How do Social Engineering scams work?Sophisticated fraudsters aim convincing 'spear' phishing emails at carefully selected groups, researching recipients through social media, website information or public facts about their organisation. High-volume phishing, on the other hand, targets as many recipients as possible - of whom only a tiny percentage have to be caught for possible success. Fake invoices, delivery notifications, receipts and banking updates can all be used as lures in these attempts. Many vishing campaigns are high volume, using auto-dial and broadband calling to contact thousands of potential victims per hour. They try to drive fear-based responses: for example, a spurious bank call-back service which pretends to alert the victim to bank account fraud, then requests detailed card information on response. Targeting organisations, attackers often impersonate a senior employee requiring urgent assistance. They may pretend to be in a rush, in an attempt to take control of the conversation. Smishing texts typically request urgent action, which often means clicking on a malicious link that in turn enables data theft. Spam filters stop many phishing emails from reaching inboxes, but no mainstream solution yet exists to prevent texts from reaching their intended target. What to look out for Fraudsters may use one or more of the following tactics to try to target your organisation:
If you are ever doubtful about your HSBCnet activities or the authenticity of incoming telephone calls, texts or emails purporting to be from HSBC, please call your local HSBCnet Support Centre or your HSBCnet Representative for further verification.
|
||||||||||||
The postal address for related inquiries is: This communication is provided by HSBC Bank plc on behalf of the member of the HSBC Group that has contracted with your organisation for the provision of HSBCnet services. You received this email notification because you are a registered user of HSBCnet. Should you have any concerns regarding the validity of this message, please contact your local HSBCnet customer support. We maintain strict security standards and procedures to prevent unauthorised access to information about you. HSBC will never contact you by email or otherwise ask you to validate personal information, such as your username, password or account numbers. If you receive such a request, please call your local HSBCnet customer support. Links within our emails will only take you to information pages. If you wish to unsubscribe from receiving service information from HSBCnet, please select here. © Copyright. HSBC Bank plc 2020. All rights reserved. Privacy & Data Protection Statement | Terms & Conditions Deutsche | En español | En français (Canadian) | En français (European) | 繁體中文 | 简体中文 |