Impressive E-mail Scam I Just Received

[garett]

We all get a million of these a day .. but this particular scam really impressed me.

Usually when you get a scam you can smell it a mile away .. the english is poor, the wording is unprofessional etc. But I bet this one fools a lot of people:

Dear Suntrust Bank customer,

We recently reviewed your account, and suspect that your Suntrust Internet Banking account may have been accessed by an unauthorized third party. Protecting the security of your account and of the Suntrust network is our primary concern. Therefore, as a preventative measure, we have temporarily limited access to sensitive account features.

To restore your account access, please take the following steps to ensure that your account has not been compromised:

1. Login to your Suntrust Internet Banking account. In case you are not enrolled for Internet Banking, you will have to use your Social Security Number as both your Personal ID and Password and fill in all the required information, including your name and your account number.

2. Review your recent account history for any unauthorized withdrawals or deposits, and check your account profile to make sure not changes have been made. If any unauthorized activity has taken place on your account, report this to Suntrust Bank staff immediately.

To get started, please click the link below:

https://internetbanking.suntrust.com/default.asp

We apologize for any inconvenience this may cause, and appreciate your assistance in helping us maintain the integrity of the entire Suntrust system. Thank you for your prompt attention to this matter.



Sincerely,

The Suntrust Bank Team

Please do not reply to this e-mail. Mail sent to this address cannot be answered. For assistance, log in to your Suntrust account and choose the "Help" link in the header of any page.

Even their page looks real and professional. Only thing is .. I don't remember being a customer of Suntrust Banking....

Headers:

Return-Path: <[email protected]>
X-Original-To: *******
Delivered-To: *******
Received: from excitingdating.com (unknown [65.39.147.57])
by ****** (Postfix) with SMTP id 199385C68F6
for <*********>; Mon, 30 Aug 2004 12:10:55 -0400 (EDT)
Received: (qmail 69743 invoked by uid 65534); 30 Aug 2004 15:24:46 -0000
Date: 30 Aug 2004 15:24:46 -0000
Message-ID: <[email protected]>
Content-Type: text/html; charset=windows-1252
Subject: Notification of Suntrust Internet Banking Unauthorized Account
To: ********
From: Administrator <[email protected]>
Status:

[Theo]

i dont bite,it's legit,im updating my account

[Vietnam4life]

just updated my account awhile ago.
their service is top notch.

[Doctor Dre]

Thoses scam are getting REALLY fucking old now

[BlingDaddy]

I prefer the Nigerian Scam....

[pornguy]

Damn,,

Here is the URL to the real one. Or at least the one that I normally use.

https://internetbanking.suntrust.com/

[xanx]

if that's a scam it's a good one

[johndoebob]

Does the url really lead to their website?

[KMR Stitch]

I got that one..

Funny only email address was published on GFY and GFY alone.



my [email protected] get's spammed

[pornguy]

I looked at both pages and I think that it is a real page fro Suntrust.

Could be someone used your info to open a bank account. You really may want to call them, just incase. That could fuck your credit.

[Vietnam4life]

Originally posted by KMR Stitch
I got that one..

Funny only email address was published on GFY and GFY alone.



my [email protected] get's spammed

lensman ?

[Vitasoy]

Internet savy people won't fall for it, but the newbs will.

[Rich]

Originally posted by pornguy
Damn,,

Here is the URL to the real one. Or at least the one that I normally use.

https://internetbanking.suntrust.com/

WTF? So that's real or are you fucking with us?

That's the same link from the email.

[jimmyf]

Originally posted by Doctor Dre
Thoses scam are getting REALLY fucking old now

yep, but people keep on going for them, some people don't have a clue.

[jimmyf]

Originally posted by Vietnam4life
lensman ?

[railz]

Impressive phishing scam email. They're getting very common.

[Manowar]

Originally posted by Soul_Rebel
i dont bite,it's legit,im updating my account

[KMR Stitch]

Originally posted by Vietnam4life
lensman ?

No,

Publicly on this board.

[majortom]

In case you are not enrolled for Internet Banking, you will have to use your Social Security Number as both your Personal ID and Password and fill in all the required information, including your name and your account number.

Subtle.


Like an elephant fucking a mouse .

[Chris]

i got that same email

my first bank scam email ever aswell

[DavieVegas]

youd be suprised to see how many people fall for that fucking scam on aol and elsewhere.

[jawanda]

From the REAL Suntrust website regarding this scam:

"URL of web content http://217.59.51.134:8080/suntrusts

disguised as:

https://mysolutions.suntrust.com/aut...ing/verify.asp

1. The spoof email pretends to be from Suntrust and requests verification of account details on the spoof webpage.

2. Suntrust never send out emails requesting details like this."

[Furious_Male]

I updated my info through them and they kindly moved all my money somewhere else to keep it safe. They are going to let me know soon where it is.

[paxton]

Yes I think a lot of the GFY readers are missing the fact that the link https://internetbanking.suntrust.com/default.asp is the descriptive link that was copy/pasted to the original post. In the email, that same text would be hyperlinked to a different site.

I get these "Phishing emails" (I believe that is the correct term for them) all the time from institutions claiming to be usbank.com, citifinancial.com, wellsfargo.com -- but I don't have an account with any of them. Clearly they send them out to the multitudes knowing that a percentage of the recipients will indeed have an account (hence the term "phishing.")

Web savy individuals, such as the webmasters who frequent GFY, would never be so stupid to fall for an email scam - even if it did look legit at first glance. Before you would enter your password or any other vitals you would verify the address bar (usually some IP string) and you would wonder why your bank tried to disguise the URLs they asked you to click on.

But there are a lot of people out there who aren't too smart when it comes to computers and the web, and these scams are costing the banks a lot of money in reimbursements (to the customers after their identity gets stolen).

[PatrickKing]

Originally posted by BlingDaddy
I prefer the Nigerian Scam....

What Nigerian scam?

Some important political people from there are supposed to be wiring me 3mill this week for helping them out with some banking problems.
If you want I could email them about the scam
maybe they could help put an end to it