New phishing spam/scam with IVR call-in phone system!

I got this email today. It purports to be from MBNA, and it even has their logo linked from their corporate web site. Except for some red flags (like the dorky wording and punctuation), it appears legit. I might have believed it myself if it hadn’t come to one of my spam-trap email addresses.

——– Original Message ——–

Subject: Fraud Prevention Measures
Date: Fri, 8 Sep 2006 20:18:46 +0200
From: MBNA Security Department
To:  
MBNA Logo Dear customer!Due to high fraud activity we constantly increasing security level both for online banking and card transactions. In order to update our records you are required to call MBNA Card Service number at 1-800-976-5713 and update information on your MBNA card.

This is free of charge and would not affect any transactions with your card. Please note this is necessary to provide highest security level for all transactions with your card.

Thank you.

David Morones,
Chief Officer,
MBNA Card Service Department

I called the 800 number. I had to use my cell phone because my work line blocked the “976″ number. Comical, huh?

A digitized voice answered the line and thanked me for calling MBNA. Then it asked for my CC#, SSN, PIN and Exp Date. I entered fake data, of course, just to see what happened next. Finally it told me my data had been “updated”. I guess they meant to say “stolen”, but got the words wrong.

It appears to be a pretty simple IVR (interactive voice response) system. Somewhere behind it all there is a PC collecting stolen credit card info. At least one entry in that database is fake.

Maybe you would like to call in and add another fake entry. How about it? :-)

[ Bonus: The email is from someone named Morons. Uh, Morones. ]

Leave a Reply