Ally Bank Phishing Scam

Ally Bank Scam Emails

Following on from the Bank of America phishing scam, the scammers are now sending out phishing emails to Ally Bank Customers.

Again, I doubt if the Ally Bank online customer form scam will affect many UK residents, as it’s a Philadelphia based bank, (I believe), but it may well cause some upsets in the USA.

The Ally Bank scam spam was sent to me supposedly from customercare @ ally.com, which is obviously a masked reply-to address it’s actually from Ferask.eu, (see below). The subject line on the Ally email I received was “RE: information from Ally Bank customer service Sun, 9 Aug 2009 13:36:58 +0100″.  The email reads:

Dear customer, As part of the new security measures, all Ally Bank customers are required to complete Ally Bank Online Customer Form. Please complete the form as soon as possible.To access the form please click on the following link:http:// secure.ally.com/allyWebClient/ccare/cform.do?id=0064875271429691818209807006720862190505679951117542002213 We look forward to helping you,Your Ally Customer Care Team.

 

The information contained in this message is proprietary and/or confidential. If you are not the intended recipient, please: (i) delete the message and all copies; (ii) do not disclose, distribute or use the message in any manner; and (iii) notify the sender immediately. In addition, please be aware that any message addressed to our domain is subject to archiving and review by persons other than the intended recipient. Thank you.

Ally Bank Subject Lines

Having received some copies of other Ally bank scam emails since writing this article, here are some of the different subject lines on different emails:

  • Important notification from Ally Bank
  • Ally Bank reminder: notification
  • New version of Ally Bank (former GMAC bank) customer form has been released
  • GMAC Bank is now Ally Bank
  • Instructions for Ally Bank (former GMAC Bank) customer
  • For attention of Ally Bank (former GMAC Bank) customer
  • New version of Ally Bank customer form has been released

Ferask.eu Phishing Scammers

The Ally form actually doesn’t go to the address on the email, it goes to a subdomain of ferask.eu who are phishing for access details to your bank account.

If you are an Ally bank customer and you receive this scam email or one like it, don’t reply and don’t click on the link. Simply bin it.

Like all banks, Ally will never request personal details in an email and any email will be addressed directly to you, not to, “Dear customer”.

If you receive on similar, but not the same,  or with a different subject line, etc. - let us know and we’ll publish it on this article.

10 Responses to “Ally Bank Phishing Scam”

Edward Stream Says:

To prevent this kind of fraud it’s necessary to have software installed on your pc. I use bitdefender internet security 2009. it has a very good anti-phishing module. It’s very efficient.

I don’t personally think you need to invest in anti-phishing software - you need common sense and you need to delete any emails that come through that look a bit phishy without opening them. BM

Susan Says:

I recently came across your blog and have been reading along. I thought I would leave my first comment. I don’t know what to say except that I have enjoyed reading. Nice blog. I will keep visiting this blog very often. Susan

Nigel Says:

I received the same but with a diffrent subject line and decided to look it up on google and found your website :)

Good information, Thanks

Subject: Instructions for Ally Bank (former GMAC Bank) customer

Georgah Says:

I seem to receive hundreds of these emails weekly. Fortunately, my company has a very good email blocker and they end up in my junkmail folder. I finally googled it an came across your site. I am in Canada, so it isn’t just the USA where this is coming from. I appreciate that you took the time to research this and have advised the rest of the public - should they care to check out their email before opening it. Thanks!

John Says:

You mention:

“Like all banks, Ally will never request personal details in an email and any email will be addressed directly to you, not to, “Dear customer”.

Actually ALLY in Canada does send out an email addressed to ‘Valued Customer’, and they also have embedded hyperlinks in the email. This dangerous practise has been reported to them, but they seem in no hurry to correct these concerns.

I took the information directly from an Ally press release, but that was a while ago and although I find it hard to believe, I have no reason to doubt you John. Thanks for the information, but if you have proof of this, we would love to see it BM.

Mel Says:

You can fight back with a few minutes of your time.

Go to the website of the spoofed company and search within it for abuse, spam, spoof, or phishing. Often they will have an email address for reporting spoofs. Use the email address to report the spam.

I generally drag the message from Microsoft Entourage to the attachment list on my reporting email. I’ll leave it to you to figure out how to move the message in your particular setup.

For Ally Bank, the address is abuse@ally.com.

Also copy FTC spoof which is spam@uce.gov

May you never have to do this, but if you do, I hope you have time that you can help a lot.

- Mel

Mel Says:

I just learned of another organization fighting phishing, etc.

I had a Bank of America spoof, but found no BofA reporting address at its site. However, they did recommend forwarding spam etc to FTC spoof and the Anti-phishing Working Group .

This latter group is supported by several financial institutions. Reporting spam to these groups could save you digging for a direct address of a company.

Thanks for the info, Mel. I enjoyed reading your blog. BM.

Isabella Antaya Says:

Hi their, I red that this antivirus is the most ifficient in the world but as I don’t know much about such softs, I’d need someone to give me an advice if possible thank you! :-) Advice: If you are going to spam thousands of blog posts, have the sense to check your spelling and grammar first, twat!

Paula Williams Says:

I wanted to change my banks from BoT to Ally, but now I’m not sure if I should. Any advise would be appreciated. You do understand that this has nothing to do with the Ally bank? - it’s just a scammer using their name? I know nothing about the Ally Bank, but don’t be put off by some scammer trying to steal bank details some months ago. BM

mik Says:

I can’t believe that people are still giving out their financial info over the internet to unknown persons. scammers prob. hope they come upon an elderly person. scammers should have their balls cut off–without anesthesia; better yet nail each ball to an oil/kerosene soaked tree stump; set it on fire and give them a rusty knife!!!

Leave a Reply





SEO Blog

SEO Blog

The Big Man's SEO blog is primarily aimed at website owners looking for ethical SEO tips, optimisation advice and who are interested in reading articles and opinions related to search engines, the internet, technology and software.