Phishing is where a fraudster sends you an email or letter pretending to be us, or another organisation you trust.
Smishing is where fraudsters pretend to be us or other trusted organisations by SMS (text message). Fraudsters are very clever and can intercept text messages, so their texts appear in the same conversation as a previous genuine TSB text. Follow the tips below for things to look out for.
How to spot phishing and smishing
Fraudsters' websites can be identical copies to real ones. So always check the web address. Our main website is https://www.tsb.co.uk so make sure you always see this address in your browser and navigate to where you need to get to from there. ‘https’ at the start of a webpage address means it’s a secure site you’re visiting.
One way to be sure you’re always logging into TSB Internet Banking is to go to tsb.co.uk and click 'Log In'.
We’ll never send you a ‘secure link’ to Internet Banking. If you receive an email or SMS asking you to log in, don’t click on the link and delete the email or SMS immediately.
Our spelling and grammar is pretty good. If there are spelling mistakes or grammatical errors it's probably not a genuine message.
We'll always address you by your name and include the last four digits of one of the accounts that you hold with us, or the last three digits of your postcode.
If the email or text message worries you, it's also unlikely to be us. We don't send out anything marked 'urgent', 'important' or suggesting we need to 'verify your account'.
As always, if you're in doubt, contact us via the numbers you can find on tsb.co.uk – and not via numbers in the message that worried you.