Bank of the Philippine Island has cautioned its customers to be more vigilant after learning about a fake BPI website.
The layout for the fake website showed http://www.bpiexpressonlineph.com when its correct address should be https://www.bpiexpressonline.com.
After successfully taking down the fake website, BPI shared few tips on how to avoid landing on these websites and getting victimized by fraudsters.
- Check email address, domain name
Hover your mouse pointer over the link and copy of the URL. The hyperlinked URL will be shown in the status bar at the bottom of your email. If it does not match the URL you intend to visit, it is most likely a fake website, the BPI advisory said.
- Check site security
A secure website begins with https: and has a lock icon in the page, which means that it uses an SSL protocol.
- Be wary of embedded forms
Forms that ask for passwords of personal email accounts are usually fake.
BPI also said that they never ask for personal information using embedded email links.
The bank said they want customers to keep their accounts safe by changing their passwords regularly, and avoiding using of shared computers.