Phishing Emails from Standard Bank Email Addresses

I manage a number of email spam filters and mail servers for my customers. We are currently receiving a significant number of phishing emails pretending to come from Standard Bank regarding their uCount rewards program. A few months ago, there was a similar problem with emails pretending to be about tax certificates.

The amount of spam/phishing emails pretending to come from Standard Bank is significantly worse than any other local bank. I called the Standard Bank complaints division, who told me to email ***, but that they do not respond to these emails. I was told that I may hand it over to my attorneys and take up the matter in court.

I am therefore repeating my request to Standard Bank... 1. Have a stricter SPF policy 2. Have a stricter DMARC policy 3. Use DKIM signatures on all your emails (if you are not already doing so)

While these measures will not prevent the problem, it will cause these phishing emails to be rejected by millions of servers around the world. By comparison, take a look at the DMARC policies of various banks:

ABSA: reject African Bank: reject FNB: quarantine Nedbank: none Standard Bank: none

Please, Standard Bank, show us that you care and publish stricter policies regarding who may send emails on behalf of Standard Bank.