email scams: A framework for Phishing

Revolut: phishing for your details

I received an email message from Revolut, asking me to let them know that my details are accurate. They gave me a good reason for asking; they told me that confirmation was required if I was to avoid my account being blocked. I could feel a palpable sense of urgency beginning to take over my thought processes as I contemplated what might happen if my account was restricted.

I didn’t need to be concerned, they told me that the checks were necessary to keep my account safe, it wouldn’t take long, and they had provided a handy button in the email, and all I had to do was click it.

The text then reiterated the consequences of my not clicking the button. My account would be temporarily restricted and unable to receive incoming transfers, and then they repeated the request for information.

At the bottom of the email, they said that if I had any questions, I should use the in-app chat, so I did.

Whilst I was waiting for the RevoBot to put me at my ease, I clicked on the link. I got a QR code with “Revolut” in big writing on the top left-hand corner of the screen.

The RevoBot provided the following response:

So, Revolut’s emails include clickable links, for convenience, they provide a QR code that links back to the app, but might not, and they all come from @revolut.com.

I wonder why suckers fall for email scams.