2 ms·
In my experience, banks and other online institutions have spent years training their customers to fall for phishing attempts by sending legit emails with embed
by loudmax 5y ago
In my experience, banks and other online institutions have spent years training their customers to fall for phishing attempts by sending legit emails with embedded links. People take it for granted that emails coming into their inbox that contain links to login pages really are from their bank, because that's how their bank behaves normally.
- stanleydrew 5y agoI hadn't ever thought about this but you're right. Best practice for sensitive services like banks should be to have no links at all in emails. I don't think that's likely to change though.
- danhor 5y agoEven worse, they sometimes try really hard to be indistingushable. I recently got a mail from an insurance company that they were upgrading the login method (red flag). The domain in the link contained wasn't the main domain but a separate customer service domain (red flag 2). And the main login didn't work as expected before clicking the link in the mail (at least that redirected to the main domain). It really can't get much worse.