Email from my #bank (appears to be legit)...
1. Not from their main domain.
2. Asks me to follow a link, also not their main domain, and enter lots of personal information to complete a "finances health check".
3. Includes "security advice" that emails from my bank will never link to pages that ask for personal information.
4. Says is is authentic because it contains my post code (which only my bank would know?)
And people wonder why everyone keeps getting #scammed ...
@steve Blue Cross Blue Shield just did something very similar -- sending out an email not from their domain, pointing to a 3rd-party survey site to enter personal census info about employers' health plan usage. How does this stuff get through? I don't think theirs even had the perfunctory effort of including a zip code.
