- IRS refund scam: In this example, an e-mail is sent out that looks like it's a legitimate e-mail from the IRS, notifying you that you are eligible for an after-the-fact tax refund. They instruct you to submit a refund request form and provide a link, which goes to a fraudulent website which asks you to provide personal and financial information. There are many variations of the IRS scam and some can look very convincing.
Tips: If you should ever receive an e-mail asking you to provide sensitive information, especially if there is an urgent tone or if it seems too good to be true (e.g., you'll get money or prizes as a result), it's most likely a phishing attempt. As a rule, the IRS does not ask for personal information or share information about tax accounts via e-mail. Never click on a link on a website or page you feel is suspicious.
- TD Banknorth UK credit advice fraud: This example incorporates a couple different methods to illegally obtain your personal and financial information. First, an e-mail is sent out telling the person that he is due a credit advice for a large sum of money, but that in order to receive the money, he needs to open an account. The e-mail has several fairly legitimate-looking account opening forms attached with instructions for the completed forms, as well as a picture ID, to be returned via e-mail or fax. However, all of the various documents are branded TD Banknorth UK – a bogus company.
Tips: If you should ever receive an e-mail asking you to provide or verify sensitive information, especially if there is an urgent tone or if it seems too good to be true (e.g., you'll get money or prizes as a result), it's most likely a phishing attempt. TD Banknorth will never ask you to confirm your account number, PIN, password or any other personal information via e-mail. Also, your first indication that it's phishing is if the company name is incorrect and/or spelled wrong. In this case, there is no TD Banknorth UK and it is represented differently in the different documents (TD Banknorth UK, TD Bank North UK). Never open an attachment or click on a link you feel is suspicious.
- Fake log-in page: In this example, the TD Banknorth account log-in page has been copied, but the criminals have added a field for Social Security number so they can have all of your information in one place.
Tips: If you should receive or notice that a log-in page has changed and is asking you for more personal information than you normally provide, this should make you suspicious and you should contact us immediately. Another potential clue that it is a fraudulent page is that there is a typo in the first line - "Socail Security Number." Never enter personal information on a website or page you feel is suspicious.
- Fraudulent verification notice: This example is a typical phishing attempt. The criminals have sent out an e-mail that looks like it came from TD Banknorth and are asking the users to verify their address information by clicking a link to another site controlled by them. They've even gone so far as to include a message and link about fraud and ID theft.
Tips: If you should ever receive an e-mail asking you to provide or verify personal information, especially if there is an urgent tone or if they emphasize negative consequences, it's most likely a phishing attempt. TD Banknorth will never ask you to confirm your account number, PIN, password or any other personal information via e-mail. Also, you'll notice that in the section on the bottom right of the screen, there's a typo – "manage! ment", which can often be an indicator of a fraudulent page. Never click on a link on a website or page you feel is suspicious.
- Fraudulent information request: Similar to the example above, this example is also typical of phishing e-mails. The criminals have sent out an e-mail that looks like it came from TD Banknorth and tells business customers they are obligated to complete an online form. When users click the link for the form, they are sent to another site controlled by the criminals which asks for the customer's business ID, user ID, password and authentication questions and answers.
Tips: If you should ever receive an e-mail asking you to provide or verify sensitive business information, especially if there is an urgent tone or if they emphasize negative consequences, it's most likely a phishing attempt. TD Banknorth will never ask you to confirm your account number, PIN, password or any other personal information via e-mail. Also, you might be tipped off that it's a fraudulent e-mail by the random/garbled "To" and "From" addresses and the exclamation point in the subject line. Never click on a link on a website or page you feel is suspicious.
