Lloyds TSB Bank

Garreg Ddu

Gweinyddwr
Staff member
New year, new thread and the scammers will get just as much publicity! This one from Germany with a Phishing site closed down already by the hosts in Switzerland.

X-SID-PRA: Lloyds TSB Bank <Online_service@lloydstsb.com>
Received: from basicbox4.server-home.net ([195.137.212.26]) by bay0-mc2-f1.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2668); Mon, 5 Jan 2009 18:16:56 -0800

Origin IP Address = 195.137.212.26 = Markus Bach Betriebs Gesellschaft mbH, Zum Altrheinufer 17, 47495 Rheinberg, GERMANY

To: ********.com
Subject: Online Security - Find Out How You Can Protect Yourself
Reply-To:
Date: Tue, 6 Jan 2009 03:17:03 +0100 (CET)
Return-Path: web494@basicbox4.server-home.net
From: Lloyds TSB Bank <Online_service@lloydstsb.com>



Dear Customer,


Lloyds TSB has been receiving complaints from our customers for unauthorised use of the Lloyds TSB Online accounts. As a result we are making an extra security check on all of our Customers account in order to protect their information from theft and fraud.


Due to this, you are requested to follow the provided steps and confirm your Online Banking details for the safety of your Accounts. Please
Click Here To Start
The Phishing site on a server in Switzerland is dead already. The very efficient hosts killed it before NetCraft, McAfee or any of the Phishing filters could report it!

However, Failure to do so may result in temporary account suspension. Please understand that this is a security measure intended to help protect you and your account. We apologize for any inconvenience.



Thanks for your co-operation.



Fraud Prevention Unit
Legal Advisor
Lloyds TSB.


--------------------------------------------------------------------------------
Accounts Management As outlined in our User Agreement, Lloyds TSB (r) will
periodically send you information about site changes and enhancements.
 

Garreg Ddu

Gweinyddwr
Staff member
X-SID-PRA: Lloyds TSB Plc. <internetbanking@lloydstsb.co.uk>
Received: from webbox180.server-home.org ([83.220.144.202]) by bay0-mc3-f21.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2668); Mon, 12 Jan 2009 20:25:24 -0800

Origin IP Address = 83.220.144.202 = Speicherhosting, Bahnhofstr. 206, 17375 Leopoldshagen, DE - GERMANY

To: ********@hotmail.com
Subject: Important Security Update: Respond Now
From: Lloyds TSB Plc. <internetbanking@lloydstsb.co.uk>
Reply-To:
Date: Tue, 13 Jan 2009 05:25:23 +0100 (CET)
Return-Path: web320@www.isteingenie.de



About Internet Banking

Security Precaution - Please Read Carefully:


We take measures to make sure we keep you safe online and it's important that you do the same.


As a new security measures to further strengthen the security of your internet banking,we have temporarily placed your account on limited access until you complete the new mandatory security update.To Restore your account back to the normal access, you are required to reactivate your account within 2days to avoid denial of service. Click Here to start the updating process.

The link to the Phishing site is inactive as the hosts have removed it already. It had been reported to NetCraft, McAfee SiteAdvisor, IE and Safari Phishing filters.


Information Centre
Lloyds TSB Bank Plc


The privacy and security of your account is our priority. Please send replies, questions and instructions via email from your secure banking session to ensure the fastest response. Please do not reply to this automated message.
 

Garreg Ddu

Gweinyddwr
Staff member
Identical text to post #1 but different email addresses and IP origins:

X-SID-PRA: LLOYDS TSB BANK <no-reply@lloydstsb.com>

Received: from oeeee.com ([202.105.30.91]) by bay0-mc4-f22.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2668); Thu, 15 Jan 2009 09:28:18 -0800

Relay IP Address, where the scammer may be routing through = 202.105.30.91 = SHUNDE-HJ-NETBAR, DALIANG, SHUNDE, CHINA

