Scams by bank employees are common, especially via SMS messages. The National Institute of Cybersecurity (Incibe), has alerted Banco Santander customers about a new scam in which criminals use SMS to steal personal and banking information.
The cybercriminals first send an alarm message to the victim to alert them, telling them that 215 euros will soon be charged to their bank account to cover a purchase on Amazon.
The scammers pretend to be Santander and request that the customer click on a link to cancel or split the payment. The message reads: “SANTANDER”: Dear customer, Amazon will charge EUR215 to cancel or split receipts. Please complete the verification (fradulent URL).
Clicking on the hyperlink will redirect the Internet user to a page that attempts impersonation of the official Banco Santander site. You will be asked to enter all information necessary for accessing your online bank account. This is the ID number and your personal password.
He explains that after entering access credentials, clicking the “Enter” button, the page will display an error message informing you that you must enter a valid password or identifier, even though the cybercriminals already have the credentials.” Incise.
The institution warns that other banks and companies could be used as hooks in different versions of the scam. It is possible that the campaign may be being created via email and SMS.
Cybersecurity experts advise against sending SMS or emails to banks or companies requesting our attention. In these situations, it is best to contact the person who contacted us via another method to clarify any doubts regarding the authenticity of the communication. This will prevent our information from getting lost in the air.
