Skip to content
BOL Conferences
Thread Options
#1623340 - 11/02/11 03:20 PM FinCEN New Posting Email Scam
Getting_Grayer Offline
100 Club
Joined: Oct 2007
Posts: 194
USA
Good day.

I was wondering if any other banks seemed to get an email claiming to be from FinCEN about posting to the Secure Information Sharing System (314a) and to click a link to register. The link is to "fincenns (dot) com" which is not the usual .gov link for FinCEN (not to mention the odd spelling). The scary part is that the email is relatively a duplicate of the normal posting email sent by FinCEN.

Again, just seeing if my bank was hit or if others (and to alert others) were hit as well.
Last edited by Getting_Grayer; 11/02/11 03:22 PM.
Return to Top
BSA/AML/CIP/OFAC Forum
#1623345 - 11/02/11 03:23 PM Re: FinCEN New Posting Email Scam Getting_Grayer
Trees Offline
Power Poster
Joined: Apr 2005
Posts: 4,013
We got it too, this morning. Pretty tricky SPAM, too.

Return to Top
#1623352 - 11/02/11 03:26 PM Re: FinCEN New Posting Email Scam Trees
banker1976 Offline
Gold Star
Joined: Nov 2005
Posts: 346
Mid-Atlantic
We got it too, but another employee in the bank got the email instead of me who always gets the FinCEN emails.
_________________________
CAMS
CAFP

Return to Top
#1623353 - 11/02/11 03:26 PM Re: FinCEN New Posting Email Scam Trees
J2C Offline
Diamond Poster
Joined: May 2004
Posts: 1,475
Big Brother knows and that's a...
We got hit with it....our IT Security Officer got it and called me and said [censored] is this!?! Anyway, I contacted FinCEN, they are working on it now. Looked very legitimate until you see the link provided!
_________________________
My opinion is mine only- not my employer's!


Return to Top
#1623354 - 11/02/11 03:26 PM Re: FinCEN New Posting Email Scam banker1976
manimal Offline
Diamond Poster
manimal
Joined: Feb 2008
Posts: 2,207
Deleted
We got it too, I forwarded it to our IT Department after noticing the funny link. They sent out an alert to all employees since several of us got it.
_________________________
We're all here 'cause we've lost control.

Innerpartysystem

Return to Top
#1623360 - 11/02/11 03:29 PM Re: FinCEN New Posting Email Scam manimal
EB, CAMS Offline
100 Club
EB, CAMS
Joined: Mar 2009
Posts: 133
flyover country
We had a couple of employees get that email as well.
_________________________
It is actually possible for you and I to have different opinions and yet still live peaceably upon this planet.

Return to Top
#1623367 - 11/02/11 03:32 PM Re: FinCEN New Posting Email Scam EB, CAMS
Tater Offline
Platinum Poster
Joined: Jan 2006
Posts: 642
Missouri
When you all started chatting about it, I sent an alert to our holding company and one of the other bank presidents just got it...*phew*

Thanks to BOL'ers!
_________________________
Born once? Die twice.
Born twice? DIE ONCE!

Loan Review, HMDA, ALLL

Opinions are my own and do not reflect any others

Return to Top
#1623392 - 11/02/11 03:44 PM Re: FinCEN New Posting Email Scam Tater
Deena Offline
Power Poster
Deena
Joined: Nov 2000
Posts: 2,701
PA
I posted about this in the Private forum - didn't think we should be discussing it here.
_________________________
Opinions expressed are mine and not necessarily those of my employer.

Return to Top
#1623393 - 11/02/11 03:45 PM Re: FinCEN New Posting Email Scam Tater
Retread Offline
Power Poster
Retread
Joined: Oct 2003
Posts: 2,548
Southeast
Here is the "whois" info on fincenns.com. Does not look like our FinCEN. Note the registration date.