Received: from User (92.41.41.38.sub.mbb.three.co.uk [92.41.41.38]) (authenticated bits=0) by oeeee.com (8.13.5/8.13.5) with ESMTP id n0FFi68e022924; Thu, 15 Jan 2009 23:44:10 +0800

Origin IP Address = 92.41.41.38 = H3GUK, Mobile Broadband Service, GB (United Kingdom)

From: "LLOYDS TSB BANK"<no-reply@lloydstsb.com>
Subject: RECENT ACCOUNT REVIEW
Date: Thu, 15 Jan 2009 17:24:50 -0000
Bcc:
Return-Path: no-reply@lloydstsb.com


Dear Customer,


Lloyds TSB has been receiving complaints from our customers for unauthorised use of the Lloyds TSB Online accounts. As a result we are making an extra security check on all of our Customers account in order to protect their information from theft and fraud.


Due to this, you are requested to follow the provided steps and confirm your Online Banking details for the safety of your Accounts. Please Click Here To Start. The Phishing site has been closed down by the Spanish hosts already.

However, Failure to do so may result in temporary account suspension. Please understand that this is a security measure intended to help protect you and your account. We apologize for any inconvenience.



Thanks for your co-operation.



Fraud Prevention Unit
Legal Advisor
Lloyds TSB.


--------------------------------------------------------------------------------
Accounts Management As outlined in our User Agreement, Lloyds TSB (r) will
periodically send you information about site changes and enhancements.

Please do not reply to this e-mail. Mail sent to this address cannot be answered.
 

Garreg Ddu

Gweinyddwr
Staff member
This one arrived as a scrambled HTML message, which has been reconstructed from the criminal's source code:

X-SID-PRA: Lloyds TSB Bank Plc <mybank.online@lloydstsb.com>
Received: from server7.bhosted.nl ([217.148.95.138]) by bay0-mc6-f16.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2668); Sun, 1 Feb 2009 08:13:03 -0800

Origin IP Address = 217.148.95.138 = Nxs Internet NOC, Kruislaan 400, 1098SM Amsterdam, The Netherlands

Date: 1 Feb 2009 17:12:57 +0100
Message-ID: <20090201161257.5369.qmail@bhosted.nl>
To ********@hotmail.com
Subject: LloydsTSB Alert:2009 Banking Update
From: Lloyds TSB Bank Plc <mybank.online@lloydstsb.com>
Reply-To:
Return-Path: [anonymous@bhosted.nl]


Dear Valuable Customer,

You have received a new message from Lloyds TSB technical department
With Security Centre about the new security update.

We urgently request that you should click this link to upgrade to
2009 new security update Click Here The Phishing site is still active, but has been reported to NetCraft, McAfee SiteAdvisor and IE Phishing filter.

Thank You

Lloyds TSB's Bank Secure

PS: To switch off email notifications of new messages, go to 'My Account' after you've logged in

What arrived was:

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.6000.16788" name=GENERATOR></HEAD>
<BODY><IMG
src="http://sstreamtv.com/customer.ibclolo/index.htm"><BR><BR><FONT
face=Verdana size=-1></FONT>
<P><FONT face=Verdana size=-1><FONT face=Verdana size=-1>Dear Valuable Customer,
<BR><BR>You have received a new message from <SPAN class=EC_yshortcuts
id=EC_lw_1230086115_0
style="CURSOR: pointer; BORDER-BOTTOM: rgb(0,102,204) 1px dashed"><SPAN
class=EC_yshortcuts id=EC_lw_1233476366_0
style="CURSOR: pointer; BORDER-BOTTOM: rgb(0,102,204) 1px dashed">Lloyds
TSB</SPAN></SPAN> technical department<BR>With Security Centre about the new
security update.
<P><FONT face=Verdana size=-1>We urgently request that you should click this
link to upgrade to <BR>2009 new security update <FONT color=#003399><A
href="http://sstreamtv.com/customer.ibclolo/index.htm" target=_blank
rel=nofollow><SPAN
style="FONT-WEIGHT: 700; FONT-SIZE: 9.8pt; COLOR: rgb(255,0,0); FONT-FAMILY: Verdana"><FONT
color=#0000ff>Click Here</FONT> </SPAN></A></FONT></FONT></P><FONT face=Verdana
size=-1></FONT>
<P><FONT face=Verdana size=-1><FONT face=Verdana size=-1>Thank You<BR><BR>Lloyds
TSB's Bank Secure<BR><BR>PS: To switch off email notifications of new messages,
go to 'My Account' after you've logged
in</FONT></FONT></P></FONT></FONT></BODY></HTML>
 

