By Phil Coleman

Last updated 10:15, Saturday, 06 September 2008

Banking chiefs have issued a warning over a sophisticated internet banking scam that attempted to dupe people into handing over personal account details.

The latest so-called “phishing” fraud involved an email that targeted dozens at staff working at Cumbrian Newspapers Ltd in Carlisle.

The email included a link to what looked like the official website for HSBC Bank.

Recipients were told their access to internet banking had been suspended and that as customers they needed to log in.

The site then asked for a user ID number and other details which, if given, could give the fraudsters access to the person’s personal account.

The News & Star has found that the bogus website is linked to a Malaysian dating website.

Tim Pie, head of personal finance media relations for HSBC, said: “I can only assume that somebody has somehow got hold of everybody’s email address at Cumbrian Newspapers, undoubtedly illegally.

“Unfortunately, criminal phishing gangs operate from all over the world, buying and selling email lists with thousands addresses for use in the scam.

“In the UK, one in ten people will have some sort of banking relationship with the HSBC, though not all will use internet banking.

“To succeed, they have to get people who are not aware of phishing scams.

“Thankfully, these scams are increasingly unsuccessful. Most people are aware that their bank does not communicate with them by email in this way.”

He said that the bank carried out its own monitoring to check on what may be suspicious transactions in customer accounts.

Anybody who is concerned about a potential phishing scam can contact HSBC on 0845 600 2290. Suspicious emails can be forwarded to phishing@hsbc.com.