Got an email labeled as from my bank. Said I had a secure message waiting. I have in fact been talking to them about something, so it was plausible.
But the link did not open my bank's home page. It was something different, saying to register. The email also had a footer talking about "this email is protected by" - some fake company name to do with "encryption security." There was even a "more info" button leading to a page about this fake company that does encrypted messaging. Its URL was nonsense.
However, the Registration page had my email pre-filled in. If you stop to think about it, this is trivial, since the fisher had the email to send the message in the first place. But psychologically, it is an important part of the fraud. It keeps your critical mind turned off.
But the link did not open my bank's home page. It was something different, saying to register. The email also had a footer talking about "this email is protected by" - some fake company name to do with "encryption security." There was even a "more info" button leading to a page about this fake company that does encrypted messaging. Its URL was nonsense.
However, the Registration page had my email pre-filled in. If you stop to think about it, this is trivial, since the fisher had the email to send the message in the first place. But psychologically, it is an important part of the fraud. It keeps your critical mind turned off.