WyzGuys Tech Talk

Phishing Email Alerts

Catch of the Day: Charles Schwab Phish
Examples of clever phish that made it past my anti-spam nets and into my inbox. Some are contributed by clients or readers like you, and other reliable sources on the Internet.

You can send phishing samples to me at phish@wyzguys.com.

My intention is to provide a warning and show current examples of phishing scams, related articles, and education about how these scams and exploits work, and how to detect them in your inbox. If the pictures are too small or extend off the page, double clicking the image will display them in a photo viewer app.

Charles Schwab Phish

This notification came from my investment advisor.

Please be advised that we were recently made aware of a widespread phishing attempt that may have impacted users across Charles Schwab. We are reaching out to notify you of this potential scam and how to detect it.

• The emails appear as though they’re coming from Charles Schwab, and they ask that the client confirm a request for asset transfer by logging into their Charles Schwab account or calling a phone number that is not associated with Charles Schwab.
• The phone number leads to a call center with a lot of background noise. When clients call Charles Schwab, they can expect to be greeted by an automated system that confirms they’re calling Charles Schwab, whereas the phishing attempt phone number leads to a live person claiming they work for Charles Schwab.
• The content of the email varies, including the transfer amount and preferred follow-up method.
  A commonality is that the salutation is not the client’s name, but rather their email address. Another commonality is that the senders email is not hidden or associated with Charles Schwab.