Today, I received an email as if it is from Axis Bank. The from address is account-upgrade@axisbank.com. The email suggests to upgrade the account due to security reasons. The email claims that the upgrade is due to security reasons! They suggest to click the link attached in the email. The url resembles to a axisbank.com website. However, the actual url is a random website which belongs to korean cctld.

The strange part is how they get the correct email address of all Axis Bank customers. Yeah, I have an account with Axis Bank.

The snapshot of the email I received as if it is from Axis Bank:



The destination website which claims to be axis bank website (refer to the actual URL):