The Discover Card Scam

Don't Get Scammed!

Last week an e-mail scam was perpetrated on Discover Card users, in which the scammer sent messages to millions of people suggesting that they click on a link to re-enter their important data into the Discover Card web site.  When they clicked on the link, they saw the actual Discover Card web site - but when they entered the data, instead of going into Discover's database, it was sent via e-mail to the thief who sent the e-mail.  It was clever - because it gave none of the usual indications that you were dealing with a thief.  Except that the first rule of thumb is to NOT give your valuable information out to somebody who requests it by e-mail.  In many cases, this is an easy suggestion to obey; but the case of the Discover Card, it was more difficult - almost a perfect scam.  The Discover people acted quickly, placing obvious notices on the page to which the e-mail scam message linked, and subsequently sending out the following note to their card holders.

Don't make me tell you again:  Do not give out sensitive information to people who e-mail you - even if you think they are on your side.  Worse comes to worse, pick up the phone to verify that it is really them - and don't use the telephone number in the e-mail message.  Use a number you already have on hand - on your credit card statements, in your phone list, in the local yellow pages - anything that is more credible than e-mail.

Better yet, read how I set up an identification method that the scammers cannot breach.

David

-----Original Message-----
From: Discover Card [mailto:XXXXXXX]
Sent: Tuesday, March 18, 2003 3:52 PM
To: XXXXXXXXXXX
Subject: Important E-mail Security Tip

Dear Cardmember, Smart E-Mail Safety Tip Discover® Card wants to ensure the online protection of your personal and Account information. As a reminder: Discover Card does not ask for personal or Account information to be submitted via e-mail. If you ever receive an e-mail that appears to be from Discover Card asking you for personal information such as your social security number or Account number, please do not respond directly to the e-mail and call us immediately at 1-800-DISCOVER (1-800-347-2683). Any e-mails sent from Discover Card, including Discover Card newsletters, customer service e-mails, or notifications that your statement is available online, would require you to successfully log in to the secure Account Center at Discovercard.com before entering any Account or personal information. We do not request that personal information be sent via non-secure e-mail.  How can you tell if you're at the secure Account Center at Discovercard.com? Look for an image of a padlock at the bottom of your browser window and a Web address that starts with "https" instead of "http". Both of these mean that the page -- and your information -- is protected. You will always see these on the log in page to the Discovercard.com Account Center. Online Customer Service -- Safe and Secure Do you have a specific Account inquiry, a general question or a comment? Secure Messages are the safe and easy way to communicate with Customer Service online. We answer most inquiries within 24 hours! IMPORTANT INFORMATION This e-mail was sent to: XXXXXXXXXXXXXXXXXXX You are receiving this e-mail because you are a registered Discover Card Account Center user. To update your e-mail address, or change your Account e-mail notification preferences, click here to log in to the Account Center. If you have questions about your Account, please e-mail us through Secure Messages and we will be happy to assist you. Discover Card takes your security seriously. Enjoy 100% Fraud Protection against unauthorized transactions whenever you use your Discover Card, online or off. So, you can rest easy when you use your Discover Card. We respect your privacy. To view our privacy policy online, visit Discovercard.com ©2003 Discover Bank. Member FDIC.