Lloyds TSB Bank

Garreg Ddu

Gweinyddwr
Staff member
WARNING

The email below has a virus in the attachment.

Please do not open the attachment.

Delete the email immediately if you receive it.

X-SID-PRA: LLoyds Bank TSB <esecure@lloydstsb.com>

Received: from 212.199.167.21.forward.012.net.il ([212.199.167.21] helo=User) by srv1a.iqmo.nl with esmtpa (Exim 4.72) (envelope-from <esecure@lloydstsb.com>) id 1QeqF4-00045o-Q1; Thu, 07 Jul 2011 17:11:51 +0200

Originating IP = 212.199.167.21 = Golden Lines Cable, Tel Aviv, Israel

Reply-To: <esecure@lloydstsb.com>
From: "LLoyds Bank TSB" <esecure@lloydstsb.com>
Subject: Lloyds TSB Security Advisor ,
Date: Thu, 7 Jul 2011 18:10:04 +0300
Bcc:
Return-Path: <esecure@lloydstsb.com>

Please note the header analysis reveals:
  • The origin as Israel - Lloyds TSB is a UK Bank, why would it send an email from Isreal
  • The item is sent via "Bcc:", not to your proper email address which would never be done by any bank




Dear valued customer , Any correspondence from a bank will always address you by name!

Due to concerns, for the safety and integrity of your
account , we have issued this warning message.

It has come to our attention that your account
information needs to be updated as part

of our continuing commitment to protect your account and
to reduce the instance of fraud on our website.

Please download the document attached to this
e-mail and update information.

Once you have updated your account records , your account
service will not be interrupted and will continue as normal.


LLoyds TSB UK Bank online
Security Advisor,

The attachment is called Lloyds TSB Login Form.html
The spelling, grammar and layout of the text are not as would be sent by a UK Bank

This is a Phishing scam, with a Viral payload.

It may be an attempt to infect your computer and make it part of a "NetBot" attack.
 

LOGGER9

New Member
lloyds tsb card cancelled

Hi Everyone,

I received a phone call this afternoon from a person claiming to be with Loyds TSB.
The caller stated that due to a technical fault mine and several thousand other cards within my postcode area had to be cancelled and would I go to the bank on Monday to collect my new card,he then wanted my card number to be sure it had been cancelled (which I refused to give him over the phone) .

When I phoned my bank to verify whether or not I could still use my card they new nothing about it.

Regards

Logger9
 

Wonderwoman

Samurai
Lloyds TSB" <direct@lloydstsb.com>

X-Originating-IP: [69.67.49.52]
Country Dominican Republic
ISP Americana Departamentos C X A.
Latitude & Longitude 18.500000 -69.983333 MapG MapV

Received: from 111.242.16.24.dynamic.hinet.net
City Taipei
State or Region T'ai-pei
Country Taiwan
ISP CHTD Chunghwa Telecom Co. Ltd.
Latitude & Longitude 25.017000 121.450000 MapG MapV
Domain CHT.COM.TW

From:
"Lloyds TSB" <direct@lloydstsb.com>
To

Message contains attachments
1 File (36KB)
DO NOT OPEN HAS MALWARE, SPYWARE OR VIRUS


Lloyds TSB
Your Online Banking is Blocked
Dear Customer

We recently reviewed your account, and suspect that your Lloyds TSB Online Banking account may have been accessed by an unauthorized third party. Protecting the security of your account is our primary concern. Therefore, as a preventative measure, we have temporarily limited access to sensitive account features.
O.M.G.


To restore your online banking access, we developed a new secure way that keeps your banking safe, we have attached a form to this email to complete this process. Please download the form and follow the instructions on your screen. (DO NOT OPEN HAS MALWARE, SPYWARE OR VIRUS) If you choose to ignore our request, you leave us no choice but to temporary suspend your account.


Thanks you for your patience as we work together to protect your account.

Sincerely,

Lloyds TSB Online Bank Customer Service.

*Important*

Please update your records on or before 48 hours, a failure to update your records will result in a temporary hold on your funds.


Wait a minute .... I have no account Lloyds TSB Online Banking...You gave me a fright Mr. Scammer...
 

bigmama

Ninja
Lloyds, TSB Bank

Received: from [65.254.34.106], USA, GNAXNET, Global Net Access, LLC, [abuse@gnax.net]
from: Lloyds TSB Bank <customerservice@online.lloydstsb.co.uk>
date: Wed, Sep 28, 2011
subject: Your online service temporary Limited

Dear Llyods Customer,

Online Banking access to your accounts has been blocked and Online banking is suspended or restricted for wrong credentials.

