SG-SSB NOTICE TO CUSTOMERS AND THE GENERAL PUBLIC

‘PHISHING’ SCAM ALERT

In computer security, the term phishing is the fraudulent process of attempting to acquire sensitive information such as usernames, credit card details, bank account information, Social Security numbers, passwords or other sensitive information by pretending to be a trustworthy entity in an electronic communication.

Communication claiming to be from a business or organization that you may deal with. For example, an Internet service provider (ISP), bank, online payment service, popular social web sites, online payment processors or even a government agency are commonly used to lure the unsuspecting public. The message may ask you to “update,” “validate,” or “confirm” your account information.

Phishing is typically carried out by e-mail or instant messaging, which often directs users to enter details at a fake website which is almost identical to the legitimate one. Phishing is an example of social engineering techniques used to fool users.

Phrases like;

“We suspect an unauthorized transaction on your account. To ensure that your account is not compromised, please click the link below and confirm your identity.”

“During our regular verification of accounts, we couldn’t verify your information. Please click here to update and verify your information.”

THE PUBLIC IS ADVISED TO TAKE THE FOLLOWING PRECAUTIONS IN SUCH INSTANCES:

If you get an email or pop-up message that asks for personal or financial information, do not reply or click on the link in the message, either. If you are concerned about your account, contact the organization mentioned in the email using a telephone number you know to be genuine, or open a new Internet browser session and type in the company’s correct Web address yourself. Do not cut and paste the link from the message into your Internet browser — phishers can make links look like they go to one place, but that actually send you to a different site.

DO NOT EMAIL PERSONAL OR FINANCIAL INFORMATION.

 If you must provide your personal or financial information through an organization’s website, look for indicators that the site is secure, like a lock icon on the browser’s status bar or a URL for a website that begins with “https:” (the “s” stands for “secure”). Unfortunately, no indicator is foolproof; some phishers have forged security icons.

Review your bank account statements as soon as you receive them to check for unauthorized charges. Contact SG-SSB immediately where you find a discrepancy.

Scan any attachment or files you download from emails you receive, regardless of who sent them as these files can contain viruses or other software that can weaken your computer’s security.

Forward any email (spam) that is phishing for information to us at sg-ssb.info@socgen.com if you believe that SG-SSB LTD is being impersonated in the phishing email.