BancorpSouth Phishing Scams
Date: 11 August 2007
Received from "[!]Clients' support " <email@example.com>
Subject: [!]Transfer Management BancorpSouth Operations
Thank you for choosing BancorpSouth Management. Unfortunately there has been a
problem processing your last transfer information for the month of August,2007.
Please review our requirements at BancorpSouth account management. You will be able
to update your transfer information quickly and easily using our secure server
web form. Please understand that without promptly updating your private
information, your BancorpSouth service may be discontinued. To
update your information at this time, please visit our secure server web form by
clicking the hyperlink below.
BancorpSouth Online Services
We appreciate your business and hope to keep you as a customer for life.
BancorpSouth is so easy, no wonder it's number 1 !
If you have any questions please feel free to contact the Cash Management Operations Department at [DELETED].
1st Vice President
Cash Management Operations
© 2007 BancorpSouth Online, Inc. All Rights Reserved
This is one sophisticated phishing e-mail. The telephone number did not correspond to any BancorpSouth telephone number so we deleted it for security reasons. By supplying a fake BancorpSouth telephone number, the scammer ensures that his victims turn to the "right" people for help. Never phone a telephone number supplied in suspicious e-mails like this one, rather look for the telephone number of the relevant department on the organisation's official website. If in doubt, contact the customer service department of the company in question and supply them the details of the e-mail. They will be able to confirm whether such an e-mail has been sent out to their clients. Remember, if you are a client of a company, you have probably received some correspondence from them via postal mail, so use the telephone numbers printed on these documents. Be careful though, phishing scammers can forge offline correspondence too, given the fact that they have your postal address too.
Date: 4 July 2007
Received from "John Blackburn" <firstname.lastname@example.org>
Subject: BancorpSouth reminder
Our company continuously keeps abreast of the recent achievements in the field of network piracy control and takes appropriate preventive measures for providing maximum protection of our clients from encroachment of swindlers.
Since tomorrow, the system of access to operating fields of our clients will be transferred to a system of coding with a floating number. It means that your password and ID will not change. However. they will be registered in the system differentially. The only prerequisite consists in the following: you have to register the first sourse key in the system and it will generate further re-encoding. In order to fulfill it, just follow the link https://www.bxs.com/login.asp and enter your access code and ID in the appropriate fields.
Please, pay attention to the fact, that all fields must be completed, otherwise the system will block transition to the next level, and you will not be able to work with your personal data.
If all necessary fields are completed and your password and ID concur with those registered in the system, you will get access to the operating field. After that your personal identification key will be successfully registered in the system. No other efforts from your side are necessary.
If for any reason you have not succeed in getting access to the system, please, double check validity of data entered. Should all the data be valid but access is still forbidden, please contact our technical support department.
Thanks for understanding and support.
IT Security Department
The "From" address betrays the intent of this e-mail. Why on this earth would BancorpSouth use an e-mail account from an online recruitment website to send important e-mails to their clients? The bottom line is, BancorpSouth will never send e-mails like these.