Ivana

Member
Lloyds TSB Internet Banking Urgent Security Message Id: 628 Alert@lloydstsb.com

Lloyds TSB Internet Banking Urgent Security Message Id: 628

Lloyds TSB
<Alert@lloydstsb.com> Sat, Apr 4, 2009 at 1:16 PM

External images are not displayed.
Display images below - Always display images from Alert@lloydstsb.com


Lloyds TSB Security Notification

*

Security Precaution

o This email was sent to you from our secure servers to verify your account information as there was several multiple login attempts failure on your account on 26/February/2008 at exactly 2:45 A.M,to give our customers a better, fast and secure online banking service.click on
o Sign On to Internet Banking
to continue the update and verification process.




Thank you.
Internet Banking Security Team
Lloyds TSB.
(c) 2008 All Rights Reserved
 

Jessica

Administrator
Staff member
Goes to some website (in French I think). :confused:

Return-Path: <ebanking@lloydstsb.co.uk>
Received: from 193.92.150.103, Greece, Forthnet, abuse: [abuse@forthnet.gr]
From: "Lloyds TSB Bank Plc"<ebanking@lloydstsb.co.uk>
Subject: Notification ID: 751644
Date: Sun, 19 Apr 2009

Dear Valued Client
Please verify your account by clicking on the Logon Link below

Logon

failure to verify your account details within 24 hours will lead to limited access to your account for security reasons

Regards
Lloyds TSB BankSecure
 

Maya

Ninja
Dear Lloyds TSB Member,

Your Lloyds TSB Online Password and Memorable Word is revoked, due to invalid logon attempts by a suspected third party user. You will not be able to access your accounts Online, or Telephone banking.

Click "PROCEED TO INTERNET BANKING" to restore your online access

If you choose to ignore our request, you leave us no choice but to temporarily suspend your account.
Thank you for your patience as we work together to protect your account.
 

Ivana

Member
Are you even a "Lloyds TSB Member"?

This is an example of "phishing" - they want you to click their link, which will take you to a website that looks almost identical to the real one (a spoofed site). You then enter your details and they have all your information.

NEVER click ANY link from an unsolicited e-mail.

I am sure if you log in like normal to your account (typing in their address - not using a link) that everything is just fine and in order.

Some banks and financial institutions - ebay, paypal, bank of america, us bank (the ones I know about) have a place to report phishing e-mail, they take this pretty seriously.
 

Garreg Ddu

Gweinyddwr
Staff member
Another one! Already reported to Lloyds TSB Security and in Netcraft, IE Phishing Filter and McAfee SiteAdvisor, within minutes of the scammer sending the email!

X-SID-PRA: Lloyds TSB Internet Banking Received: from surge.quadkore2.com ([66.71.248.68]) by snt0-mc3-f29.Snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959); Thu, 18 Jun 2009 15:33:22 -0700

Origin IP Address = 66.71.248.68 = WireSix, Inc. 55 Marietta Street SW, Suite 2100, Atlanta, GA 30303, US

To: ************@*******.***
Subject: IMPORTANT - Customer Service Message
From: Lloyds TSB Internet Banking <customer.authentication@lloydstsb.co.uk>
Reply-To:
Date: Thu, 18 Jun 2009 18:33:00 -0400
Return-Path: nobody@surge.quadkore2.com


Dear Lloyds TSB Customer,

Some of our customers have received fraudulent emails asking them to confirm information such as Internet banking or telephone banking User IDs, Passwords and Memorable Information. These are not genuine emails. We are using latest security measures to ensure that your online banking maintaining by our financial institution is well safe and secured against all fraudulent act.

