The SANS Internet Storm center warns of highly realistic banking scams circulating as text messages for smartphones.  For example, they may substitute a numeric “0” for an alphabetic “O” character — so that URLs appear to be accurately presented.  Users who proceed with these text based scams often log into a fake but realistic looking website where their banking credentials are captured by the bad guys.    However, most banks don’t use text messaging or email to contact customers on important banking matters.

Over the past few days I have been getting a few phone text scams that kind of look realistic except for certain flaws that are fairly easy to pick out, however this is where it is important to read the whole URL. First, if you don’t have a banking account with the bank that appears to be texting you, you would just ignore and delete it. Most bank won’t text or email you regarding issues with your account. However, if you do online banking with this bank you might be tempted to check it out.

Analysis of the site by urlscan shows the site is located in Amsterdam not in Canada but the picture of the scam site looks very realistic compared to the real site.  Most banks have a mechanism to report such scams, BMO has a help page to either call or send them an email about this kind of scams so other don’t get caught. If you are uncertain about your bank fraud policy, they usually have an online page about what to do.