Email Alert: Chase Phishing Scam

We add to our collection yet another bank-related phishing scam. Today’s gem pretends to be from Chase Bank. They are telling you that you need to update your email address with them due to inactive members and fraud. The only fraud here, however, is this email.

Let’s take a look at the body of the email, which arrived with a subject of “Please update your email address”

Dear Chase account holder,

Due to concerns, for the safety and integrity of your Chase online account we have issued this warning message. It has come to our attention that your email address needs to be updated due to inactive members, frauds and spoof reports.

We ask you to visit the following link to start the procedure of confirmation on customers data.

To get started, please click HERE.

Please don’t reply directly to this automatically-generated e-mail message.

Sincerely,

Chase Online Services

This has all of the hallmarks of a typical phishing scam. Notice how they don’t use my name, and that there is a sense of urgency. The link itself doesn’t go to the Chase website, but actually to the domain chase.online.tc. In other words, you’re going to a fake Chase website at online.tc. Where, you may ask, is a .tc website located? Why, it’s the Turks and Caicos Islands, of course!

I should also mention that I don’t even have an account with Chase!

It’s a complete scam.