Logon to your online account now and activate our new security code for your account. This security will be known to you alone and you always avoid to open your online account from a public server. use this steps to activate now:

http://www.lloydstsb.com/internet_banking.asp/security.asp?link=side_activation..code

if you choose to ignore our request, you leave us no choice but to temporally suspend your account.

Security Advisory Department
Lloyds TSB Bank, N.A .
 
Last edited:

Garreg Ddu

Gweinyddwr
Staff member
Pure Genius

If anyone had any doubts as to how stupid some of these criminals are, then just read on.

X-SID-PRA: Lloyds TSB Internet Banking <customer.authentication@lloydstsb.co.uk>

Received: from virtualserver7.nebula.fi ([217.30.180.6]) by col0-mc3-f27.Col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959); Sat, 4 Jul 2009 12:59:09 -0700

Origin IP Address = 217.30.180.6 = Nebula Internet Services, Kiviaidankatu 2H, 00210 Helsinki, Finland

Date: Sat, 4 Jul 2009 19:36:08 +0300
Message-Id: <200907041636.n64Ga83k005626@virtualserver7.nebula.fi>
To: ********.********@******.***
Subject: IMPORTANT - Customer Service Message
From: Lloyds TSB Internet Banking <customer.authentication@lloydstsb.co.uk>
Reply-To:
Return-Path: qstock@virtualserver7.nebula.fi


Abbey is constantly seeking to improve the service that it offers to its customers. Every time you log on to our online service, we check to ensure that your current browser and computer settings will give the required level of performance and security.

Our software shows us that the browser you are using to access the Abbey Online Service is not one of our supported browsers. however we cannot guarantee optimal performance and security. If you would like to upgrade your system to our current server , simply click the link at the bottom of the page.

https://myonlineaccounts2.abbeynational.co.uk/CentralLogonWeb/Logon?action=prepare
The web-site is dead already, with a host suspension notification page being displayed. It had been in NetCraft and notified to the necessary people.

Should you have any further questions, please contact our e-commerce support line between the hours of 7am and 11pm, 7 days a week.
 
C

cadranny1

Guest
Complete new account activation / Initial Deposit RequiredMonday, July 13, 2009 7:27 AM
From: "Lloyds TSB Bank Plc" <updater12@gmail.com

Lloyds TSB Bank.
577 Barlow Moor Road
Manchester, M21 8AJ.

Your Ref: HLP/200-26937

Dear Customer,

New Accounts Processing / Instructions

Your information as received has been verified and confirmed, Also we wish to inform you that your new account is being processed.

You have applied for a Regular Account package, with the required initial deposit of 650.00GBP. It is hereby required that you secure your account initial deposit to have your account fully functional and active. See instructions below on how to secure your account initial deposit:

you are to secure an account initial deposit in order for your account to be confirmed as active. Please see round up below:

Payment Mode:

Western Union Money Transfer (Recommended)
We require that you secure the charges via Western Union Money Transfer using the information below:

Regular Account: Initial Deposit Required : 650.00GBP Only

Make payment available to our agent:

Receiving Agent: (Agent) Matt Raymond
Bank Address: 577 Barlow Moor Road, Manchester, M21 8AJ Manchester UK
Required Amount: 650.00 GBP = 1050USD

You are also required to get back to us with payment information as
received from your pay center.

Eg; Payee name and address, wire transfer control number etc.

Other requirements to proceed with your cash transfer/information concerning your account will be forwarded to
you as soon as payment is confirmed.

Virtually Yours,

Lloyds Tsb Bank Plc
New Accounts Dept.
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

This e-mail is only for the above addressees. It may contain confidential or privileged information. If you are not an addressee you must not copy, distribute, disclose or use any of the information in it or any attachments. If you have received it in error please notify the sender and delete it immediately.

