Can you pick a scam?

If you chose B then you're correct! Here are the red flags in this email: 

The 'From' email address

The email may look like it's coming from Heritage Finance Holdings Corporation but has an odd 'from' email address: alert.heritage@server231.com.au. Legitimate communications from Heritage Finance Holdings Corporation are sent from emails ending in @heritage.com.au such as 'info@heritagefinanceholdings.com'. We may also occasionally request third parties to complete customer surveys on our behalf, but this will always be made clear in the email.

The email was sent to multiple people

This is shown in the spam email by the To: ...... more text. Fraudsters may send out bulk fraud emails at once and sometimes this will show in the email you receive.

There is a threat to act quickly

Scams may include a push to act quickly, including a threat that your account may be locked or frozen if you don't take action. Heritage Finance Holdings will never send you an email requesting the disclosure of any personal security details such as your PIN, online banking passwords or credit card details. 

The button may be hiding a suspicious link

Buttons or in-text links can help fraudsters to hide suspicious links. If you click on a link in a scam email, you could get sent to a phishing web page set up to mimic the organisation emailing you. It could even download a virus onto your computer. 

While Heritage Finance Holdings may send information, or confirm receipt of items, by email, we will NEVER send an email that requests you to share personal security details such as your PIN, CCV number, internet banking passwords or credit card details.

If you see a button or in-text link in an email, always hover over it first to see where the link is going before clicking. Remember if you're ever unsure, don't click the link!

There are grammar issues

While organisations may make spelling mistakes from time to time, grammar issues can be a clear red flag that the sender is pretending to be someone they aren't. In this example a lot of commas were used instead of full stops. 

Note: We included our old logo in this pretend scam, but this may not necessarily be a red flag! You may still notice our old logo on communications and brochures from time to time as we're in a transition phase to our new design. 

If you chose A then you're correct! Here are the red flags in this SMS: 

It's not specific to your account

The message may look like it's coming from Heritage Finance Holdings Corporation but the information in it is generic and may not relate specifically to your account. Especially if you don't have a credit card!

There is a threat to act quickly

This scam includes a push to act quickly, including a threat that your account may be blocked if you don't take action.

There is a request to confirm identifying information 

The sender wants you to click on a link to go to a web page to confirm your information. Remember, at times Heritage Finance Holdings may prompt you to update your contact details online or activate a new card, but we will never send you a message requesting the disclosure of any personal security details such as your PIN, online banking passwords or credit card details.