Another one to report as Spam/ phishing (TalkTalk let it slip through):
Talktalk still not blocking this sort of variant of the "refresh your contact" phishing scam, despite it being reported previously. Gmail always spots it.
Talktalk could do better.
I've reported it to the government site for phishing reports, but won't bother sending it to Talktalk as they never acknowledge it.
Staff
Staff
@Karl-TalkTalk, the link you posted at the foot of your original reply is not currently taking me to the support article.
Got a similar email today which I have reported, purporting to come from the Halifax. Have forwarded it to phishing at Talktalk.
They are now inserting "update information" rather than "refresh" in something that looks like an authentic message from the Halifax, so all very plausible except banks don't do it this way and it comes from "lemmyv@tiscali.co.uk".
Also a give away exclamation mark in the title.
A quick reminder of what the true Talktalk email looks like, ahead of migrating:
Rather worryingly, no attempt is made to address the customer by name, so this actually looks more like a scam. This one is not.
However we have learnt this evening of a recent phishing email where the sender has gone out of their way to personalise the email, addressing the customer by name.
So these checks and balances are not watertight. ....!
Then, more similar wording. This is the original true Talktalk version:
The follow up email looks like this:
Subsequent sections contain links:
@Karl-TalkTalk, grateful if you could feedback to the sender of the authentic emails that the presentation does not lend itself to good security practice.
Simply using "Hi" .... banks tend to use a postcode which is better even than a name.
Too many links that may tempt customers to click through, rather than err on the side of caution. While the genuine email won't cause harm, it doesn't represent best practice. The lure of promoting the upgraded email appears to have distracted from presentating a simple recommendation to explore directly from within webmail itself, accessed from a known Talktalk website page.
Whoever is behind the phishing scam is exploiting this rather lax standard of presentation. The fake Talktalk messages are very convincing lookalikes. All that customers can go by really is hovering over the sender's name and not clicking on any links, regardless of what they supposedly take us to.
Staff
Staff
