WARNING: new Westpac internet banking fraud

Keith Whitehead · May 27, 2004

What ever you do DO NOT follow the directions in any email claiming to
be from your bank, if in doubt ALWAYS ring your local branch and ask
them if the bank has sent out this kind of email, the answer will always
be NO they do NOT do that.

From Thu May 27 11:13:04 2004Received: from its-mm1.massey.ac.nz (its-mm1 [130.123.128.45])
by its-mail1.massey.ac.nz (8.9.3/8.9.3) with ESMTP id LAA01966
for <>; Thu, 27 May 2004 11:12:11 +1200
(NZST)
Received: from mu-relay1.massey.ac.nz (Not Verified[130.123.2.98]) by
its-mm1.massey.ac.nz with NetIQ MailMarshal
id <B002e07437>; Thu, 27 May 2004 11:12:09 +1200
Received: from westpactrust.co.nz (unknown [217.129.33.16])
by mu-relay1.massey.ac.nz (Postfix) with SMTP id 04EAF37958
for xxxxxxxxxxxxxxxxxxx; Thu, 27 May 2004 11:05:06 +1200 (NZST)
Date: Wed, 26 May 2004 23:02:39 +0000
From: Westpac support <>
Subject: Official information for all Westpac New Zealand customers
To: "xxxxxxxxxxxxxxxxxx
References: <>
In-Reply-To: <>
Message-ID: <>
Reply-To: Westpac support <>
Sender: Westpac support <>
MIME-Version: 1.0
Content-Type: text/html; charset=Windows-1251
Content-Transfer-Encoding: 8bit

<html>
<head></head>
<body>
Dear Valued Customer, 
We have just installed our new security system 
which will help you to avoid frequently fraud 
transactions and to keep your investments in safety. 
 
Due to this technical update we are insisting our 
clients to verify reactivate their accounts. 
 
Please click on the link below and wait while a new window 
opens. Then fill out Westpac account verification form 
and click the 'submit' button. The verification process 
normally takes about 10 seconds but it may take longer 
during certain times of the day. When your information 
will be successfully updated, you will return to the main 
page. 
<a
href="http://ebay.dasmarket.biz/wnz/jasp.html">https://sec.westpactrust.c
o.nz/IOLB/newSession</a> 
 
We appreciate your business. It's truly our pleasure to serve you. 
 
Westpac New Zealand Customer Care 
 
This email is for notification only. To contact us, 
please log into your account and send a Bank Mail. 
</body>
</html>

Dave - Dave.net.nz · May 27, 2004

Keith said:

What ever you do DO NOT follow the directions in any email claiming to
be from your bank, if in doubt ALWAYS ring your local branch and ask
them if the bank has sent out this kind of email, the answer will always
be NO they do NOT do that.
Click to expand...

for <>; Thu, 27 May 2004 11:12:11 +1200
Click to expand...

further to that, when posting these sort of messages, be sure to
anit-spamify your email addy.

Guest · May 27, 2004

"Dave - Dave.net.nz said:

further to that, when posting these sort of messages, be sure to
anit-spamify your email addy.
Click to expand...

Ahh bugger, missed that one, got interrupted at work...oh well I already
get tons of spam each day.... sigh....

Dave Taylor · May 27, 2004

Received: from westpactrust.co.nz (unknown [217.129.33.16])
Click to expand...

05/27/04 15:57:18 dns 217.129.33.16
nslookup 217.129.33.16
Canonical name: ff-217-129-33-16.netvisao.pt
Addresses:
217.129.33.16

05/27/04 15:56:57 dig 217.129.33.16 @ 203.96.152.4
Dig [email protected] ...
Non-authoritative answer
Recursive queries supported by this server
Query for 16.33.129.217.in-addr.arpa type=255 class=1
16.33.129.217.in-addr.arpa PTR (Pointer) ff-217-129-33-16.netvisao.pt
129.217.in-addr.arpa NS (Nameserver) ns.ripe.net
129.217.in-addr.arpa NS (Nameserver) ns.netvisao.pt
129.217.in-addr.arpa NS (Nameserver) ns2.netvisao.pt
ns.netvisao.pt A (Address) 213.228.128.5
ns2.netvisao.pt A (Address) 213.228.128.6

..pt = Portugal

You could email netvisao's abuse team if you cared enough, but you should
definetely tell the bank about it so they can take actions if they wish.

