SBI new site or scam?

[goodandbadjapan]

My wife got an email from SBI saying they are migrating their site from March 29th and customers will have to use the new site. But it then says you can click a link to go to the new site now, and when you do you are met with what looks like the SBI site but of course you have to log in. Seems a bit suspicious to me especially as I didn't get the mail and I haven't seen any information on this in the 'important notices' on the site. Anyone else had this mail? If not then I guess this serves as a warning to watch out for this likely scam.

[adamu]

It's funny that they put a notice on their homepage for people to beware of phishing, then email their customers with a link that's not linked from their homepage

You're right to be cautious, and nobody can tell if the mail you got is genuine, but FWIW I also got the email and here is an edited link from the one in the email to the info on their site.

https://www.sbisec.co.jp/ETGate/WPLETmg ... newal.html

[goodandbadjapan]

Ok thanks @adamu. So if it is real do we actually have to do anything? As far as I can see it will just be a new site and presumably we will al be moved onto it anyway.

[adamu]

I don't think you need to do anything. Just don't be surprised if it looks different from April.

[BrianC]

My wife got an email from SBI [or someone in China] ... But it then says you can click a link to go to the new site now, and when you do you are met with what looks like the SBI site...

Do you have any idea how much work is involved in making a precise copy of the SBI website? Simplifying very slightly, here is the code in PHP to generate a fake page:

Code: Select all

echo wget("https://www.sbishinseibank.co.jp/english/");

(extra spaces in the following to stop the software messing it up)

So looking at a page and saying "hmm, well, it definitely looks exactly like the SBI page" is No Good. What you have to do is look at the URL you are about to fetch. If your browser shows h t t p s : //w w w.sbishinseibank.co.jp/english in the adress bar, it means you are fetching the shinseibank site. If it shows (for example) h t t p s : //sbinewsite.pxr.cn/w w w.sbishinseibank.co.jp/new/english, then you are accessing an address in China. It really is as simple as that. (Of course it would be even simpler if the URL format had not been decided in the US, which can't do anything big-endian or little-endian, but has to start in the middle, making it nontrivial to find the top level domain - as in 'cn' is the last element before the first slash.)