Convincing Chase bank phishing scam email targets customers’ personal data

That bank email in your inbox might look legitimate, but it could be a dangerous scam designed to steal your personal information. We recently received one ourselves, and it’s alarmingly convincing. It warns of an unrecognized device trying to sign in and urges you to “verify your activity” via a provided link. While it appears helpful, this email is anything but safe.

In reality, it’s part of a growing wave of phishing attacks that mimic trusted companies like Chase. These emails are loaded with deceptive links that lead to malware infections, and the consequences can be severe.

Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM/NEWSLETTER 

HOW FAKE MICROSOFT ALERTS TRICK YOU INTO PHISHING SCAMS

How the bank phishing scam email works

This scam starts with what looks like a typical security alert from Chase or another bank. The email claims someone tried to log in from an unknown device. To “protect” your account, it asks you to confirm your identity by clicking a link.

What happens next is where things take a dark turn

Clicking the link launches a fake webpage designed to distract you while a hidden file quietly runs in the background. This file is often an HTA file, a type of HTML application commonly used to deliver malware. It then drops a DLL file onto your computer, essentially a backdoor that opens your system to hackers.

From there, the malware uses a technique called Reflective DLL Injection to inject malicious code directly into your browser’s memory. This allows attackers to:

GET FOX BUSINESS ON THE GO BY CLICKING HERE

• Monitor your keystrokes
• Steal login credentials and credit card numbers
• Gain access to your accounts
• Create long-term backdoors on your system

This scam isn’t just trying to scare you; it’s designed to take full control.

Scam phishing email   (Kurt “CyberGuy” Knutsson)

Signs you’re looking at a bank phishing scam email

Scammers rely on urgency and fear to prompt you into quick action. Here’s how to recognize a phishing attempt like this:

• Check the sender’s email address: Hover over the sender’s name to see the actual email address. In our case, “JP Morgan” was linked to a Gmail address, a clear red flag. Legitimate companies don’t use personal…