Portal Home |  IS News Menu |  Portal Menu |  ISB Menu |  Main Content
ALERT: Tesco Phishing
28 Mar 11:33

A new phishing scam directed at users of services from UK supermarket giant Tesco has hit our virtual desktops this morning.

This is the text of the email message:

Dear client of Tesco Customer,

Due to concerns, for the safety and integrity of your Tesco Credit Cards account we have issued this warning message. It has come to our attention that your Tesco Credit Cards account information have been open on an external IP which is unknow to us, we urge you to update it as part of our continuing commitment to protect your account and to reduce the instance of fraud on our website If you could please take 5-10 minutes out of your online experience and update your Tesco Credit Cards account records so that you will not run into any future problems with the online service.

Once you have updated your Tesco Credit Cards account records, your Online Account service will not be interrupted and will continue as normal.

To get started, please click the link below:

https://xxxxxxxxxxxx.com/RBSGConsumer/Login.do?promoCodeTESCO

This instruction has been sent to you by the customers security service and is obligatory to follow.

We look forward to continuing to provide you excellent service.

Thank you,

Customer Security Services

Tesco Credit Cards


The URL (notice https) points to a completely different domain, http://www.yyyyyyyyyyyyy.com/main/images/details.htm.

There is nothing special about this scam - the URL leads to a reasonably well done page, complete with Tesco logos, etc. When called up it was immediately flagged as fraudulent by Firefox's anti-fraud function.

Related links: (Open in a new window.)
External link

View Printable View printable version (opens in new window)
Back Back