Best Phishing email I have ever received!

Scary as it sounds so legit, they are basically telling you exactly what they are doing with this phishing email! I have received the same email for several banks, this one MY BANK!

From: Cybersecurity desk (eyahsy@fgwhrus.com)  To: luv_dr@othersideoz.ca

Subject: Cybersecurity notification from TD Bank                              11-11-2025

 

Cybersecurity Notification — Mandatory Security Verification for All Users (Phishing Activity Alert)

Dear Client,

Due to a recent rise in phishing schemes that attempt to compromise customer accounts, we are implementing a mandatory cybersecurity authentication requirement for every user of our services. This measure protects account assets, reduces unauthorized access, and maintains strong safeguards for all transactions. Completing verification is required to ensure that transfers, withdrawals, profile updates, and other functions remain fully enabled. Our monitoring shows that adversaries are increasingly imitating trusted brands to collect credentials and redirect users to counterfeit pages. To counter these threats, we are asking all clients to complete a one-time, enhanced identity confirmation that binds your account to verified signals and trusted devices.

Please verify promptly through our secure online portal:

Complete Security Verification (link removed)

The procedure is encrypted end-to-end, reviewed by our Information Security Office, and designed for speed and accuracy. You will be guided step-by-step to confirm identity details, validate a trusted device, and enable phishing-resistant multi-factor authentication. For your safety, we will never ask you to share your password, disclose a full one-time code, or grant remote access to your device. If you prefer not to use the email link, you may sign in directly via our official website or mobile app and navigate to “Security Verification.” Accounts that do not complete verification within the notice period may have certain features temporarily limited to prevent fraudulent activity. Once finished, your cybersecurity certification remains valid for a three-year term and can be renewed before expiration.

If you have questions or need assistance, please contact our Cybersecurity Support Desk. Specialists are available to help you complete the process, review recent activity, or report suspicious messages that claim to be from us. If you have recently completed identity verification in the last 30 days, your status may already be current; however, we encourage you to review your settings to ensure that a phishing-resistant factor is active and that recovery information is up to date. To validate that a message is legitimate, confirm the sender’s domain, look for a lock icon in your browser’s address bar, and avoid entering credentials on pages reached through unexpected links. You may always navigate manually by typing our official site address into your browser or by using our mobile application.