BEWARE: Fake email from buiding society

I received an email today purporting to be from the Chelsea Building Society with the subject line "We're making some important changes". It is very professional and at first I thought it was
genuine as it correctly quoted part of my postcode.
It was addressed to my yahoo account and originated in Germany. None of the links in the email are listed on the Chelsea Building Society website. I've forwarded the email to their security department.
Fortunately I did not click any of the links!
Add pictures here
<% if( /^image/.test(type) ){ %>
<% } %>
<%-name%>
Add image file
Upload
Add pictures here
<% if( /^image/.test(type) ){ %>
<% } %>
<%-name%>
Add image file
Upload

I do too. But this one was quite convincing because of the postcode. On the other hand it did not address me by name which was a give-away!
Add pictures here
<% if( /^image/.test(type) ){ %>
<% } %>
<%-name%>
Add image file
Upload
On Fri, 27 Oct 2017 08:38:28 +0100, Optimist

I missed the part where you said it included part of your postcode. That makes it much more interesting as it looks as though they might have connected your email address with the area you live. On the other hand, it could have just been a lucky guess.
Add pictures here
<% if( /^image/.test(type) ){ %>
<% } %>
<%-name%>
Add image file
Upload
On 25/10/17 13:27, Optimist wrote:

You are certainly well advised to check with the security department, but note that financial institutions are very bad about good security practices, and may well send out material with domain's of third party suppliers (this is or was common with online 3D security verifications).
So, don't follow a link unless the BS confirms it is safe, but don't be entirely surprised if they do.
Add pictures here
<% if( /^image/.test(type) ){ %>
<% } %>
<%-name%>
Add image file
Upload

I'm certain it was a fake as it did not address me by name. I guess that it must have got the postcode as a result of the yahoo hack.
Your advice about links is spot on. Even when I do know the email is genuine I use the link already bookmarked in my browser rather than trust one in the email.
Add pictures here
<% if( /^image/.test(type) ){ %>
<% } %>
<%-name%>
Add image file
Upload

BeanSmart.com is a site by and for consumers of financial services and advice. We are not affiliated with any of the banks, financial services or software manufacturers discussed here. All logos and trade names are the property of their respective owners.

Tax and financial advice you come across on this site is freely given by your peers and professionals on their own time and out of the kindness of their hearts. We can guarantee neither accuracy of such advice nor its applicability for your situation. Simply put, you are fully responsible for the results of using information from this site in real life situations.