A new phishing scam targeting Chase bank customers has hit inboxes world-wide that not only tricks you into giving criminals your personal information, but can even bamboozle you into uploading a selfie with a personal ID or driver’s license!
Phishing scams have become so common that it all feels like a blur. However, this one does something different that makes it stand out from the rest so we made a short video that explains how the scam works: https://youtu.be/-m-Znh6YUJo
Like most phishing sites, when you get the scam’s landing page you will be greeted by a convincing looking login form to access your Chase online account.
First page of Chase Phishing Site
When you attempt to login, there is of course something wrong with what you entered and it will ask you to verify your identity.
Verify your account
In a series of pages, the phishing site will now load attractive and well designed forms that attempt to gather any information that can be used to not only gain access your Chase accounts, but to steal your identity.
After the site has harvested as much personal information as possible, they seal the deal by asking you to confirm your identity by uploading a selfie of yourself with an ID card. They ask you to upload a both sides of your driver license or ID card.
Upload Selfie and Driver License
With all this information, scammers have a complete profile they can use to to assume your identity online.
As you can see it always important to make sure that you closely examine the URL in a browser’s address bar before you submit any sensitive or personal information to a site. For example, this phishing site was utilizing the URL chasexxxx.ddns.net, which should have been obvious to anyone that this is not a Chase address.
Financial, cryptocurrency and gambling sites
Asking a victim to upload a selfie while holding their ID card is not a common request for phishing sites.
It is though a common request to upload selfies or use selfie ID verification when creating accounts or withdrawing funds at sites where you might transfer money, purchase or trade cryptocurrency , or gamble. There’s a good chance that this new scam is targeting individuals for this specific purpose.
The take away
I think this one is pretty obvious. Any online entity that requests a picture of your identification should be suspect. I recommend not showing your ID to anyone unless you’re there in person, say at a bank branch or office. Your identity is one of your most prized possessions – protect it!
Stay safe out there.