Ciao, Dave

whoisthis · May 27, 2004

Dave Taylor said:

Received: from westpactrust.co.nz (unknown [217.129.33.16])
Click to expand...

05/27/04 15:57:18 dns 217.129.33.16
nslookup 217.129.33.16
Canonical name: ff-217-129-33-16.netvisao.pt
Addresses:
217.129.33.16

05/27/04 15:56:57 dig 217.129.33.16 @ 203.96.152.4
Dig [email protected] ...
Non-authoritative answer
Recursive queries supported by this server
Query for 16.33.129.217.in-addr.arpa type=255 class=1
16.33.129.217.in-addr.arpa PTR (Pointer) ff-217-129-33-16.netvisao.pt
129.217.in-addr.arpa NS (Nameserver) ns.ripe.net
129.217.in-addr.arpa NS (Nameserver) ns.netvisao.pt
129.217.in-addr.arpa NS (Nameserver) ns2.netvisao.pt
ns.netvisao.pt A (Address) 213.228.128.5
ns2.netvisao.pt A (Address) 213.228.128.6

.pt = Portugal

You could email netvisao's abuse team if you cared enough, but you should
definetely tell the bank about it so they can take actions if they wish.

Ciao, Dave
Click to expand...

Both were done, the FBI internet fraud center was also informed

Patrick Dunford · May 27, 2004

What ever you do DO NOT follow the directions in any email claiming to
be from your bank, if in doubt ALWAYS ring your local branch and ask
them if the bank has sent out this kind of email, the answer will always
be NO they do NOT do that.
Click to expand...

The poor English is a dead giveaway, but still it's scary to think that
some people are so unaware of these scammers that Westpac have actually
had customers who went to these sites and filled in their details

Jason M · May 27, 2004

The poor English is a dead giveaway, but still it's scary to think that
some people are so unaware of these scammers that Westpac have actually
had customers who went to these sites and filled in their details
Click to expand...

Why doesn't some organisation hammer hell out of the IP address that
the link goes to, as soon as the email first appears? I've had 8 of
these emails so far.
This one appears to be linking to ebay.dasmarket.biz 219.129.20.204

whoisthis · May 27, 2004

Patrick Dunford said:

The poor English is a dead giveaway, but still it's scary to think that
some people are so unaware of these scammers that Westpac have actually
had customers who went to these sites and filled in their details
Click to expand...

And the banks official line is...you give your details to anyone, we are
not responsible, if you loose all your money then tough luck go cry
elsewhere. And I agree with the bank, stupidity has its own rewards.

whoisthis · May 27, 2004

And the banks official line is...you give your details to anyone, we are
not responsible, if you loose all your money then tough luck go cry
elsewhere. And I agree with the bank, stupidity has its own rewards.
Click to expand...

Look they are back..... and the english has not improved either. Copy
sent to the bank, the ISP and the FBI internet fraud centre

From Fri May 28 07:24:15 2004Received: from its-mm1.massey.ac.nz (its-mm1 [130.123.128.45])
by its-mail1.massey.ac.nz (8.9.3/8.9.3) with ESMTP id CAA32617
for >; Fri, 28 May 2004 02:38:56 +1200 (NZST)
Received: from mu-relay1.massey.ac.nz (Not Verified[130.123.2.98]) by
its-mm1.massey.ac.nz with NetIQ MailMarshal
id <B002e17eb1>; Fri, 28 May 2004 02:38:56 +1200
Received: from westpac.co.nz (49.Red-81-44-29.pooles.rima-tde.net
[81.44.29.49])
by mu-relay1.massey.ac.nz (Postfix) with SMTP id 5BD8D3764D
for >; Fri, 28 May 2004 02:38:52 +1200 (NZST)
Date: Thu, 27 May 2004 14:34:27 +0000
From: Westpac support center <>
Subject: Official information from Westpac New Zealand
To: "K.j.whitehead" <>
References: <>
In-Reply-To: <>
Message-ID: <>
Reply-To: Westpac service center <>
Sender: Westpac support <>
MIME-Version: 1.0
Content-Type: text/html; charset=Windows-1251
Content-Transfer-Encoding: 8bit

<html>
<head></head>
<body>
Dear Valued Customer, 
We have just installed our new security system 
which will help you to avoid frequently fraud 
transactions and to keep your investments in safety. 
 
