A new fake email is circulating, purporting to be a notification from NAB advising the recipient that their account “is now locked.”
MailGuard says the message contains several typical elements of a phishing email:Use of a major brand name to inspire false trust; the “from” field shows “N.A.B.” as the sender
- False urgency; telling the receiver their account is locked is designed to create a sense of anxiety,
- And the subject line; “protection against fraud” is meant to reassure the victim.
“Although it claims to be a bank notification, this is not an exceptionally well-made phishing email; it displays several errors in the text formatting and sentence construction,” MailGuard notes.
The company also observes that the links in the email direct the victim to a fake bank login page, and unlike the email message, the phishing page is actually “well designed and gives a superficial impression of authenticity”.
“If the phishing victim is unwary enough to enter their ID and password, they will be moved along to this page, which harvests their credit card details,” MailGuard warns.
“With this much detailed information about their victim, it would be relatively easy for the criminals conducting this attack to fraudulently exploit their credit card.”
On their website NAB advises its customers: "If you have received a suspicious email or text message and have responded to it, please call 13 22 65 or contact your local branch immediately."