I received a text saying it's from SANTANDER
"We have detected suspicious activity on your account. Please verify via the secure link."
Then it gives a link
Link removed by El Loro for security reasons - it goes to a site in the States using the ChinaGlobal Cache Network ISP.
Saying verify using this link, "to prevent account lockout"
As well as all the good information on this thread, I think it's always worth remembering how the real banks operate.
I've recently had a genuine email from Santander: it was just a notification that my new cash card would be delivered soon by post, and did not require me to take any action.
About a week or so later I received important notifications concerning my accounts which did require action, but these all arrived by post.
FYI, the official Santander email included the following security information:
Your security is our priority
We will never ask you to supply personal information such as passwords or other security information via email. As an added security measure, we’ll always include the last three digits of your postcode at the top of any email we send you or quote the last four digits of your account number in order to identify ourselves to you.
Links within our emails will only take you to information pages.
Please forward any suspicious emails to firstname.lastname@example.org. As an additional security measure every customer email sent to you by Santander will be addressed to you personally. Please report to email@example.com any email that appears to come from Santander but is NOT addressed to you personally.