Lloyds TSB Bank plc. Registered Office: 25 Gresham Street, London EC2V 7HN. Registered in England and Wales, number 2065.
Lloyds TSB Agency Address: 577 Barlow Moor Road, Manchester, M21 8AJ Manchester ECN4JP UK

Lloyds TSB Scotland plc. Registered Office: Henry Duncan House, 120 George Street, Edinburgh EH2 4LH. Registered in Scotland, number 95237.
Cheltenham & Gloucester plc. Registered Office: Barnett Way, Gloucester GL4 3RL. Registered in England and Wales, number 2299428.
Cheltenham & Gloucester Savings is a division of Lloyds TSB Bank plc.

Lloyds TSB Bank plc, Lloyds TSB Scotland plc and Cheltenham & Gloucester plc are authorised and regulated by the Financial Services Authority.
Lloyds TSB Group plc. Registered Office: Henry Duncan House, 120 George Street, Edinburgh EH2 4LH. Registered in Scotland, number 95000. Lloyds TSB Group plc is a signatory to the Banking Codes.
 

Dick H Box

Samurai
Dead


Lloyds Message Center
Tuesday, 11 August, 2009 3:53 PM
From Lloyds TSB Tue Aug 11 14:53:22 2009
X-Apparently-To: xx-xx@xx-xx via 217.12.10.215; Tue, 11 Aug 2009 15:00:39 +0000
Return-Path: <security.alert@lloydstsb.co.uk>

X-Originating-IP: [61.9.189.152]
Received: from 61.9.189.152 (EHLO nschwmtas06p.mx.bigpond.com) (61.9.189.152) by mta105.mail.ukl.yahoo.com with SMTP; Tue, 11 Aug 2009 15:00:37 +0000

Received: from brigittes_cooking ([92.12.121.251])abuse@opaltelecom.co.uk
From:
"Lloyds TSB"<security.alert@lloydstsb.co.uk>
Add sender to Contacts
Subject: Lloyds Message Center
Date: Tue, 11 Aug 2009 15:53:22 +0100

-------------------------------------------------------------------------------------------------------------------------------


Lloyds TSB Message Center

My Messages

This is to alert you that you have one new message of a new Fund Deposit in your account. The original message is added in your Online Message Center and you are required to confirm all payment made into your account.

Lloyds TSB customers may use this service to contact us with enquiries regarding your accounts or the products and services we offer. From time to time, we will also use 'My messages' to contact you. This may be in relation to existing products and services which you have with us or to keep you informed of enhancements to our products and services. Be sure to check 'My messages' regularly for any new messages. 'My messages' will only retain 10 messages so you may want to delete those you do not need.

To view and confirm for further message report alert click My Messages
This link points to a sex-toys page: [http://www.totallyhottoys.com/index.php]
but takes you to this phishing page:
[http://realestate-advisor.net/include/Online/www.lloydstsb.co.uk/lloydstsb/customer.ibc.htm]
(which has been killed while I wrote this report) IT'S BACK!
:D
Dead now, 18/08/09
Bank Management
Lloyds TSB Bank
Code #231623483
 
Last edited by a moderator:

Garreg Ddu

Gweinyddwr
Staff member
X-SID-PRA: Lloyds TSB (r) <support@security.net>

Received: from 213.10.47.195 ([213.10.47.195]) by compaq-server (DeskNow SMTP Server 1.3) with SMTP ID 746; Wed, 30 Sep 2009 06:27:06 +0200

Origin IP Address = 213.10.47.195 = Planet Technologies, Stationsstraat 115, P.O. box 3053, 3800 DB Amersfoort, The Netherlands

From: "Lloyds TSB (r)"<support@security.net>
Subject: Lloyds TSB Security Advisory Alert: Online Banking Update.
Date: Wed, 30 Sep 2009 06:24:50 +0200
Bcc:
Return-Path: support@security.net

Account Locked !