"View Accounts" for more information and to restore your access

Note: Failure to Review Your account Activity will lead to online service suspension.


Thank you
=============================================================================================
Same email note received:

Received: from [88.84.196.167], Russia, FitingStroi-NET, [noc@flex.ru]
from: Lloyds TSB Bank <lloydstsbbankings@aesculapmedconsult.de>
date: Wed, Sep 21, 2011
subject: Account Status Nootification

=============================================================================================
Same email note received:

Received: from [81.137.251.104], Great Britain, BT OPENWORLD, [abuse@btopenworld.com]
from: Lloyds TSB Bank <lloydsbank@aesculapmedconsult.de>
date: Wed, Sep 21, 2011
subject: Account Status Notification
 
Last edited:

bigmama

Ninja

Received: from [62.206.39.218], Germany, IMAGES-747-HAMBURG-NET, NCC Mediascape Communications, [abuse@qsc.de]

from: Lloyds TSB Bank <customerservice.lloydstsbbank@wt8jg21ke.homepage.t-online.de>
date: Thu, Oct 13, 2011
subject: Account Status Notification
mailed-by wt8jg21ke.homepage.t-online.de

Dear Customer,

Online banking is suspended or restricted for wrong credentials.

View Account Activity

Note: Failure to Review Your account Activity will lead to online service suspension.
 

bigmama

Ninja
Lloyds TSB Bank plc

Received: from [68.195.223.230], USA, HALL NEIGHBORHOOD, [hostmaster@cv.net]
from: Lloyds TSB Bank plc <service.lloydtsbonline.com@wjzi9a0z2.homepage.t-online.de>
date: Tue, Nov 1, 2011
subject: Your Online Session Is Blocked
mailed-by wjzi9a0z2.homepage.t-online.de

Dear Llyods Customer,

Online Banking access to your accounts has been blocked and
(1) Log On attempts with invalid information such as your Mother Maiden Name.

for more information and to restore your access
 

Annabel_Lee

New Member
Bank Notice ! (from a bank I do not own any account!!)

Dear ,

This e-mail has been sent to you by Lloyds TSB customer support to inform you that we were unable to verify your account details. This might be due to either of the following reasons:

1. A recent change in your personal information. (eg: billing address, phone)
2. Submitting incorrect information during registration process.

Due to this, to ensure that your service is not interrupted, we request you to confirm and update your information today by clicking here.

If you have already confirmed your information then please disregard this message as we are processing the changes you have made.

Regards,
Lloyds TSB
Costumer Support

Thanks for your co-operation.

© Uk Lloyds TSB 2011
 

Jessica

Administrator
Staff member
From LloydsTSB Bank Plc.
Return-Path: <secure@lloydstsb.com>
Received: from 77.89.129.210, United Kingdom, Fluidata Ltd
Reply-To: <secure@lloydstsb.com>
From: "LloydsTSB Bank Plc." <secure@lloydstsb.com>
Subject: Verify your activity ,
Date: Fri, 23 Mar 2012
Message contains attachments
1 File (24KB)

* Lloyds TSB - Login Form.htmlLloyds TSB - Login Form.html

Dear Customer,

We detected irregular activity on your Internet banking account.

For your protection, you must verify this activity before you can continue using your account.

Please download the document attached to this email to review your account activity.

We will review the activity on your account with you and upon verification,

we will remove any restrictions placed on your account.

If you choose to ignore our request, you leave us no choice but to temporary suspend your account.

We ask that you allow at least 72 hours for the case to be investigated and we strongly recommend to verify your account in that time.

© Copyright Lloyds TSB Bank Holdings plc 2012 - All rights reserved
 

Spidey

Ninja
From Lloyds TSB
Return-Path: <no-replay@lloydstsb.com>
Received: from 193.227.49.120, Egypt, Egyptian Networks
From: "Lloyds TSB" <no-replay@lloydstsb.com>
Subject:
Date: Sun, 1 Apr 2012
Message contains attachments
1 File (17KB)

* Confirm your account.html Confirm your account.html

Lloyds TSB Community Member,

You card may have been used by a third party. For your protection, we decided to suspend ATM access.

To remove the suspension, please confirm that your card was not stolen.

To do this, please download and complete the attached html form.

We are sorry for the inconvenience, but your security is our top priority.

