A concerned NCBA Bank Kenya customer took to Twitter on Thursday to warn other users about a suspected phishing email scam targeting the bank’s digital banking service, NCBA Loop.
The tweet, which was shared by user @Kurlycheeks, included a screenshot of the suspicious email, which appeared to be from “Ncba Loop Acc Configuration” and bore the subject line “Device Setup.”
The email claimed that the recipient’s account had been logged in on more than one device and that it would be disabled unless they clicked on a link in the email to “restrict unauthorized devices.”
If you bank with Loop and come across this email, don’t act on it.. my paranoia had me calling the bank first to confirm whether they sent this. Kumbe once you do, they get access to your bank account and withdraw everything.. pic.twitter.com/oVtQmj2Sup
— Vionna (@Kurlycheeks) June 22, 2023
However, the link in the email actually led to a fraudulent website that was designed to steal the recipient’s personal and financial information.
@Kurlycheeks said that they had called NCBA Bank to confirm that the email was not legitimate and that the bank had advised them not to click on the link.
“Turns out that once you act on it, they get access to your bank account and withdraw everything,” they tweeted.
Phishing emails are a common type of cybercrime that is designed to trick recipients into revealing their personal and financial information.
These emails often appear to be from legitimate organizations, such as banks or credit card companies, and they often contain urgent requests for information, such as password resets or account verification.
If you receive an email that you suspect is a phishing scam, do not click on any links in the email, and do not reply to the sender.
Instead, forward the email to the fraud department of the organization that the email claims to be from.
By following these simple tips, you can help to protect yourself from phishing scams and keep your personal and financial information safe.
Here are some additional tips to help you avoid phishing emails:
- Be suspicious of emails that ask for personal or financial information, especially if they are from organizations that you do not do business with.
- Look for misspellings or grammatical errors in the email. Phishing emails are often poorly written, which can be a red flag.
- Do not click on links in emails that you are not familiar with. If you need to verify the authenticity of an email, go to the organization’s website directly and log in to your account.
- Be cautious about opening attachments in emails. Phishing emails often contain malicious attachments that can infect your computer with malware.
- Be especially wary of emails that contain urgent requests.
By following these tips, you can help to protect yourself from phishing scams and keep your personal and financial information safe
