Urgent Warning for Bank of Floyd Online Customers

(scroll to bottom for latest updates)

Bank of Floyd Online Customers are being sent phishing emails by someone calling himself Ted Kaczynski. I fell for it this morning and now have had to close my account and debit card and reopen new ones. Ouch! This is not how I planned to spend Monday morning!

If you have a Bank of Floyd Online Account, you probably received a Phishing email this morning that told you that your online account was suspended and to log in and resubmit your information. Here is a copy of the email we received this morning:

Mon, Jun 9, 2008 at 9:50 AM

Dear Bank of Floyd Customer,
 
   
  This is your official notification from Bank of Floyd, your online account has expired.
    If you want to
  continue using our service you have to renew your online account. If not, your online account  will be deactivated and deleted.
 

  To continue  click here, complete the renew form
  with your current
information.

 
  Many Thanks and Kind Regards – Bank of Floyd – Update Department

This is the fake site you were directed to at BANKOFLOYD.COM:

(click to enlarge the following images)

Note that the fake site URL is bankofloyd.com.
The REAL Bank of Floyd site is bankoffloyd.com and it looks like this:

This is the Phishing page that  asks you to submit your debit card information:

Here is the information on the registration of bankofloyd.com.
It was created this very morning.

UPDATE:

I called the Bank of Floyd Online Accounts department and they told me that the emails were fake and to just delete the email.

When I explained that there was a fake site that was collecting customer data, she went online and verified for herself that there was, indeed, a site using BANKOFLOYD.COM as its URL. She agreed to lock my account until I could get down there and reopen it with new passwords and security data.

This is a really clever scam that took advantage of the fact that the real BOF did not register many different variations of bankoffloyd.com. Usually companies will register hyphenated versons and commonly misspelled versions of their domain name to prevent others from stealing traffic or phishing for customer information.

If you have a Bank of Floyd online account, you should not fall for this phishing email. Call the Bank of Floyd and ask before submitting any data.

If you fell for it as I did, your debit card information is probably on its way to several different continents and you will need to close out that debit card and start over.

What a way to begin a week!

UPDATE 2:

Gretchen and I went into the bank and were given great service by Carolyn Reed, Assistant Vice President Customer Service. We were issued new debit cards and new passwords for the account.

The bank had received the first calls from customers early in the morning and held a management meeting to deal with the problem.

According to Leon Moore, President of the Bank of Floyd, the FBI has been notified and the bank will be sending an email notice to all bank customers to ignore the earlier fake email.

Leon also said that he had received calls from people who received the emails and were not BOF customers.

Leon made the point that the Bank of Floyd does not inform customers of changes by email. They send notices by regular mail.