fish´ing) (n.) The act of sending an e-mail to a user falsely claiming to be an established legitimate enterprise in an attempt to scam the user into surrendering private information that will be used for identity theft. The e-mail directs the user to visit a Web site where they are asked to update personal information, such as passwords and credit card, social security, and bank account numbers, that the legitimate organization already has. The Web site, however, is bogus and set up only to steal the user’s information. For example, 2003 saw the proliferation of a phishing scam in which users received e-mails supposedly from eBay claiming that the user’s account was about to be suspended unless he clicked on the provided link and updated the credit card information that the genuine eBay already had. Because it is relatively simple to make a Web site look like a legitimate organizations site by mimicking the HTML code, the scam counted on people being tricked into thinking they were actually being contacted by eBay and were subsequently going to eBay’s site to update their account information. By spamming large groups of people, the “phisher” counted on the e-mail being read by a percentage of people who actually had listed credit card numbers with eBay legitimately.

EXAMPLE 1:

Subject: Account Update Required

Dear Old Dominion University C.U. Account Holder,

Our new web banking system requires our members to upgrade
their online accounts. To ensure the validity of your account
you must confirm your identity by completing our online forms.

To access our online form just click on the following link:

http://www.huyskens.com/oducu/

After completing all the required information, you will receive
a confirmation email if your account has been approved within
24-48 hours.

Thank you for your time,
Old Dominion University C.U.

EXAMPLE 2:

Subject: NCUA Verification Process

NCUA Home | Search | Privacy Policy & Accessibility | Site Map | Contact Us

National Credit Union Administration
Share Insurance | Resources for Credit Unions | Resources for Consumers | News
| Search

Important security renewal

Dear CU holder account,

This notice informs you that your Credit Union bank has joined our Federal
Credit Union(FCU) network. For both, our and your security, we are asking you
to activate an online account on our database. After activation you can login
on our system with your Card Number and your Credit/Debit PIN number.

You must visit the FCU activation page and fill in the form to activate your
online account:

http://www.ncua.gov/activate_account.html

In accordance with NCUA User Agreement, you can use your online account in 24
hours after activation. We thank you for your prompt attention to this matter.
Please understand that this is a security measure intended to help protect you
and your account.

We apologize for any inconvenience.

Sincerely, NCUA Account Review Department

------------------------------------------------------------------------------
--

Please do not reply to this e-mail. Mail sent to this address cannot be
answered.