Monday, January 13, 2014

Beware from new ICICI Bank Phishing mail

Hello Friends,

I got this email consecutively twice in a month and prima facie it is a phishing mail. You need to beware from such mail otherwise you will loose your hard earned money and data.

Please note the following whenever you get such mail

  1. A bank never ask your confidential details. Confidential details are your customer Id, your netbanking password, your debit card grid, your password, your e-mail id and password. Whatever sophisticated it looks, never respond to such e-mail. Immediately contact your bank through phone banking or nearest branch
  2. Bank never provide anykind of link attached to mail.
  3. Always check URL of the bank given on the link and always search on google.

This mail is a very cleverly laid trap. When I got this mail, the sender email id was customer.care@icicibank.com (Now I do not know whether they really know whether I have an ICICI Bank account or not)
When I replied to that mail (without providing any information), the mail got bounced. 
Then I checked the attachment. The attachment opened in a local drive (it should never happen). 
Please note that a bank's website should always have a secured connection so it should start with https://

Do not accept any website without https:// in the initial

For example, the netbanking login page of ICICI Bank is as follows:

you can clearly see the https in the beginning. Above is the only correct URL for ICICI netbanking

Please see the phishing message:




If you look it this, it looks very sophisticated but it is a trap.

Now look at the attachment.






Now look at above images.

It is asking entire grid of your debit card. You know why?

The most important part of ICICI Bank's internet banking security is this grid. Whenever you attempt to transfer money online from your account:
1. It ask internet transaction password
2. Then it ask your grid numbers randomly. It is impossible for anybody to transfer money without these debit card grids. 

 Well, I also got a reply from ICICI Bank today (14.01.2014) and they confirmed that this is a phishing mail. Please see their reply below:
Dear Mr. Sharma,

We understand your concern.

We confirm you that, the e-mail you have received has not been sent by ICICI Bank.

This is a scam called 'phishing' wherein certain individuals/entities solicit, through e-mail, personal information like Internet Banking user ID, passwords, credit/debit card numbers, bank account information or other personal and sensitive information from unsuspecting customers. Clicking on the link or even pasting it in the address bar of your browser will take you to a fraudulent site. This fraudulent link will normally not have the padlock sign in the tool bar which will discriminate this site from our genuine site (www.icicibank.com)

We urge you not to reply to such e-mails. Please do not share any of your personal information in response to such mails. ICICI Bank will not ask for this information via e-mail or by directing you to a link online.

If you have revealed your account details in response to this e-mail or any such, please call and inform our ICICI Bank 24-hour Customer Care (33667777 with prefix STD code) immediately and put in a request to block your user ID and password.

You may continue to transact with ICICI Bank by typing (www.icicibank.com) in the address bar of your browser window without any apprehension. We reassure you that we use the latest encryption and SSL security devices to make our web site safe for use.

May we request you also to forward this e-mail to your friends and family members so they too are aware of similar 'phishing' scams.

Please visit the 'Safe Banking' section on our web site for 'Safety Tips' and more information on a secure online banking experience.

Also forward the mail received by you to antiphishing@icicibank.com for doing the needful.

We look forward to more opportunities to be of service to you.

Sincerely,

Shravan Kumar D
Customer Service Officer
ICICI Bank Limited

So never reply to such mail. Report it as phishing and also complaint to the cyber crime cell of the police department.

Then I sent email to antiphishing@icicibank.com and got following reply
 Head Service Quality (headservicequality@icicibank.com) is not on your Guest List | Approve sender | Approve domain 

Dear Customer,
 
We write with reference to your e-mail of January 14, 2014.
 
Thank you for writing to us and bringing this e-mail to our notice.
 
We wish to inform you that the e-mail you have received has not been sent by ICICI Bank. We have already initiated necessary action to get the link disabled.
 
This is a scam called "phishing" wherein certain individuals / entities solicit, through e-mail, personal information like Internet Banking User id, passwords, credit / debit card numbers, bank account information, or other personal and sensitive information from unsuspecting customers. Clicking on the link or even pasting it in the address bar of your browser will take you to a fraudulent site. This fraudulent link will normally not have the padlock sign in the tool bar which will discriminate this site from our genuine site (icicibank.com).
 
We urge you not to reply to such e-mails. Please do not share any of your personal information in response to such mails. ICICI Bank will not ask for this information via e-mail or by directing you to a link online.
 
If you have revealed your account details in response to this e-mail or any such, please call and inform our ICICI Bank 24-hour Customer Care immediately and put in a request to block your user id and password.
 
You may continue to transact with ICICI Bank by typing (icicibank.com) in the address bar of your browser window without any apprehension. We reassure you that we use the latest encryption and SSL security devices to make our web site safe for use.
 
May we request you also to forward this e-mail to your friends and family members so they too are aware of similar "phishing" scams.
 
If you receive an e-mail claiming to be from ICICI Bank regarding updating sensitive account information like PIN, password, account number, let us know by forwarding the e-mail to antiphishing@icicibank.com.
 
Please visit the 'Safe Banking' section on our web site for "Safety Tips" and more information on a secure online banking experience.
 
We affirm that ICICI Bank acts at all times with diligence, in good faith and without any intent prejudicial to the interests of its customers.
 
Sincerely,
 
Sreelatha V
Office of Head Service Quality
 

I hope this is enough to open our eyes

Have safe banking
at

No comments:

Post a Comment