Yet Another To Forward... (Phishing)
Yes, another e-post purporting to be from a genuine organisation, the Bank of Santander..
A good couple of full-size screenfuls of waffle, full of links, official-looking addresses, security warnings, etc.
Give-way 1) I have no account nor any other dealings, certainly not directly, with that bank.
Give-away 2)
The FCA is real. It is the UK Government's supervisor of financial brokers such as lenders, insurers, etc. I am not sure if it covers banks. The name "Prudential" is real: a leading insurance and pensions company; but, "Prudential Regulation Authority"....? Also, an insurance company would anyway deal with its customers under its own name.
Give-away 3) The sending address and domain looked odd,
The 'View Source. tool revealed no secondary address hiding behind the displayed one, as sometimes happens. It also gave no warning of the post itself containing malevolent files, but I would not expect it to. You receive those if you respond to the links.
Action1): Forward it to my real bank's phishing-investigation office.
Action 2): Block both the sender and domain.
Action 3): Mark as 'spam', and delete.
A good couple of full-size screenfuls of waffle, full of links, official-looking addresses, security warnings, etc.
Give-way 1) I have no account nor any other dealings, certainly not directly, with that bank.
Give-away 2)
Authorised by the Prudential Regulation Authority and regulated by the Financial Conduct Authority and the Prudential Regulation Authority.
The FCA is real. It is the UK Government's supervisor of financial brokers such as lenders, insurers, etc. I am not sure if it covers banks. The name "Prudential" is real: a leading insurance and pensions company; but, "Prudential Regulation Authority"....? Also, an insurance company would anyway deal with its customers under its own name.
Give-away 3) The sending address and domain looked odd,
The 'View Source. tool revealed no secondary address hiding behind the displayed one, as sometimes happens. It also gave no warning of the post itself containing malevolent files, but I would not expect it to. You receive those if you respond to the links.
Action1): Forward it to my real bank's phishing-investigation office.
Action 2): Block both the sender and domain.
Action 3): Mark as 'spam', and delete.
