Well i haven’t had a moan yet but i will start. This morning 3 emails all supposedly from Barclays bank require me to confirm my details. All bogus and just after trying to get bank details, sad thing is i don’t bank with them.
Now i am no computer whizz, but i can bumble my way around. These emails all seem to follow the same format. An attactment which you open that looks just like a web page asking for you bank details. This one this morning looks as i would imagine the ‘real’ version does if such thing exists.

but it looks so real. has the banks logo etc.
Now with many that turn up i do open them and have a look, then if you right click on the page it normally allows you to view the source code. For those that don’t know what it is, thats the language that makes the web page.
Its this lovely little snippet of the code that gives it away ‘<form action=”http://ns2.compro.cz/baza.php” method=”post” ‘ This is the bit that tells you where all those lovely bank details that you have just entered have gone.
Now unless the bank is using a website in the Czech Republic, to collect and process the details, which i very much doubt. There is something fishy about this.
Now looking deeper into the source code its easy enough to see why it looks so professional.
<link type=”text/css” rel=”stylesheet” media=”all” href=”https://ibank.barclays.co.uk/p/lcl/css/ibank.css” />
This little snippet of the source code shows they are using the banks own Style sheet, thats the bit that makes the web page look nice.
<img src=”https://ibank.barclays.co.uk/p//glo/img/logo/barclays.gif”
Here shows they are even using the banks own pictures in the scam emails.
The sad truth of this is the banks can make it harder for them to look so real, by stopping the ‘Hot linking’ thats allowing the use of their pictures and other web content on other web sites not belonging to the bank, but they don’t. May websites stop hot linking in an effort to stop people “stealing” there images, after all they spent time and effort creating the images.
You have to ask why they dont, my feeling is if you fill in the details in the scam email and get money stolen from your account. It doesn’t effect them, its not their money its yours, so they don’t care. Personally i think that is the wrong attitude and they need to change there ways.
A few simple changes to there websites could stop these scam emails looking so real or at the very least make the scammers work harder.
SO spread this page around, make people aware of this failing by the banks and maybe we can make the banks change their attitude, and what ever you do never ever ever fill in one of these emails, i would hate to think of someone getting scammed this way.
Just as i am about to publish this, and my email pings to let me know a new email has arrived, and guess what this one is from NatWest. Some thing about about detecting irregularities in my account activity. Another scam email making 4 today. Seems the info in this one is going to Russia.
Just one final thought or idea, because i am sure somewhere out there is a bank that has coding to stop hot linking, every time i get a scam email that hot links an image from a bank i will edit this and post it here. If you see no picture but text where a picture should be then we know the bank has stopped hot linking.
Again please make as many people of possible aware of these scams and never ever ever fill them in.


