Hackers persistently targeting Zenith Bank corporate accounts

Holders of corporate accounts at Zenith Bank are not safe as hackers are persistently targeting their accounts through the “Complete Your AML/SCUML Certificate Application” email scam.

CONVERSEER gathered from customers who operate Corporate Accounts with Zenith Bank that they received tonnes of emails with the subject: “My Corporate Bank Account Name – Complete Your AML/SCUML Certificate Application | Zenith Team“, prompting them to take action by clicking on unsolicited links in the email.

One anonymous customer said: “The hacker(s) knows my official email and Corporate Banking account name. How is that possible if the person is not a Zenith Bank staff?

“I’ve received several messages like that and if I had not been cybercrime aware, I would’ve fallen victim because the emails looked like that of Zenith Bank and the fake site they are asking me to enter my Internet Banking details looked exactly like Zenith Bank official website, only from the website address that knowledgeable one can decode.

“Zenith Bank needs to do something to fish out that compromise staff who is giving out or using customers’ details to commit fraud.”

READ ALSO: Otu Awarded Best Security Conscious Governor

When our Reporter sighted the email, we noticed that it was coming from “alertz@zenithapp-1.xyz” and its certificates are signed by “zenithapp-1.xyz“. The email is directing customers to click on a fake link “https://zenithplc-nig.app/60Qut1T”, which does not originate from Zenith Bank.

One of the unsolicited messages sent from the fake email address (alertz@zenithapp-1.xyz) to Zenith Bank corporate account holders is as follows:

“Dear YOUR CORPORATE BANKING ACCOUNT NAME,

We would like to remind you that your approval of our Anti-Money Laundering (AML) policy is still pending. In view of the heightened focus on financial security and the ongoing efforts against terrorism, it is essential for all our clients to endorse our AML policy to ensure uninterrupted service.

To finalize your AML application, please follow these steps:

1. Visit our Corporate Page https://zenithplc-nig.app/60Qut1T (FAKE)
2. Navigate to the “Account Settings” section.
3. Select the “AML Compliance” option.
4. Proceed with the instructions provided to complete the necessary steps.

Your approval is not only a regulatory requirement but also a demonstration of your commitment to a safer financial environment in Nigeria. Please be aware that the SCUML Certificate, issued by the Economic and Financial Crimes Commission (EFCC), is an integral part of this compliance process.

Thank you for your immediate attention and continued cooperation.

Best regards,
Zenith Corporate Team”

CONVERSEER reports that Zenith Bank had earlier sent customers emails, prompting them not to provide any personal details to anyone via SMS, WhatsApp, Emails, and Websites.

“Emails coming from Zenith Bank with have the @ sign and the official domain “@zenithbank.com” at the end.

The only official Zenith Bank website is https://zenithbank.com.

NOTE: Always verify a link before clicking on it, and after clicking on a link, always cross-check the top of your web browser to ensure it is the correct link. Do the same for emails and email addresses too.