1. Email scams

Email scams are commonly termed ‘phishing’ and involve bulk emails sent by perpetrators to try to obtain customer banking details such as passwords, personal code numbers and other details. Usually these messages will start with a response that addresses system outages, card verifications or internet banking log-ons. These examples are not exhaustive, with many recent examples having involved messages being sent to bank customers and Visa card holders specifically trying to extract personal details.

Action to prevent email scams

Unicredit members should be wary of the dangers of responding to these types of emails and be warned that fraudsters use many tricks, such as using financial institution logos to dupe you into thinking the request is genuine. If you receive an email of this nature, be very suspicious, delete the email and do not open any attachments which may be with the message as these can indicate another type of electronic fraud. Please be advised that Unicredit does not email members at any time to request such details.

2. Trojan ‘key stroke logger’

These are email borne viruses and are becoming more prevalent as fraudsters use them to download personal details whilst members are banking online.

Actions to prevent key stroke viruses

Unicredit emphasises the importance of keeping your virus protection up to date and that you run anti-spyware type programs to detect the presence of key logger viruses on systems. Not replying or opening any attachments that seem suspect are also ways of managing exposure to this type of fraud.

3. Internet banking “middle man” or agent scams

There are some emails that try to convince you to either open accounts or allow use of personal accounts to enable the transfer of funds into and then out of the country. Typically the fraudsters offer an incentive, generally a percentage of the funds transferred in (usually emanating from another compromised account) for the member to act as their agent.

Action to prevent internet banking scams

This activity is illegal and you should never reply to these requests. Account details should never be revealed nor accounts opened or allowed use of to transfer funds.

4. Ghost websites

Incidences of ghost websites have featured regularly in the media. These types of scams attempt to dupe customers to enter their personal code details and PIN numbers on replica web sites. Clicking on links in fraudulent emails will take you to a bogus website, where fraudsters can record your account and password details.

Action to prevent website ghosting

Be aware that these types of websites exist. Be familiar with Unicredit’s web address (www.unicredit.com.au) and those of other organisations that you may use. Be suspicious about clicking on website links in emails that could take you to a bogus website. Also look for the secure symbol for internet banking sites – a ‘padlock’ symbol is often used in the bottom right corner of web pages to note they are a secure page.

More prevention measures

Other prevention measures for avoiding fraudulent activities include:

• being aware of using public internet facilities;
• committing your passwords to memory;
• avoid using the ‘remember’ facility for passwords;
• keeping your computer secure by updating anti-virus software, firewalls and other security patches; and
• changing your internet passwords frequently.

More information –

• Online security tips
• Avoiding internet fraud
• Visit the Australian Securities and Investments Commission’s FIDO website for financial tips and security information.
• Visit the Australian High Tech Crime Centre, a division of the Australian Federal Police.