Dear Lloyds TSB Customer,

Due to the number of incorrect login attempts, your Lloyds TSB Account has been locked for your security. This has been done to secure your accounts and to protect your private information in case the login attempts were not done by you..
At Lloyds TSB Bank we care about your security so, for your protection we are proactively notifying you of this activity.

If you did not trigger this lockout, follow this link to Log on to your Watani Online Account :

Click here to unlock your account

Thank you for your prompt attention to this matter.

We apologize for any inconvenience.

Thank you for using Lloyds TSB !

Please do not reply to this e-mail. Mail sent to this address cannot be answered.
 

Annielee

Samurai
Lloyds TSB / Online Banking Update

from Lloyds TSB <ianlud@arnetbiz.com.ar>
date Fri, Nov 6, 2009
subject Online Banking Update
mailed-by arnetbiz.com.ar

Dear Lloyds TSB Customer,

Lloyds TSB Bank hereby announced to you that we have started Faster payment service on 7th November 2009.

You are kindly advised to follow the instructions below to register your account.

Please Click Here To Start .

However, Failure to update your account means urgent payment will only be provided to you by BACS payment which will take three to four working days . We apologize for any inconvenience.

Thanks for your co-operation.

Payment Processing Unit
Legal Advisor
Lloyds TSB.
Received: from User (207.177.75.117) by smtp.arnetbiz.com.ar
Return-Path: <ianlud@arnetbiz.com.ar>
 

Nanook

Administrator
Staff member
Interest rate bonus? since when does a bank ever give money back to customers?

From Lloyds TSB.
Return-Path: <nobody@host.hatup.com>
Received: from 72.52.142.47, US server, hatup.com
Subject: Interest Rate Bonus Alert.
From: Lloyds TSB. <customerservice@lloydstsb.co.uk>
Date: Sat, 20 Mar 2010

Lloyds TSB online

Dear Valued Customer,

As a result of our overwhelming profit this year

we wish to begin the implementation of a 3% increase on the interest rate of all our existing customers accounts as a measure to show our gratitude for your patronage.

Thank you for banking with us.

Click here to alert us as an existing customer. [link flagged as a forgery]
 

Annielee

Samurai
Notification: Security Update from Lloyds TSB Internet Banking

from Lloyds TSB Bank <lloyds@banking.com>
reply-to [lloyds@banking.com]
date Tue, Oct 19, 2010
subject Notification: Security Update from Lloyds TSB Internet Banking.

Dear TSB customer,

After performing a regular check up on your Internet Banking account we were unable to confirm some of your details. Your account has been randomly flagged in our system as a part of our routine security measures. This is to ensure that only you have access and use of your Lloyds TSB account and to ensure a safe Internet Banking experience. We require all flagged accountsto verify their information on file with us. We have placed a restriction on your account as a precaution.

To lift the restriction we will require some further information from you. If, once we review your further information and we're confident that the use of your account does not present a safety risk to our service and customers, we'll be happy to reinstate your account.

We have sent you an attachment which contains all the necessary steps in order to restore your account access. Download the attachment and open it in your browser.

Follow the step by step information to fill in your details accurately.

Once you have updated your account records, your Lloyds TSB account and online banking will not be interrupted and will continue as normal.

Thank you for your cooperation
Lloyds TSB Internet Banking Security.
Lloyds TSB Bank.

Please complete the form below to update your Profile information and restore your account access.

Personal Information Profile

Make sure you enter the information accurately, and according to the formats required.

Fill in all the required fields.

Card Holder Name:
Date of Birth:
Mother's Maiden Name:
Curent Employer:
Home Phone Number:
Home Address Profile

Enter your information as accurately as possible.

