Security Centre
Alert - August 2010
Mobile application alert
AIB is aware that a number of mobile phone applications are available to download which claim to provide tailored access to the AIB Internet Banking service.
These applications are not provided by AIB but by external third parties and as such are not supported or endorsed by AIB.
Under the Terms and Conditions for AIB Phone & Internet Banking, customers must not disclose their Personal Access Code (PAC) or Code Card details to any other person. Therefore, AIB wishes to remind customers that these applications must not be used. Use of these applications will result in a breach of your AIB Phone & Internet Banking Terms & Conditions.
Phishing Email Alert
It has come to our attention that a number of fraudulent (Phishing) emails and unsolicited phone calls are being circulated purporting to be from Allied Irish Banks p.l.c.
Some of these emails and phone calls require your AIB Internet Banking log in details and personal information. Please be aware that AIB Internet Banking will NEVER request your full PAC or Code Card details by email or phone .
Examples of the subject headings of some of these fraudulent (phishing) emails are:
- New Trouble Ticket
- Account (1) Issues
- We need you to re-confirm your account information to us
- Account Notification
- Account Locked
- Mobile Phone Number not on profile
- AIB Internet Security Update
- Important information regarding your account
- Important Security Issue
- Alert from AIB
(Please note: this is not an exclusive list of subject headings)
These are fake!
Some of the fake messages in these fraudulent (phishing) emails are:
“Please be informed that we send emails asking you to verify your account maximum three times a year.”
"Note that Your AIB CodeCard is about to expire. In order for it to remain active, Use the button below to Activate your CardCode and get Unlimited Access on your Internet Banking."
“Your Internet Banking access has been suspended due to many unsuccessful login attempts. You are kindly advised to follow the instructions below to reactivate your account. The activation form is attached to this email. Please download the attachment, open it, and follow the instructions on your screen.”
The email states that "Your AIB online banking is about to expire. In order for it to remain active, please use the button below to Activate and get Unlimited Access on your Internet banking."
"Due to the high number of fraud attempts and phishing scams, it has been decided to implement EV SSL Certification on this Internet Banking Website. ? Please Update your account to the new EV SSL certification by Clicking here."
"AIB is pleased to notify our Online banking customers that we have successfully upgraded to a more secure and encrypted SSL servers to serve our esteemed customers for a better and more efficient banking services in the year 2009. To validate your online banking account click on Update Online Banking."
What the Fraudsters Want
The fake (spoof) website may look like an AIB site but it is run by a fraudster and any information you enter on the site will be sent to the fraudster.
You will be asked to enter some or all of the following information on a fake (spoof) website:
- Full Registration Number,
- Full 5 digit Personal Access Code (PAC),
- All 100 Code Card numbers
- Full Name,
- Full Address,
- City, State, Zip Code
- Home Phone Number
- Work Phone Number
- Email address.
- Bank account details
- Credit card number
Email Address
You should be aware that some of the fraudulent (phishing) emails that you may receive have the following email addresses displayed in the "From" section: internetbanking@aib.ie, alert@aib.ie.
Both of these email addresses are legitimate AIB email addresses.
In these cases the fraudsters are covering their real email address with a legitimate AIB email address in the hope of bypassing spam filters and tricking you into responding to the fraudulent (phishing) email.
These emails are NOT from AIB - they are a fraudulent attempt to obtain your banking details.
What should you do if you have received these emails?
Do NOT click any buttons/links.
Do NOT open or download any attachments.
Do NOT enter any details.
Forward the email to alert@aib.ie and then delete the email.
Please remember AIB NEVER asks customers to enter their AIB Internet Banking log in details or AIB Code Card numbers via email or through a link in an email.
Contact us –
AIB Internet Banking Users: contact the AIB Internet Banking team using our secure contact form or contact us by telephone at 0818 724 724.
AIB iBusiness Banking Users: contact the AIB iBusiness Banking Support team by telephone at 1890 42 22 42.
Please remember the following:
To log in to AIB Internet Banking you will only be asked for your:
- 8 digit Registration Number,
- 3 random digits of your 5 digit Personal Access Number (PAC)
- The last 4 digits of either your home/work/mobile phone or AIB Credit Card number.