Domain Provider: AlfainHost
Website: http://www.alfainhost.com

Domain fincenns.com

Date Registered: 2011-11-2
Date Modified: 2011-11-2
Expiry Date: 2012-11-2

DNS1: ns5.paynhost.com
DNS2: ns6.paynhost.com

Registrant
Martin Dudley martin dot dudley (at) live dot com
windsore str 11
WN3 9PM london
United Kingdom
Tel: +44.394023849

Administrative Contact
Martin Dudley martin dot dudley (at) live dot com
windsore str 11
WN3 9PM london
United Kingdom
Tel: +44.394023849

Technical Contact
Martin Dudley martin dot dudley (at) live dot com
windsore str 11
WN3 9PM london
United Kingdom
Tel: +44.394023849
_________________________
Politicians are like diapers. They need to be changed often and for the same reason.

Return to Top
#1623486 - 11/02/11 04:51 PM Re: FinCEN New Posting Email Scam Retread
QCL Offline
Power Poster
QCL
Joined: May 2002
Posts: 6,259
NW IL
Has anyone contacted FinCEN?

Return to Top
#1623496 - 11/02/11 04:58 PM Re: FinCEN New Posting Email Scam QCL
#Just Jay Offline
10K Club
#Just Jay
Joined: Oct 2006
Posts: 14,390
Cheeseheadland
FinCEN has already sent out a notification via email stating they are aware of the issue.
_________________________
I don't repeat gossip, so listen closely...

Return to Top
#1623499 - 11/02/11 05:01 PM Re: FinCEN New Posting Email Scam #Just Jay
QCL Offline
Power Poster
QCL
Joined: May 2002
Posts: 6,259
NW IL
We have not received that. Thanks Jay.

Return to Top
#1623845 - 11/03/11 09:24 AM Re: FinCEN New Posting Email Scam Getting_Grayer
Elwood P. Dowd Offline
10K Club
Elwood P. Dowd
Joined: Aug 2001
Posts: 21,939
Next to Harvey
It's a bit unnerving that anyone knows enough about such an obscure mechanism to replicate the content in any credible way as well as identify bank specific contacts even if they were the wrong people. That clearly reinforces the decision made here to not deal with 314(a) questions in public forums. FinCEN was aware of the problem early on and notified the regulatory agencies. FinCEN sent all follow-up communications to financial instituions through the secure system.

Message displayed on URL as of right now: THIS ACCOUNT HAS BEEN SUSPENDED
_________________________
In this world you must be oh so smart or oh so pleasant. Well, for years I was smart. I recommend pleasant.

Return to Top
#1624129 - 11/03/11 05:56 PM Re: FinCEN New Posting Email Scam Elwood P. Dowd
Newly Southerner Offline
100 Club
Newly Southerner
Joined: Jun 2011
Posts: 170
Just got an email from them stating us to change our password due to the email from yesterday.

Return to Top
#1624130 - 11/03/11 06:00 PM Re: FinCEN New Posting Email Scam Elwood P. Dowd
J2C Offline
Diamond Poster
Joined: May 2004
Posts: 1,475
Big Brother knows and that's a...
Originally Posted By: Ken_Pegasus
It's a bit unnerving that anyone knows enough about such an obscure mechanism to replicate the content in any credible way as well as identify bank specific contacts even if they were the wrong people. That clearly reinforces the decision made here to not deal with 314(a) questions in public forums. FinCEN was aware of the problem early on and notified the regulatory agencies. FinCEN sent all follow-up communications to financial instituions through the secure system.

Message displayed on URL as of right now: THIS ACCOUNT HAS BEEN SUSPENDED


Ken,
Unfortunately none of our registered users got any messages from the secure system yesterday. The only message we got was the one that came a little while ago to re-register.
_________________________
My opinion is mine only- not my employer's!


Return to Top
#1624269 - 11/03/11 08:03 PM Re: FinCEN New Posting Email Scam J2C
Elwood P. Dowd Offline
10K Club
Elwood P. Dowd
Joined: Aug 2001
Posts: 21,939
Next to Harvey
Thank you. I was relying on what a banker told me for that observation.
_________________________
In this world you must be oh so smart or oh so pleasant. Well, for years I was smart. I recommend pleasant.

Return to Top

Moderator:  Andy_Z