Text message (SMS) phishing

How to protect against a common scam

As mobile phones become capable of helping you manage your money online, you need to take even more care against the fraudsters.

What is SMS phishing?

Some people receive text messages pretending to be from the bank. They may state that sensitive information about you has been posted on the internet and encourage you to visit a web site. These messages are fraudulent — visiting the link in the text could result in an attempt to infect your computer or handheld device with a virus.

Other messages state there is a problem with your bank account and encourage you to phone a number. These are also fraudulent, trying to trick you into giving away your personal and security information.

Example text messages:

"Your account is closed due to unusual activity. Call us at [number removed]"

"Someone has posted your full Personal & Banking information @ http://[website address removed] You must remove it now."

"Hi, I post your full Personal and Banking information at [website address removed] You can remove it, I am sorry"

What can I do?

Always DELETE text messages like these.

Do NOT phone the number, fraudsters will attempt to trick you into disclosing your personal information.

Do NOT click on the link or type it into your browser, as you may be at risk of being infected with malicious software.

If you have followed the link, we recommend that you carry out a full check of your computer or handheld device as soon as possible to find out if any spyware, computer virus or other malicious software has been installed.

The most effective protection is to keep your computer's security up to date. Installing Trusteer Rapport will also help protect your personal information.

Warning

We will never ask you for your PIN or password by text or email.

Whilst the Bank now offers a Text Messaging service to give alerts or updates about your account and services available, we will never ask for your full security details or direct you to a page which requires you to enter any logon details or use a card reader device. Smart phones will automatically convert some text into web page addresses - do not click on any link unless you are absolutely certain it has come from a valid source.

If we send you a text, we won’t include specific details but may refer you to our Alerts Service page or ask you to contact our Customer Services (without providing a number) or visit your Branch.

You can find our contact details here.