Due to this technical update we are insisting our 
clients to verify reactivate their accounts. 
 
Please click on the link below and wait while a new window 
opens. Then fill out Westpac account verification form 
and click the 'submit' button. The verification process 
normally takes about 10 seconds but it may take longer 
during certain times of the day. When your information 
will be successfully updated, you will return to the main 
page. 
<a href="http://ebay.dasmarket.biz/wnz/jasp.html">https://sec.westpactrust.co.nz/IOLB/newSession</a> 
 
We appreciate your business. It's truly our pleasure to serve you. 
 
Westpac New Zealand Customer Care 
 
This email is for notification only. To contact us, 
please log into your account and send a Bank Mail. 
</body>
</html>

brundlefly · May 27, 2004

whoisthis said:

And the banks official line is...you give your details to anyone, we
are not responsible, if you loose all your money then tough luck go
cry elsewhere. And I agree with the bank, stupidity has its own
rewards.
Click to expand...

You seem then to think that there is nothing wrong with fraudulently
impersonating a communication from a bank, obtaining their customer lists,
setting up fraudulent online transaction systems to harvest credit card
details, because it is all the customers fault once they are deceived.
They are criminal activities like those of any paper fraudster and the law
provides for reparation

brundlefly · May 27, 2004

Dave said:

further to that, when posting these sort of messages, be sure to
anit-spamify your email addy.
Click to expand...

whoisthis ?
ROTFLMAO

whoisthis · May 28, 2004

"brundlefly said:

You seem then to think that there is nothing wrong with fraudulently
impersonating a communication from a bank, obtaining their customer lists,
setting up fraudulent online transaction systems to harvest credit card
details, because it is all the customers fault once they are deceived.
They are criminal activities like those of any paper fraudster and the law
provides for reparation
Click to expand...

NO, I believe if you are stupid enough to give out your details to
someone else it is YOUR problem not the banks. I am a firm believe that
fraudsters like this should pay 100% reparation and serve at least 10
years in prison if reparation is made and 20 if reparation is not made.

brundlefly · May 28, 2004

whoisthis said:

NO, I believe if you are stupid enough to give out your details to
someone else it is YOUR problem not the banks. I am a firm believe that
fraudsters like this should pay 100% reparation and serve at least 10
years in prison if reparation is made and 20 if reparation is not made.
Click to expand...

But of course the details would not be given to anyone who wasn't
impersonating the bank, and it is a problem for the banks, because they have
now had to send notices to all their customers, some of whom will cease to
use online banking because of their lack of trust.
If I was a bank, I wouldn't be saying harhar tuf luk u r owned to my
customers, I would be saying please please tell us asap if you have
inadvertantly disclosed your details and we will freeze your transactions,
and we will put in place procedures to monitor suspicious transactions,
because that is the sort of service I expect in return for the use of my
money.
Westpac are good at this, we frequently do business with our customers
buying and selling products and services, and they have a system of flagging
and querying the ones that are outside defined parameters.
I guess you don't have customers in your business.

Patrick Dunford · May 28, 2004

You seem then to think that there is nothing wrong with fraudulently
impersonating a communication from a bank, obtaining their customer lists,
setting up fraudulent online transaction systems to harvest credit card
details, because it is all the customers fault once they are deceived.
They are criminal activities like those of any paper fraudster and the law
provides for reparation
Click to expand...

The bank is not liable, as stated above. I doubt it would be easy to get
a prosecution of someone in an overseas country, even if somehow they are
able to be identified.

whoisthis · May 28, 2004

"brundlefly said:

money.
Westpac are good at this, we frequently do business with our customers
buying and selling products and services, and they have a system of flagging
and querying the ones that are outside defined parameters.
I guess you don't have customers in your business.
Click to expand...

and you will find that westpac will accept ZERO liability if you are
stupid enough to give out your details to anyone. They may well freeze
your account but is it has been raided before then well they will have
sympathy I am sure but ZERO liability. As for who I work for, yes we
have thousands of "customers" and the same applies to them, if they are
stupid enough to give out personal details to others then they rus the
risk, not us. I would challenge you to find any business that operates
differently.

brundlefly · May 29, 2004

whoisthis said:

and you will find that westpac will accept ZERO liability if you are
stupid enough to give out your details to anyone. They may well freeze
your account but is it has been raided before then well they will have
sympathy I am sure but ZERO liability. As for who I work for, yes we
have thousands of "customers" and the same applies to them, if they are
stupid enough to give out personal details to others then they rus the
risk, not us. I would challenge you to find any business that operates
differently.
Click to expand...

