- Home
- > Security and Privacy
- > Security
- > Common threats
Phishing
What is it?
Phishing is a process used by fraudsters to acquire sensitive information such as usernames, passwords and credit card details by pretending to be an email or message from a trustworthy organisation. Communications claiming to be from banks, popular social websites and auction sites are commonly used to trick the unsuspecting public.
Phishing is usually carried out by email or instant messaging and often directs users to enter details at a fake website which looks almost identical to the real one, however some phishing scams are able to create pop-ups that appear whilst you are using a banking site.
Remember:
- Bank of Scotland may email you or send you a text message from time to time, but this communication will never ask you to enter your Internet Banking details either through an email, text message or a website
- Bank of Scotland do not ask you to enter any of your security details into a pop-up screen. If you see one of these screens then it is almost certainly a scam
- If you have been presented with a pop-up screen asking you to enter your security details, do not enter any details and call 08456 02 00 00.
Examples of phishing emails can be found at the Bank Safe Online website*.
Protect yourself
Don’t be fooled. Emails, text messages and websites may not be what they seem.
- You may receive emails, text messages or be directed to websites that ask you to enter your personal information. The aim of many of these email scams and text messages is to take you to websites that may look like the a genuine site but are in fact ‘spoof’ websites. When you click on a link or enter your personal details, the information is sent to someone other than your bank or other service providers. You thought you were safe but someone else now has access to your accounts.
- Don't be fooled. Bank of Scotland may email you or send you a text message from time to time, but this communication will never ask you to enter your Internet Banking details either through an email, text message or a website. For a quick way to tell if an email is genuine, check for your name at the top of the email. We know who you are so we’ll always greet you personally in an email, but fraudsters are unlikely to know your name.
Examples of phishing emails can be found at the Bank Safe Online website*.
Report it
If you receive an email or text message that asks for your personal information, do not click on any link or provide any Internet Banking or telephone banking security details. Please forward suspicious emails or details of text messages that ask for your personal information to security@bankofscotland.co.uk and then delete it from your inbox without responding. This information will be used to help reduce fraud online.
If you have been presented with a pop-up screen asking you to enter your security details, do not enter any details and call 08456 02 00 00.
Protect yourself and your computer by having up-to-date anti-virus software, operating systems and firewalls.
More information
More information on phishing along with example emails can be found at Bank Safe Online*.
Bank Safe Online is the UK banking industry's initiative to help online banking customers stay safe online. This site is run by UK Payments on behalf of its member banks.
*Links to external sites are provided as part of our commitment to making online banking safe and secure. However, we cannot accept responsibility or liability for the content or availability of external sites. We cannot guarantee that any software downloaded from these sites will work, or be free from viruses or malicious code.


