access your accounts.

4. You receive a social media request (WhatsApp, Facebook, Instagram, Snapchat) from a friend asking for money. Should you send it?

A. Yes

B. No

B. It may not be your friend - their account may have been hacked. Check with them in person before even considering sharing money.

5. Someone tries to distract you when you are using an ATM machine. Do you turn around?

A. Yes

B. No

B. Make sure you keep your PIN covered or if you feel uncomfortable then simply remove your card and move away from the ATM. There are ATMs inside our bank branches which may be safer for you to use.

6. You have lost your bank card. What do you do next?

A. Nothing

B. Report it to the bank as soon as possible

B. To report a lost or stolen credit or debit card, you can contact the bank on +1 441 299 5518.

Warning signs to watch out for

Disguised or modified links

Bad grammar and typos

Requests for personal information

Urgency and account threat

Logos or signatures

Email Challenge 1: Spot the signs of fraud

Answers

Email Challenge 2: Spot the signs of fraud

Answers

SMS Challenge: Spotting a fraudulent text

Answers

Final Check

Put your security skills to the test with these quick-fire questions:

1. A friend at school asked you to tell them your pin number. Do you give it to them?

Answer

2. You see a social media message offering to pay you for keeping some money safe for somebody in your account. Do you accept?

Answer

3. You receive a social media friend request from somebody you don’t recognise. Do you accept?

Answer

4. You receive a social media request (WhatsApp, Facebook, Instagram, Snapchat) from a friend asking for money. Should you send it?

Answer

5. Someone tries to distract you when you are using an ATM machine. Do you turn around?

Answer

6. You have lost your bank card. What do you do next?

Answer

You might also be interested in

Mobile banking

Managing your money online

Connect with us