You are correct about liability but I'm talking about attitude.

whoisthis · May 29, 2004

"brundlefly said:

You are correct about liability but I'm talking about attitude.
Click to expand...

MY attitude is also right. The banking scams, nigerian scams, etc etc
etc have been so widely publicised over the YEARS that anyone who falls
for them deserves to. BTW I always forward the scams sent to me to the
FBI internet fraud centre as I am keen to see the bastards in jail.

brundlefly · May 29, 2004

whoisthis said:

MY attitude is also right. The banking scams, nigerian scams, etc etc
etc have been so widely publicised over the YEARS that anyone who falls
for them deserves to. BTW I always forward the scams sent to me to the
FBI internet fraud centre as I am keen to see the bastards in jail.
Click to expand...

No, a new net user or a bank does not "deserve" to be the target of
fraudsters.

Obligatory Kent Brockman quote:
"I blame you, the viewers"

Bruce Simpson · May 29, 2004

No, a new net user or a bank does not "deserve" to be the target of
fraudsters.

Obligatory Kent Brockman quote:
"I blame you, the viewers"
Click to expand...

For what it's worth -- Westpac sent an email warning to all its online
banking customers as soon as the phishing email was detected.

Unfortunately, those emails were flagged as spam by a good number of
spam filters around the place (including Yahoo Mail).

As a result, many people won't ever see that timely warning -- or at
least won't see it until next time they bother to check their bulk
email folder.

You think Westpac could hire a half-decent company to handle these
email warnings eh?

brundlefly · May 29, 2004

Bruce Simpson said:

For what it's worth -- Westpac sent an email warning to all its online
banking customers as soon as the phishing email was detected.

Unfortunately, those emails were flagged as spam by a good number of
spam filters around the place (including Yahoo Mail).

As a result, many people won't ever see that timely warning -- or at
least won't see it until next time they bother to check their bulk
email folder.

You think Westpac could hire a half-decent company to handle these
email warnings eh?
Click to expand...

Yeah there must be a few parasites around only too eager to exploit their
collective misfortune.

WARNING: new Westpac internet banking fraud

Keith Whitehead Guest

Advertisements

Dave - Dave.net.nz Guest

Advertisements

Guest Guest

Dave Taylor Guest

whoisthis Guest

Patrick Dunford Guest

Jason M Guest

whoisthis Guest

whoisthis Guest

brundlefly Guest

brundlefly Guest

whoisthis Guest

brundlefly Guest

Patrick Dunford Guest

whoisthis Guest

brundlefly Guest

whoisthis Guest

brundlefly Guest

Bruce Simpson Guest

brundlefly Guest

Advertisements

Want to reply to this thread or ask your own question?

Can't Confirm Banking Transfers- Online Banking Bank of America (Firefox1.0)

Fake Westpac email

"Westpac" scam

Credit Card FRAUD Warning for online stores

banking fraud in the news

banking fraud alert!

â€œYou have new Westpac bank statement is available.â€

Reporting Fraud and Attempted Fraud

WARNING: new Westpac internet banking fraud

Keith Whitehead Guest

Advertisements

Dave - Dave.net.nz Guest

Advertisements

Guest Guest

Dave Taylor Guest

whoisthis Guest

Patrick Dunford Guest

Jason M Guest

whoisthis Guest

whoisthis Guest

brundlefly Guest

brundlefly Guest

whoisthis Guest

brundlefly Guest

Patrick Dunford Guest

whoisthis Guest

brundlefly Guest

whoisthis Guest

brundlefly Guest

Bruce Simpson Guest

brundlefly Guest

Advertisements

Want to reply to this thread or ask your own question?

Useful Searches