National Bank Email with subject Account Tax Records Maintenance Notification

For the record, this is a National Bank phishing email attempt that is recently going around, with subject Information about your online security and body "Account Tax Records Maintenance Notification"

What to do?  Report them, goto bottom of page. 

From: National Bank Direct Brokerage <noreply@tlnakf.com> Subject: Account Tax Records Maintenance Notification Account Tax Records Maintenance Notification   Dear Client, This notification is sent to inform you that your account tax records require maintenance in the form of a W-8BEN update. This process ensures that your tax classification and residency status are correctly reflected in our system. Your current record may have reached its scheduled review date or may not reflect your latest information. Under such circumstances, regulatory guidelines require us to request updated documentation. You may complete this update by accessing your account through our official, secured system at: Secure Account Maintenance Link After signing into your account, please locate the tax records or compliance section and follow the on-screen instructions to update your W-8BEN details. We do not collect or process tax data via email or direct messaging services. All updates must be completed through our secured platform.

Phishing Link

1. https://bnc-nbdb-coip.com/?token=xxxx

How to tell this is a Phishing email?

1. Check email address in full, if it's not from originating company then it's phishing.
2. Hover over all links in email, if it's not from the company's website then forget it.
3. The best way is to 

How to examine Email Message Source?

Now let's look at message source

1. Outlook.com->Actions->View Message Source. 
2. Gmail.com->More (down arrow to top right)->Show original.

Check for suspicious links, anything that does not originate from source domain, like apple.com.

Report Phishing Email (not as Spam)

1. Outlook.com->Junk (at Top)->Phishing Scam
2. Gmail.com->More (down-arrow to top right)->Report Phishing 

Report Phishing to Google

If you have received this email, take further action by

1. https://www.google.com/safebrowsing/report_phish/

Report phishing at Microsoft and government agencies

1. http://www.microsoft.com/security/online-privacy/phishing-faq.aspx