|
The original arrived with the graphics and crosslinks of usa.visa.com/index.html.
Even the ATM Locator worked!
So, how did we recognize it as fraud?
1) It just didn't 'feel' right. How likely is it that Visa would
know my email address, but not credit card #? That they would write
thousands of credit card holders an email that says "oops,
remind us of your credit card number, please"?
2) The verification form was not secure. It started with "http:"
where it should have been "https:" Visa policy is to yank
the Merchant Account from any business that receives its credit
card numbers in the clear like that.
3) The data collection form used a blind IP address <http://210.221.156.210/visa/>
rather than staying at usa.visa.com/whatever...
4) On revisting the email about the third time, I noticed that the
writing didn't use proper English punctuation or capitalization.
5) A backward trace on the location of the verification form timed
out switching through a Korean host.
Finally, we reported this bit of fraud to Visa and to the F.B.I.
If you have already filled out a 'verification of your credit card
information' you should call the number on the back of the card
and report it stolen, immediately. It has been stolen, even though
it is still in your hand.
|