Phishing Scam: Capitec and Nedbank

[maeztro]

We have all seen this or variations of this:
----------------
CAPITECBANK

Dear Client,
An indirect payment has been made into your account from another Bank, in other to process or reverse this situation please do click here to login. During this process,your token numbers is checked and can be require more than four times.

Regards,
CapitecBank Limited 2012
----------------

Starting in November 2011, I have received 8 of these - allegedly from "Capitec" and "Nedbank". (hold your horses, punchline to follow). Nothing unique, I hear you say. I know, I have countless similar examples. What makes these unique is that it is coming in on an unique disposable email address that I have only given out to one website when doing an enquiry in October 2010. At that stage I received two emails from them - legit; and nothing since - also legit since the interaction was at an end. I have also, since 2002, received nothing similar on that "family" of disposable email addresses.

My theory is that they has some form of data breach. Someone made off with their email database and is now attempting to scam South Africans.

Thoughts?

 

[intel8080]

Emails are not secure are they? Anyone with the right server access and knowledge can get the address. Some unscrupulous network managers make money by selling anything of value they can get out of the network. Although your assumption can also be correct.

 

[maeztro]

From their Privacy Policy page:

------------------
Privacy is taken seriously at xxx. We are committed to protecting the privacy and security of visitors. We will not sell or make any customer information available to anyone.
------------------

Slightly paraphrased and edited to make it more difficult to find the origin. I want to with the network manager idea though.