A new Chase Bank e-mail phishing scheme has been launched that asks recipients to provide their personal information on a toll-free telephone call. This technique is expected to have a good success rate, because victims are accustomed to seeing malicious URLs in Chase phishing attacks, but are not used to seeing a number to call.
When victims dial the phone number, they are welcomed with a recorded message asking them for their account number, its expiration date and the last four digits of their Social Security number.
At the end, the message says, "Thank you. Your account has been verified."