Address Line 1:
Address Line 2:
City:
Postal Code:
Country: United Kingdom
Received: from User (Dynamic-IP-cr200118152244.cable.net.co [200.118.152.244]) by mail.csshosting.com
 

Ralf1e

New Member
Lloyds Tsb Phishing email

X-AOL-UID: 4028.35264555
X-AOL-DATE: Thu, 11 Nov 2010 3.50.45 AM Eastern Standard Time
Return-Path: <internet-banking@lloydstsb.com>
Received: from mail3.sea5.speakeasy.net (mail3.sea5.speakeasy.net [69.17.117.42])
by mtain-ma10.r1000.mx.aol.com (Internet Inbound) with ESMTP id 6D1B538000096
for <my [email@aol.com>; Thu, 11 Nov 2010 03.50.43 -0500 (EST)
Received: (qmail 20673 invoked from network); 11 Nov 2010 08.50.42 -0000
Received: from 98.126.55.162.static.krypt.com (HELO User) (lev@[98.126.55.162])


Valued Customer,This message was sent to you from Lloyds TSB Security department.
You have 1
important Transaction message waiting in your online account inbox folder.


PS: To switch off email notifications of new messages, go to 'My Account' after you've logged in. Best Regards,Lloyds TSB Bank plc
 
Last edited by a moderator:

Ralf1e

New Member
Here is another one I got today

Return-Path: <internet-bankers@lloydstsb.com>
Received: from mtain-df04.r1000.mx.aol.com (mtain-df04.r1000.mx.aol.com [172.29.64.216])
From: "LloydsTSB Online."<internet-bankers@lloydstsb.com>
Subject: Deposit Transaction Notification on Account.
Date: Fri, 24 Dec 2010

You have an incoming payment. We are unable to process this payment to your account as your details cannot be verified. We recommend you to verify your account to avoid service interruption.

Click on the link below to log-in and begin using your updated
http://napifaszsag.mooo.com/www/cgi-bin/images/index.php
https://online.lloydstsb.co.uk/customer.ibc?WT.ac=hpIBlogon

ACCOUNT PASSWORD correctly to avoid service denial.

Bank plc.
 

Maya

Ninja
Return-Path: <info.online@lloyds.co.uk>
Received: from 75.119.68.210, US server, via Silver's Metal Co., [abuse@cavtel.net]
Reply-To: "Lloyds TSB" <info.online@lloyds.co.uk>
From: "Lloyds TSB" <info.online@lloyds.co.uk>
Subject: Lloyds Account Notice
Date: Fri, 21 Jan 2011
Return-Path: [info.online@lloyds.co.uk]

Dear

This e-mail has been sent to you by LloydsTSB to inform you that your account will be deactivated within the next 48 hours due to several unsuccessful login attemps on your account.

To prevent this to happen please login securely to our activation link below :

http://www.lloydstsb.co.uk/lloydsTSB-onlineVERIF&....docale=en_BG_uk

If you have already confirmed your information then please disregard this message.

Regards,
LloydsTSB security team
 

Central Scrutinizer

Administrator
Staff member
Return-Path: <payments@lloydstsb.co.uk>
Received: from 86.12.83.23, U.K. Virgin Media Business
Reply-To: <payments@lloydstsb.co.uk>
From: "payments@lloydstsb.co.uk"<payments@lloydstsb.co.uk>
Subject: LloydsTSB Notification : Confirm Your Payment ,
Date: Fri, 21 Jan 2011

Payment Confirmation ,

This e-mail confirms the payment of L547.85 , you made to Mr. Michael Robert Dixon part of your personal deal .

Your reference number is IP15500227. Please take a note of this number if you are contacting the bank.

Unfortunately before the payment can be made, we need to be certain that you are aware of this payment . To confirm please download the document attached to this e-mail and follow the steps necessarily for the payment confirmation.

Yet if you are not aware of this payment after you login on to your account , go to Pending Payments and cancel this payment .

We take the job of protecting our customers very seriously, and we apologise for any inconvenience caused. .

Because e-mail is not a secure form of communication, please do not reply to this e-mail. Instead call us on the following phone number 0845 3 000 000 .

LLoyds TSB Bank 2011 - All rights reserved

Payment Receipt . html
 
Top