Customers of CRDB Bank, Tanzania's largest lender by assets and deposits, have received fraudulent emails from scammers pretending to be the bank.
In the phishing attack, CRDB Bank customers received emails that ask them to click a suspicious link.In one of the emails seen by πππ£π―ππ£ππ π½πͺπ¨ππ£ππ¨π¨ ππ£π¨ππππ©, a Gmail account registered as
aisiarobi@gmail.com masquerades as an official email from CRDB.
A big red flag for a fraudulent email that some customers may not be aware of is the use of generic email addresses like Gmail or Yahoo mail.
Banks use their own corporate emails.The scam email to one CRDB Bank customer dated October 10, 2024 carries the subject CRDB#IMPORTANT ACTION REQUIRED-2024.
The email asks CRDB customers to verify their bank accounts by clicking on a suspicious link.It remains unclear how the fraudsters were able to get hold of personal details of CRDB Bank customers, including their email addresses.
Read Also:
Benki ya CRDB yawakaribisha Wanahisa kwenye Mkutano Mkuu wa 29
The Bank of Tanzania (BoT) said in a memo to banks in March this year that cyber criminals stole more than TZS 1.65 billion from Tanzanian banks in just three months in the fourth quarter of last year (Q4 2023), which is an 84% increase from the previous quarter.
The central bank said that more than TZS 1.654 billion was stolen from banks during October-December 2023 alone by online fraudsters.
This is a significant increase from TZS 901.8 million that was stolen from banks in Q3 2023 (July-September) through digital fraud.CRDB was yet to issue any public notice to its customers on the fraud by the time this post was published online at 11:21am today.