BankInfoSecurity.com - Banking Information Security News, Regulations, & Education
BankInfoSecurity.com Banking Information Security Careers Banking Information Security Training Banking Information Security Blogs

Username:
Password:
Remember Username?
Register | Help
Agency Releases
Articles
Handbooks
Podcasts
Webinars
White Papers
Bank Information Security RSS Syndication Bank Information Security Articles

Credit
Eligible
As a BankInfoSecurity.com annual member, this content can be used toward your membership credits and transcript tracking. Click For More Info
Chase Bank Customers Targeted Via Texting
Smishing Attack is New Variation of Classic Fraud
November 2, 2009 - Linda McGlasson, Managing Editor


Comment on this article

Chase Bank customers in the New York metro area have been receiving bogus text messages claiming to be from the bank, asking for account information. A local New York television station reported the phishing attack last week, claiming that "tens of millions of dollars" have already been stolen by fraudsters.

Chase media relations spokesman Tom Kelly downplays the report, saying, "As you might expect, TV is a little breathless on an issue that has been around via email and now texts for a number of years." Kelly says this attack is a variation of phishing known as "smishing." He says the amount of money taken in the attacks or the number of customers receiving the text messages is unknown.

"There was a recent flurry in the New York area, and it affected more than just Chase," Kelly says. "[The fraudsters'] strategy seems to be to send the texts randomly, using the name of large banks in the market, assuming that they will reach a fair number of customers of each bank by sheer market share."

Kelly says Chase works with telephone companies to shut down the toll-free numbers "as soon as we learn of them." He adds that the bank encourages customers to send the bank the phony emails or text messages.

When asked if Chase will replace any money taken as a result of the smishing attacks, Kelly says, "It depends, although customers who share their account information and PIN are making their accounts vulnerable."

As for any perceived negative response from customers about the use of texting to check on their accounts, Kelly says Chase doesn't expect the recent flurry of attacks to have any impact. "Most consumers know from phishing and common sense not to volunteer information like account numbers or PINs in response to emails or texts."

Click to Get Updates on the Latest Information Security News




Question
Question
?Are your customers also being targeted by fraudulent text messages? If so, how have you responded?
Here's your chance to be heard by your peers in the banking and finance industry! Your comments will be kept anonymous. Just enter your comment to the right and click submit to send it to our Editor.
Please login if you would like to post a comment on this question.

"I rec'd one of these. I emailed Chase to alert them....never rec'd a response. As one who works with ID Theft and compliance issues daily, I would want to know...

Search for Articles
in

 More on this Topic:

  Recent   Popular   Research  



Blogs Related Blog Entries
Linda McGlassonCould This Senior Citizen 'Lottery Winner' Be A Customer Of Yours?
"Now more than ever, institutions have to keep awareness and education of customers on the top of their "must-do" list."



BankInfoSecurity.com is your one-stop portal for the latest news, insights and education on the top information security issues facing U.S. financial institutions today. Through articles, webinars, podcasts, customized training and sponsored content, our team is committed to providing up-to-date information on the security regulations, threats, solutions, training and career trends that most impact banks, credit unions and other related enterprises. Also, please check out our companion site, CUInfoSecurity.com.
Terms of Service | Advertise | Archive | Site Map | Contact | Bank Information Security RSS Syndication RSS Syndication
Copyright © 2009 BankInfoSecurity.com an ISMG Corp. company.