---
title: "How to spot a phishing site, or more scammers"
author: "Stan Voo"
url: https://www.99rabbits.com/blog/how-to-spot-a-phishing-site
published: 2012-01-09
summary: "Another phishing email posing as PrivatBank, taken apart: the four details that gave it away. Plus a word of advice for the bank's security service."
---

# How to spot a phishing site, or more scammers

I've just received an email from yet another bunch of scammers posing as PrivatBank and its online banking, Privat24.

> Your profile is coming to its end.
>
> For to remain active, please click on the link below and follow the conditions of action:
>
> [http://www.privat24-ua.com/login](http://www.privat24-ua.com/login)
>
> Thank you to You, Privat24

Why did it catch my eye?

1. The odd text of the email itself, in Ukrainian, with the word "Спасибі" (a Russianism for "thank you").
2. The "From" field: Privat24 [security@privat24.ua](mailto:security@privat24.ua) via **agro.naverex.kiev.ua** (why would PrivatBank send emails through some third-party site?).
3. The real address is [https://privat24.ua/](https://privat24.ua/), and the connection goes over a secure channel (the address starts with https, not http).
4. At the bottom of their fake page there's a supposed link to [www.privatbank.ua](http://www.privatbank.ua) that leads to the very page we're already on.

Friends, be careful! **And I'd advise PrivatBank's security service to deal with things like this instead of investigating why I suddenly wanted to change the phone number on my account** (and demanding a written application!!!).