TTT
Well done for posting this. Whilst a lot of people know about scams, this variant needs to be publicised.
I just want to clarify something here (I used to work for a bank, and now work in IT, so I have some knowledge).
Some people may think that there has to be someone on the inside for this to work.
That's not the case.
If you've
ever had a text from your bank, the spoof text will look like it's from them, because it comes from the same number.
This is different from a phishing email, because with those you can tell it's not really from your bank, because whilst the mail might look like it comes from
[email protected], when you hover over the mail address, you will see it really comes from
[email protected].
That's the big difference here...the fake text will genuinely look like it comes from your bank.
The answer is ALWAYS this - if you are contacted by your bank or building society via text or email, call them (from another phone) using the number printed on the back of your debit or credit card. That way you will be able to verify whether it was genuinely from them.
And never ever ever ever ever give out your full online banking PIN.
And absolutely never give out your ATM PIN.