Which? have received multiple reports about unsolicited emails from scammers posing as Halifax. These messages appear to come from Halifax, but the true sender addresses are hijacked TalkTalk and Tiscali accounts.
The scammers used convincing Halifax branding and claimed to be asking customers to 'refresh their contact details' as an extra security measure, inviting them to click a link that redirects to a fake Halifax website.
Legitimate banks will never ask for sensitive information such as your PIN or full password via email. If you receive a suspicious email, find out how to check the website's details, including the creation date, to avoid these scams.
Halifax phishing scam - the fake website may look identical to the genuine Halifax website, the real Halifax domain is [halifax-online.co.uk] not [hlfx-online.com]. Visit link below to find out more.
Source: Which? (26 Sep 2023)