BPI smells something Phishing

Published on 3 Feb 2007 at 3:17 pm. 2 Comments.
Filed under TechTips, Nets, Webs, Infostructure.

I wrote previously of a Phishing attempt targetted at BPI Expressonline users. There, I recommended that BPI step up its campaign against philshing, mainly by raising the awareness of their clients.

Looks like they took heed. Today, I got this e-mail from BPI.

from  BPI Expressonline Mails      1:02 am (14 hours ago) 
  reply-to  BPI_Expressonline_Mails@bpi.com.ph  
  to  BPI_Expressonline_Mails@bpi.com.ph  
  date   Feb 3, 2007 1:02 AM  
  subject   Express Advice — Phishing Scams on the Rise  

Express Advice

Phishing Scams on the Rise
Phishing e-mails are sent to trick you into revealing personal and financial information. Don’t be a victim.

We suggest that you use this short checklist to protect yourself against phishing attacks.
1. Begin your session by manually typing the web address of BPI into your browser.

    The official URL of BPI Express Online is www.bpiexpressonline.com.

2. Avoid disclosing personal or account details via email or embedded link.

    Be skeptical of unsolicited e-mails, especially those that concern personal / account information.

    Delete suspicious emails or email attachments without opening them, even if they seem to have originated from someone you know. 

3. Notify the sending company if you receive a suspicious email.

    Contact us directly through Express Phone 89-100 or email us at expressonline@bpi.com.ph.

4. Check the security certificate of the web page. 

    Before entering personal or account information into a site, make sure it is secure.

    In Internet Explorer, you can do this by checking the yellow lock on the status bar. A closed lock is an indication of an encrypted site.
If you think you may have responded to a suspicious email, change your password for Express Online as soon as possible. To change your password, login to www.bpiexpressonline.com and go to Account Maintenance –> Change Password.
We wish to reiterate that BPI will never send you an e-mail asking for information on your username and password. The Bank’s websites are protected by a 128-bit SSL encryption and Verisign’s Security Certificate. We would also like to remind you of the following legitimate website addresses of the Bank:
q www.bpiexpressonline.com

q www.bpitrade.com           

q www.bpiexpressbills.com

q www.bpidirect.com  
 

    Related Articles on Technobiography:
  • Phishing attempt at BPI Express Online users
  • Phishing attempts on Gmail Accounts
  • 2 Comments to ‘BPI smells something Phishing’:

    1. Nils on 15 Feb 2007 at 8:04 am: 1

      You do a great service by warning others about these type of activities. When the financial institution loses they pass along the loss to customers in the form of higher fees. We all need to take responsibility to prevent fraud.

    2. ka edong on 15 Feb 2007 at 6:31 pm: 2

      ;-)

    Leave a Reply

    Your Ad Here

    Search

    Technobiography
    Web
    May 2008
    S M T W T F S
    « Apr    
     123
    45678910
    11121314151617
    18192021222324
    25262728293031

    Categories

    Archives

      None - Top Blogs Philippines