Back to feed
Phishing email
High severity

This is a phishing email impersonating NatWest bank, designed to trick recipients into clicking a fake link and handing over their banking login credentials. It uses urgency, a fabricated account suspension threat, and a convincing NatWest logo to appear legitimate. The sending domain and login link are both fraudulent and unaffiliated with the real NatWest bank.

Indicators of compromise

Domain

natwest-alerts.comnatwest-secure-login.net

Email address

security@natwest-alerts.com

Sender name

NatWest Security Team

URL

http://natwest-secure-login.net/verify?ref=29847

Tags

urgent actionbrand spoofingbank impersonationcredential harvestlookalike domainsocial engineering

Sign in to confirm or dispute this report.

47 views2 confirmedGBAI confidence: 97%19 May