Fake logins and account theft · stamped DANGER

The bank sign-in hidden on a dentist's websiteDANGER

A real scam people fell for this year, next to the real thing. The numbers mark the three things to check: hover or tap one to see what it tells you.

Safe
WWells Fargo - Sign On×
https://connect.secure.wellsfargo.com/auth/login/present
WELLS FARGO
Good afternoon

Sign on to manage your accounts.

mrogers58
••••••••
Sign on
ScamDANGER
WWells Fargo - Sign On×
https://harbourviewdental.ca/wp-content/uploads/wf/signon.php
WELLS FARGO
Good afternoon

Sign on to manage your accounts.

mrogers58
••••••••
Sign on

Always check the address.

A copy of Wells Fargo's sign-on box, planted on a hacked dentist's website. A bank never asks you to sign in on someone else's website.

Always checkThe real oneThe scam
1Where it livesCheck firstIs it the real company's or person's own address or number?

connect.secure.wellsfargo.com is Wells Fargo's own sign-on address.

harbourviewdental.ca is a dentist's website, not Wells Fargo's.

2What it asks you to doDoes it want a password, a payment, a call, or a tap?

It asks for your username and password, on the bank's own site.

The same boxes, on a site that isn't the bank.

3How hard it pushesIs there a deadline, a threat, or a surprise charge?

No rush.

Nothing on the page: the link in a "Wells Fargo alert" text did the pushing.

RememberBefore you type a bank password, the address at the top must be the bank's own. Any other name, close the tab.

Would you have spotted it?

10 pairs like this one, three minutes, a score to share. Then find out who in the family is the easy mark.

Take the testNext scam: The robot check that runs a command →