More on identity theft in this article in Techtree (India): Fax-Back Phishing Scam. The details:
The e-mails direct users to a Microsoft Word document hosted on a website and urge them to download a form, fill it out with their bank account details, including credit card numbers, PIN information and login details and fax it to a toll-free number.Notwithstanding that it may end up being stupidly easy to track down the end-point of that fax number [of course, the fax could be acting as nothing more than a re-router and putting the scanned data onto the Internet before it's transmitted to safety . . .], the part I love about this scam is it's Aikido-like approach.
People think that sending information over the Web is dangerous. Sending that same information by fax, we perceive, is far safer. One scepticism-obstacle down, so the only thing the phisher needs to do is be suitably convincing with the come-on. They use the perception of danger online to move people to do the same stupid thing offline. [Then, of course, they'll blame the Internet for the ID theft (see post immediately below).]
Posted by Grayson at August 12, 2005 07:43 AM