A new scam that is targeting RBC customers is making the rounds. This is the email that will hit your inbox:
So this is clearly a phishing scam. How can I tell that? Let’s start with the sender.
The email address that it is sent from is not RBC as the domain for this email address is not rbcroyalbank.com. Thus right out of the gate you should be deleting this email. But there’s other ways to tell. The quality of the English is another example.
Can you pick out all the grammatical errors in this paragraph? And what the hell is or are Mesh Manges? The bottom line is that scammers don’t sweat the details in their scams. Especially about what they write in their scam emails.
So let’s say that you actually click on the link that the email says you should click on, which you should never do, this is what you will get:
You’ll note that the URL bar doesn’t have a URL that is associated with RBC as it is not some form of rbcroyalbank.com. So that’s a #Fail. But what’s interesting is that it has a Captcha. And it actually works.
I tried to pick plants that were not hanging from the ceiling and that would not work. That’s impressive as while these scammers didn’t get the English right, they got this part right to suck you into falling for this scam. Once you get past that Captcha, you get this:
It’s not an exact replication of the real RBC website. But it’s likely good enough to fool some people. Here’s where it falls apart. When you enter your card number and password, it just loops back to this page. But I am guessing that the scammers have snatched your credentials at this point and they are well on their way to draining your bank account.
So I’ll close off as I always do with scams. If you see this email hit your inbox, delete it.
By they way, this scam will be reported to RBC so that they can take action.
It Seems That @RBC Is Now Being Used As Part Of An Email #Scam To Get Your Banking Credentials
Posted in Commentary with tags RBC on September 22, 2022 by itnerdA new scam that is targeting RBC customers is making the rounds. This is the email that will hit your inbox:
So this is clearly a phishing scam. How can I tell that? Let’s start with the sender.
The email address that it is sent from is not RBC as the domain for this email address is not rbcroyalbank.com. Thus right out of the gate you should be deleting this email. But there’s other ways to tell. The quality of the English is another example.
Can you pick out all the grammatical errors in this paragraph? And what the hell is or are Mesh Manges? The bottom line is that scammers don’t sweat the details in their scams. Especially about what they write in their scam emails.
So let’s say that you actually click on the link that the email says you should click on, which you should never do, this is what you will get:
You’ll note that the URL bar doesn’t have a URL that is associated with RBC as it is not some form of rbcroyalbank.com. So that’s a #Fail. But what’s interesting is that it has a Captcha. And it actually works.
I tried to pick plants that were not hanging from the ceiling and that would not work. That’s impressive as while these scammers didn’t get the English right, they got this part right to suck you into falling for this scam. Once you get past that Captcha, you get this:
It’s not an exact replication of the real RBC website. But it’s likely good enough to fool some people. Here’s where it falls apart. When you enter your card number and password, it just loops back to this page. But I am guessing that the scammers have snatched your credentials at this point and they are well on their way to draining your bank account.
So I’ll close off as I always do with scams. If you see this email hit your inbox, delete it.
By they way, this scam will be reported to RBC so that they can take action.
Leave a comment »