October 2014 Email Fraud Alert
We have received numerous reports of a phishing campaign where emails are being sent to customers and non-customers purporting to be from Fifth Third Bank Customer Service. The emails indicate that the recipient needs to open an HTML attachment, where they are asked to provide additional information. These emails were not sent out by Fifth Third Bank. Customers are advised to delete these emails without responding to them or opening the attachment.
We are aware of at least two variations on the same email.
- The body of the email varies, but the attachments are the same.
- The email sender address has a string of random letters, followed by a generic address imitating Fifth Third Bank.
- The subject is typically "Customer Service".
Below are sample copies of the emails sent and the HTML attachment.
Sample Email 1
Sample Email 2
Sample HTML Page
As you can see in the samples, the messages attempt to persuade the user to open the HTML file attached to the email. If you open the attachment, an HTML form appears with fields for you to fill in personal information, including credit/debit card information. If you provided this information and clicked on the Continue button, you would have provided all of the information the phishers need to be able to commit fraud. If you did provide the requested information and clicked the Continue button, please call a Fifth Third Bank Customer Service Professional at 1-800-676-5869.
What should you do if you receive a suspicious email?
- Do not open any attachments or click on any links.
- Do not respond to the email.
- Delete the email message from your inbox.
As a reminder, Fifth Third will never request personal or confidential information via text messages, email messages, or phone calls.
Tips to help protect you:
Education is your best defense – know what to look for and what to do. To find out more about how to protect yourself from fraud, visit the Privacy & Security Center at www.53.com/Security.
If you need assistance or discover any suspicious online sites, emails, text messages or other fraudulent activity involving your account, please call a Fifth Third Customer Service Professional at 1-800-676-5869. You may also contact us securely via our website 24 hours a day, seven days a week.