Sainsbury's 'Customer Satisfaction Survey' Phishing ScamOutline
Email purporting to be from UK supermarket chain Sainsbury's, claims that the recipient can receive a credit of £100 just for filling in a customer satisfaction survey contained in an attached file.
The email is not from Sainsbury's and users will not receive £100 for completing a survey. It is a phishing scam designed to steal credit card details and other personal information from recipients.
Subject: Customer Satisfaction Survey!
You have been selected by Sainsbury's Online Department to take part in our quick and easy reward survey.
In return we will credit 100 Pounds to your account - Just for your time!
Helping us better understand how our members feel, benefits everyone.
With the information collected we can decide to direct a number of changes to improve and expand our services.
The information you provide us is all non-sensitive and anonymous. No part of it is handed down to any third party groups.
It will be stored in our secure database for maximum of 3 days while we process the results of this nationwide survey.
To access the form, Please download the attachment
and open the form in a browser and follow the instructions on your screen.
Email contains a HTML attachment that displays the following form:
This email, which purports to be from UK based supermarket chain Sainsbury's, claims that recipients can earn a credit of £100 if they open an attached file and fill in a customer satisfaction survey.
However, the email is not from Sainsbury's and the supposed survey is bogus. Users will certainly not receive £100 for participating. In fact, the email is a phishing scam designed to steal credit card details and other personal information from users.
Clicking the attached file will load a HTML form in the user's browser. The form begins with a brief set of questions about the user's experience when shopping at Sainsbury's. The second part of the form asks for credit card details, ostensibly so the £100 survey fee can be deposited in the user's account.
Once the user clicks the "Next" button, he or she will be transferred to the genuine Sainsbury's website.
Meanwhile, the criminals running the scam can collect the information submitted on the bogus survey form and use it to commit credit card fraud and identity theft.
Survey phishing scam messages like this one are quite common and have targeted customers of a number of high profile companies around the world, including McDonald's, Coke, Woolworths and several banks.
Be very wary of any unsolicited email that promises large cash rewards or expensive prizes in exchange for filling in a brief survey. Of course, from time to time, companies may conduct legitimate customer surveys. And sometimes they may offer an incentive to participate such as the chance to go in the draw for a prize. But, they certainly will not offer a large cash reward for every person that participates in an insignificant survey.
If you receive an email promising a large fee for filling in a survey, do not open any attachments that it contains. Do not click any links in the message either, as some versions of the scam use bogus websites to host the fake forms rather than attached files.
Last updated:January 5, 2014
First published: January 5, 2014
By Brett M. Christensen
Phishing Scams - Anti-Phishing Information
McDonald's Survey Phishing Scam Email
Coca Cola Survey Phishing Scam
Woolworths 'Customer Satisfaction Survey' Phishing Scam
ANZ 'Quick 3-Question Survey' Phishing Scam