Posted on December 3, 2025
Appointment with a Phish: How Scammers Use Real Websites to Create Fake Alerts
Cybercriminals continue to find new ways to make their messages look authentic, and this tactic is a perfect example. It begins with an unexpected appointment confirmation email that appears to come from a trusted financial institution. The email includes a legitimate-looking subject line, a real institution email address, and even a warning about unusual activity in your account. It also provides a phone number for you to call right away.
Everything looks real, but it is not.
How the Scam Works
Scammers start by visiting a bank’s official website and filling out the legitimate Contact Us form. In the form, they enter:
• A fake tech support phone number
• A fabricated message about suspicious activity on your PayPal or bank account
• An email address they control
Once the form is submitted, the bank automated system sends an official appointment confirmation email to the address the scammer used. The scammer then forwards this email to you, hoping you will trust it because it originated from a real bank domain.
If you call the number listed in the email, you will be connected directly to the scammer who will attempt to gather personal or financial information.
How to Protect Yourself
Use these tips to stay safe:
1. Be cautious with unexpected emails.
Even if the message appears to be from a legitimate bank, company, or service provider, treat any unexpected alert with caution, especially if it urges immediate action.
2. Avoid using contact information in suspicious emails.
If you need to verify the message, visit the organization official website directly and locate the customer support number yourself.
3. Think before you click or call.
Scammers can use real organizations web forms to make their emails appear legitimate. Always pause and evaluate before taking action.
Stay Secure with Citizens State Bank
We are committed to keeping you informed about trending scams so you can protect yourself and your accounts. If you ever receive a message that does not feel right, contact us directly. We are here to help.