Tools & Education

Phishing and Vishing

What is phishing? What is vishing?

Phishing occurs when an email is sent that pretends to be from a bank or major online merchant, such as Amazon or EBay. The email will request that the user click on a link to verify their account information. The user is then directed to a fake site that collects login and password information, which is then used to steal credit card and other personal information. Citizens Bank will never solicit confidential information about your accounts through email.

Vishing is newer variation on the same theme. You will receive a phone call or an email with a message reporting some problem with your accounts, such as your credit card has been breached, and requesting that you contact a number immediately. When you call the number, another message will ask for information to verify your identity and account information, something like, "This is account verification. Please enter or say your name, social security number and 16 digit account number." If you do, the thieves will have your information.

Never respond to a phone call or email about your account using the phone number provided in the email or phone call. If you ever have any question about any of your Citizens Bank accounts, simply call our Client Services number: 1-800-676-6276 or visit your local branch.

Tips to avoid phishing

  • If you receive an unexpected e-mail saying your account will be shut down unless you provide financial or personal information, do not reply or click on any of the links in the e-mail.
  • Before submitting financial information through a web site, look for the “lock” icon on the browser’s status bar. It means that the information is a secure server transmission. Only submit information to a web site if you have personally typed in what you know to be a valid web site address – if you got to the web site through a link from any source, do not submit any personal information.
  • If you are uncertain about the information, contact the company through an address or telephone number you know to be genuine
  • If you unknowingly supplied personal or financial information, contact your credit card company or bank immediately
  • Suspicious e-mail can be forwarded to spam@uce.gov and complaints should be filed with the state attorney general’s office or through the FTC at www.ftc.gov.
For more information on phishing, please visit http://www.aba.com/Consumer+Connection/033104PHISH.htm