Threat Intelligence Directory
Phishing

Bank Security Alert Impersonation Phishing

Attack Trigger

Official-looking bank fraud alert demands immediate account verification

What Attackers Want

Full online banking credentials enabling immediate fund transfers

How This Attack Works

Attackers send highly realistic bank security emails claiming a suspicious transaction or unauthorized login was detected on your account. The email links to a pixel-perfect clone of your bank's login page that captures your username, password, and one-time verification code in real time, enabling immediate account takeover.

Red Flags to Watch For

  • Sender domain does not exactly match your bank's official domain
  • Hover over the link — it does not go to your bank's real website
  • Email greets you as "Dear Customer" rather than your registered name
  • Page requests both your password and one-time SMS code simultaneously
  • Bank logo and layout are close but fonts, colors, or spacing look slightly off
  • Threat of account freeze within 12–24 hours creates artificial urgency
  • Transaction amount listed is one you do not recognize

Known Malicious Domains

These domains have been associated with this attack. Never click links going to these addresses.

  • chase-secure-alert.comMALICIOUS
  • bankofamerica-login-verify.netMALICIOUS
  • wellsfargo-account-confirm.comMALICIOUS
  • citi-fraud-alert-secure.comMALICIOUS

Glance automatically blocks emails from domains on this list. Domain list is not exhaustive — attackers register new domains continuously.

How Glance Stops This

  • Domain similarity analysis catches lookalike sender addresses at millisecond speed
  • SPF / DKIM / DMARC validation flags authentication failures before you ever see the email
  • VirusTotal + Google Safe Browsing checks every link in real time
  • Urgency language detection scores the email higher for manual review
  • Known malicious domain blocklist updated continuously from live scan data

Don't wait to get hit.

Glance scans every incoming email against 12 detection layers — including the exact tactics described above — before it reaches your inbox.

Protect My Inbox — Free