Fraudulent eFlow text messages still being circulated widely

• Up to 10 fake eFlow sites being set up by fraudsters in a day
• Fraudsters to target more Irish brands
• Never trust text messages – stop, think and check!

Bank of Ireland is warning that fraudsters are still circulating a high volume of fraudulent ‘eFlow’ text messages, in a wave that has now lasted since February, with up to 10 fake eFlow sites being set up in a day. The Bank is also expecting an increase in fraudulent text messages cloning more Irish brands over the coming months.

Fraudsters pretending to be the motorway operator eFlow are sending messages urging customers to pay outstanding toll charges or update account details. The website links in these messages are not genuine and are an attempt to collect personal card and online banking details. Consumers are reporting a consistently high volume of these text messages, and Bank of Ireland is warning customers to be extremely wary.

Discussing the high levels of text message fraud, Nicola Sadlier, Head of Fraud, Bank of Ireland said: “Smishing attacks tend to come in waves, and previously we have seen fraudulent messages appearing to be from delivery services, utility companies, Government agencies or banks. But this latest attack, with fraudsters sending messages purporting to come from eFlow, has lasted now for several months, which is unusual. Based on intelligence we have received, we are also expecting fraudsters to ramp up activity cloning other well-known Irish brands in the coming months, particularly electricity and gas companies.

“When you click on the eFlow text message it leads to a fake website where some will end up providing their confidential card and bank account details. The numbers of fake eFlow websites has been steadily increasing – we’re seeing anything up to 10 sites being set up by fraudsters in a day. If people recently passed through a toll, they might be more inclined to click on the text message thinking it is legitimate. eFlow has advised that they do not send text messages with links to confirm account or payment details. Text messages purporting to be from any company should be treated with extreme caution – the general rule is to stop, think and check.”

Bank of Ireland’s advice to customers in response to the current smishing scam:

• Do not click on links or respond to SMS text messages which appear as if sent by a motorway toll operator looking for payment for an unpaid toll;
• Remember that companies such as these, or banks, delivery companies, utility providers and Government agencies will never send a text linking to a website that requests online banking details;
• eFlow has advised that they do not send text messages with links to confirm account or payment details.
• Verify the identity of the sender. Call the company using their legitimate phone number (ensure you source it independently of any SMS);
• If you get a suspicious text, please email a screenshot of the text to 365Security@boi.com and then delete the text; and Bank of Ireland customers who think they gave away their banking details should call our 24/7 Freephone line 1800 946 764 immediately.

For more advice and information on fraud, visit boi.com/security or www.fraudsmart.ie