2 examples of phishing attacks

Fraudsters can publish fake car sale ads regarding vehicles which do not exist. They spoof CashSentinel brand and make the victim send them money using a fake transaction. Be vigilant and keep the following notes in mind:

  • The only official CashSentinel website is www.cashsentinel.com. A lock icon must be displayed in your web browser on each page of our website.

  • CashSentinel never send emails. Do not follow links nor instructions given to you by emails or SMS. Manage your contracts only through our website www.cashsentinel.com or using our application.

  • CashSentinel always use one of the following bank accounts :

    • A bank account whose IBAN begins with FR763000 and ends with 1889, hosted by La Société Générale.

    • A bank account whose IBAN begins with FR763000 and ends with 4992, hosted by BNP Paribas.

    • A bank account whose IBAN begins with CH800878 and ends with 3700, hosted by Swissquote Bank.

  • In case of doubts, you can call CashSentinel at any time :

    • +33 (0) 1 82 88 24 76 in France.

    • +41 (0) 24 552 00 60 in Switzerland.

An example of phishing attack

Modus operandi : usurping SMS, fake website, abroad bank accounts.

1

The ad

It seems correct globally. The ad is most of the time a good deal, the vehicle might not be new but the price is attractive. The seller presents himself as living abroad and tells the victim that the car will be delivered after the transaction.

A consistent ad can be a scam even on trusted websites, be vigilant.
Annonce
2

The redirection

The crook will then send a fake SMS or a fake email with a link to a copy of CashSentinel website.

For your safety, CashSentinel never sends links using SMS and never communicates using emails. Moreover, all SMS sent by CashSentinel are displayed in the same message thread.
SMS
3

The fake website

It is a copy of CashSentinel website and it is visually identical. The goal of the crook is to make the victim believe that he is actually using CashSentinel genuine website. The name of the fake website can look like the name of CashSentinel website but it will not be de www.cashsentinel.com (for examples: www.cashsentinel.com-user.com or www.cash-santinel.com)

The Only CashSentinel website is www.cashsentinel.com.
Faux site
4

The scam

It happens when the victim is asked, on a fake website, through SMS or emails to transfer money to a bank account allegedly belonging to CashSentinel. However this bank account is in fact under the fraudster control. This bank account has most of the time been opened by the crook using a fake identity or with a stolen identity card.

CashSentinel escrow bank accounts begins with FR763000 if you are in France, or with CH800878 if you are in Switzerland.
Transmission des coordonnées

An other example of phishing attack

Modus operandi : usurping emails, fake PDF contracts, abroad bank accounts.

1

The ad

It seems correct globally. The ad is most of the time a good deal, the vehicle might not be new but the price is attractive. The seller presents himself as living abroad and only communicates using emails.

A consistent ad can be a scam even on trusted websites, be vigilant.
Annonce
2

The transmission of the details

The crook will first try to get the victim's email address. Later, he will ask for personal informations of the victim (such as his fullname and his address) under the pretext of sending them to CashSentinel.

Both the buyer and the seller must register individually on CashSentinel website. The only information they must share is their phone number.
Transmission des coordonnées
3

The fake contract

It is sent as an attachment of an email. The email is in fact not sent by CashSentinel but by the fraudster instead. He uses an email address which can be used by anyone and which barely looks like a potential CashSentinel email address. For example: cashsentinelfrance@gmail.com

CashSentinel never sends emails. The contract is given to you through the CashSentinel accounts of the buyer and the seller.
Transmission des coordonnées
4

The scam

It happens when the victim is asked to transfer money to a bank account allegedly belonging to CashSentinel. However this bank account is in fact under the fraudster control. This bank account has most of the time been opened by the crook using a fake identity or with a stolen identity card. Once the victim has payed, the fraudster will not communicate with him anymore.

CashSentinel banking informations are only given to you through the CashSentinel accounts of the buyer and the seller.
Transmission des coordonnées