Kind Regards,
Customer Service

Copyright © 2012 Lloyds TSB
 

Daryl

New Member
Account Payment Notification

DEAR LLOYDSTSB ACCOUNT HOLDER,

You have an incoming payment. We are unable to process this payment to your account as your details cannot be verified.

We recommend you to verify your account to avoid service interruption.

Verify Your Account

Thank you,
LloydsTSB Bank plc

------------------------------------
Note: For security reasons, we will record your ip-address the date and time, deliberate wrong inputs are criminally pursued and indicated.
 

Jessica

Administrator
Staff member
"noreply" <noreply@facebookmail.com>
From: [LloydsTSB.Team.service.members.root@localhost.lloydstsb-uk.co.uk]
SPAM-LOW: #Account Alert!# LloydsTSB UK! 28 May,2012

You are seeing this message because LloydsTSB Security has detected suspicious activity on your account and has temporarily suspended it as a security precaution.

This may be because your LloydsTSB Bank account was accessed from an unfamiliar computer or you have made changes in your account information.

You will be able to regain access to your account once you complete the automated security verification process.

How can i regain access to my account ?

To regain access to your account, you must confirm your identity by completing our automated security verification process.
To begin this process, please visit Lloyds Website and enter your login information and password into the appropriate fields.

You can do that by simply typing www. lloydstsb. com into your browser or by clicking here. (the link redirects to http://manahyd.net/inex/index.php

You will then be taken through a series of steps to help verify your identity and, if necessary, scan your computer for viruses.

The security verification process is automated and is not designed to be time-intensive.
In most situations, you should be able to confirm your identity and restore your account in a few minutes.

------------------------------------------------------------------------------------------------------------------------------------
 

Jessica

Administrator
Staff member
Lloyds Bank, 2012

Or Llodys TSB Bank

Return-Path: <info@lloydstsb.com>
Received: from 176.35.110.182, United Kingdom, Daisy Wholesale Limited
From: Lloyds TSB<info@lloydstsb.com>
Subject: Update Your Personal Data
Date: Mon, 9 Jul 2012

Dear Valued Customer,

You have an incoming payment slated for your account. This transaction cannot be completed due to errors present in your account information.

You are required to click on the Logon below to fix this problem immediately.

Link goes here: http : // www. norsk-media. no/images/banners/index. htm

Please do not reply to this message. For questions, please call Customer Service at the number on the back of your card. We are available 24 hours a day, 7 days a week.

Online Service Team
Llodys TSB Bank
 

Naruto

Administrator
Staff member
Return-Path: <onlinesecurity@lloydstsb.co.uk>
Received: from 203.146.189.97, Bangkok, Thailand, Geo-informatics And Space Technology Development Agency
From: "Lloyds Tsb Bank Plc"<onlinesecurity@lloydstsb.co.uk>
Subject: You Have received A New Message From Lloyds Tsb
Date: Tue, 16 Oct 2012

PERSONAL AND BUSINESS ACCOUNTS

Dear Valued Customer,

We have recently noticed that someone has made " 3 " suspicious attempts to log into your online account from this (IP) address " 241.238.141.88 " Therefore our security commitment forces us to block your account temporarily until you verify your identity on our systems.

http ://www. lloydstsb .com/personal. asp


Real link: http: //spawustroniu. pl/wp-admin/Redirect .php
 

Central Scrutinizer

Administrator
Staff member
Received: from 203.146.189.97, Bangkok, Thailand, Geo-informatics And Space Technology Development Agency
Return-Path: ~onlinesecurity@lloydstsb.co.uk>
From: "Lloyds Tsb Bank Plc" ~onlinesecurity@lloydstsb.co.uk>
Subject: You Have received A New Message From Lloyds Tsb
Date: Mon, 15 Oct 2012

Lloyds Tsb online

PERSONAL AND BUSINESS ACCOUNTS

Dear Valued Customer,

We have recently noticed that someone has made " 3 " suspicious attempts to log into your online account from this (IP) address " 241.238.141.88 "
Therefore our security commitment forces us to block your account temporarily until you verify your identity on our systems.

http:// www. lloydstsb. com/personal .asp redirects to ~http:// kf. szczecin .pl/includes/Redirect. php>
 

Spanish Admin

THE Spanish Administrator
Staff member
Lloyds Bank, 2013

From Lloyds TSB
Return-Path: <reception@aol.com>
X-Originating-IP: [221.164.100.26]
Received: from (testXh?@173.165.219.13) by 172.16.129.240 with ESMTP;
From: Lloyds TSB <reception@aol.com>
Subject: Internet Banking - Your account has been limited!
Date: 06 Apr 2013

1 New Message!

Resolution Center: Your account has been limited! Click to Resolve

http: // kvps-180-235-254-253. secure .ne. jp/icons/loydsred/encrypted-session/F6=1&F7=IB&F21=IB&F22=IB&REQUEST=ClientSignin&LANGUAGE=ENGLISH


Thank you for using Lloyds TSB.
 

