Phishing scam targets HSBC customers; Etisalat blocks fake web site of the bank

Phishing refers to fraudulent spam e-mails and web sites disguised as trusted brands intended to trick consumers into divulging personal and financial information, which is then used for identity and financial theft. The e-mail with the subject header ‘HSBC UAE. Urgent Update!’ requested customers to enter their pin code as a measure to activate a new security system.

The scam was detected by Etisalat and HSBC yesterday, and after a thorough investigation, Etisalat blocked the fake HSBC web site through a proxy server as an immediate measure of protection for Internet users in the UAE. Etisalat has also taken additional measures for EIM Mail users by categorising the e-mail as spam and adding it in the spam list for its customers .

“The HSBC would like to thank Etisalat for their proactive action and cooperation in blocking the fake HSBC web site. Fraudulent e-mail scams are an industry-wide issue, and HSBC was one of many financial organisations whose customers were targeted. The HSBC would never send an e-mail nor SMS requesting customers to provide such confidential information. The HSBC locally and worldwide coordinated with all the concerned ISPs from the country where the web site was located and shut down the site. We would like to reassure our customers that HSBC’s Internet Banking Service remains a safe and secure channel for executing their financial transactions,” said Nader Haghighat, Regional Head of Direct Banking, HSBC Bank Middle East Limited.

“Phishing is a significant threat on the Internet today affecting users worldwide. Companies and financial institutions need to take appropriate measures to protect their users by raising awareness on the issue and using security measures like two-factor authentication,” said Abdulla Hashim, Assistant General Manager, eCompany, Etisalat.

eCompany has posted various measures consumers can take to recognise and guard themselves against phishing scams on its web site at www.ecompany.ae/security/phishing.