We’ve previously warned of smishing texts, falsely claiming to be from Lloyds Bank, providing the recipient with a link to click if they had not set up the alleged new payee on their account (see image below). This scam is designed to trick the recipient into thinking there has been unauthorised activity on their account and to lure them into giving their banking information in order to stop any outgoing payments. The fraudster sending the message is then able to steal money using the recipient’s banking information.
At the time of our warning we suggested that this scam was unlikely to exploit only Lloyds Bank’s name and that a version of the message was likely to be sent from other telephone numbers and using the names of other banks too.
We now have some examples of similar smishing texts, received by residents of Cambridgeshire and Peterborough, this time purporting to be from HSBC. Please see below.
You will see that this message is very similar to the fake Lloyds text in that it claims a new payee has been set up on your account. As before it gives a link for you to provide information about your account to supposedly stop a new payee being set up.
Another version of this message has been received by a resident as below, the only difference being a slightly different description/name of the link, a different fictitious payee name and a different number that sent it.
The warning signs that these messages are not genuine are:
- The messages come from ordinary mobile telephone numbers
- The messages include a hyperlink asking for information
N.B. Even if a message seems to come from a trusted sender such as your bank i.e. if it is automatically logged in a list of previous genuine messages from your bank, do not assume it to be genuine. Fraudsters can ‘spoof’ numbers to appear like a legitimate entity. Always check the authenticity of a message by telephoning your bank or visiting a branch before clicking on any links. Do not click on any links in SMS (text) messages that you do not know to be genuine.
Forward suspicious text messages to 7726.
In the case of e-mail messages that phish for your information, report to firstname.lastname@example.org .