Jessica

Administrator
Staff member
Return-Path: ~services@lloydstsb.com>
Received: from 204.232.242.212, United States, San Antonio, Core One-hour Servers
From: "Secure Center"~services@lloydstsb.com>
Subject: you have 1 unread message(s)
Date: Fri, 3 May 2013

Lloyds TSB Community Member,

Your card may have been used by a third party. For your protection, we decided to suspend ATM access.

To remove the suspension, please confirm that your card was not stolen.

To do this, please download and complete the attached html form.

We are sorry for the inconvenience, but your security is our top priority.

Kind Regards,
Customer Service

Copyright © 2013 Lloyds TSB
 

Sandor

Member
From: LloydsTSB Bank © PLC. <OnlineSecurity@LloydsTSB.co.uk>
Sent: Tuesday, July 23, 2013
Subject: LLoyds TSB - Security Message.

LloydsTSB - Security Form.htm

Dear Valued Customer,

Please note that starting from August 23, 2013 we will be introducing new online banking authentication procedures in order to protect the private information of all online banking users.

You are required to confirm your online banking details with us as you will not be able to have access to your accounts until these actions have taken place

As you're already registered for online banking all you need to do is to confirm your online banking details.

To do so please download the form attached to your e-mail and confirm your details .

Best regards,
Lloyds TSB Account Review Department

© Copyright 2013 LLoydsTSB Bank plc. - All rights reserved.
 

The Doctor

Administrator
Staff member
From: "onlinebanking@lloydstsb.com"<onlinebanking@lloydstsb.com>
Subject: VERIFY THE FUNDS THAT WAS TRANSFERRED ON YOUR ACCOUNT
Date: 20 August 2013
Return-Path: <onlinebanking@lloydstsb.com>
Received: from unknown (HELO User) (97.67.227.72) by smtpbig005.onecommunications.net USA

Lloyds TSB for the journey

Valued LloydsTSB Customer,

You have an unconfirmed payment Pending on your account
Please verify your account information for payment approval

We implore you to follow the link below to verify your account details.

ACCOUNT VERIFICATION http: //santacruzshopping. com. br/login .jsp. htm

NOTE: You are strictly advised to match your information correctly to avoid service suspension.

Thank you for your co-operation.

Regards
LloydsTSB Bank
 

Sapphire's Strike

Administrator
Staff member
Lloyds Bank, 2014

Received from: 219.89.199.6 - NEW ZEALAND - Telecom New Zealand Ltd
Return-path: <customer@intb.com>

Subject: Account Alert: Statement Available
To: Recipients ~customer@intb.com>
From: "Lloyds Internet Banking" ~customer@intb.com>
Date: Tue, 04 Mar 2014

Dear Customer

As requested, we're writing to let you know that your most recent Lloyds statement is now available online.

Log in to Online Account Access to conveniently: http://www.adnsolutions.com/components/com_mailto/won.php

View and print your statement online
Make a secure payment
Update email Account Alerts
Contact us with questions

Sincerely,
Lloyds Internet Banking
 

Sapphire's Strike

Administrator
Staff member
Received From: 109.144.179.172, UK, London - BT Wi-fi
Return-path: <online@lloydbnk.com>

Reply-to: Lloyds Bank ~online@lloydbnk.com>
Subject: Important Security Message.
From: Lloyds Bank ~online@lloydbnk.com>

Dear LloydsBank Customer,
We are asking all our customers to update their Lloyds bank account details to help ensure customers' trust and security.
Here's why: Recently, the ICC discovered a cyberattack on some companies. This attack affected various companies in the United Kingdom.We have therefore updated our security system to help protect our customers from any fraudulent attacks.
N:B: This attack also affected eBay and amazon users,so we strongly recommend you to update your account details below to secure your account.
click here for update >>>>>> http://neverfatagain.info/components/com_contact/views/contact/tmpl/primarylogin.php
However,failure to do so may result in temporary account suspension,please understand that this is a security measure intended to help protect you and yur account. We apologize for any inconvenience.
Thank you for your cooperation
Fraud Prevention Unit
Legal Advisor
Lloyds Bank.
 
Top