8556829141

Received an email claiming “account locked” but with no mention about which bank or which card. Went to the website in the sender’s email address, and it’s just an empty page. This is 100% SCAM. I’m amazed that it has been up for years, somebody needs to report this.

Quote:

somebody needs to report this.

As long as it is someone else and not you?

Email telling me too many attempts to log in with wrong password. Call this number...

Account Locked

Your User ID has been locked due to too many failed login attempts. To unlock, click Forgot Password on the Login page and complete the steps required.
If you did not initiate these login attempts, please contact us at 855-682-9141.

Received email stating login stating account locked for too many failed login attempts. Number to contact is 855-682-9141. Scammers.

Although I'm a total skeptic, I think this email was possibly legitimate (but I certainly didn't call the number).  I have an FNBO account with the username listed, I think it was likely generated from my Schwab account where I have the username/password stored so that it can retrieve my FNBO account value.  When I logged into Schwab it said it checked the FNBO account "an hour ago" which basically matches when I got the email.  The IP address in the email belongs to Envestnet which provides this kind of service (I used dnschecker.org to lookup the ip address owner).  What is odd is that I should have gotten many more of these emails because Schwab checks the balance every business day, but I got the email once.  I changed my FNBO username/password anyway.

This might be useful for everyone who gets a 'shady' email.
https://www.card.fnbo.com/security-center/email-fraud

Received an email that my account had been logged in from an unrecognizable device with the IP address and the location details. One red flag with the email was zero identity of the sender. I Googled and confirmed it is a Phishing scam.

This is concerning as I received this email too. FNBO customer. I went ahead and changed my password. Logged in on my computer and it generated the exact same email that prompted me to start this search. The IP address listed in my first email that alerted me was IP: 104.207.172.129 which looks like it ties to Amazon and Yodlee (Envestnet). Something is odd here.

got email from "securebanklogin" about a login to my account number...called the number she wanted to know what Credit card number i was calling about, i said i was calling about my savings account and she was taken aback she told me to ignore the message as it was generated accidentally as a part of system update. I told her I want to talk to her supervisor, she said she would need to get my SSN to connect me to her supervisor. Total Scam!

Follow up from my last reply - I tried logging on my mobile banking FNBO app this morning to find my account was locked. I also received an email from noreply@securebanklogin.com stating my account has been locked and the following: "Your User ID has been locked due to too many failed login attempts. To unlock, click Forgot Password on the Login page and complete the steps required.
If you did not initiate these login attempts, please contact us at 855-682-9141."

I am glad I changed my password the other day. I think these emails are legitimate and people need to be changed their passwords.

I am going to go into a FNBO branch today to see what is going on.

The website securebanklogin.com is the login domain for any FNNI website. FNBO (First National Bank of Omaha), is a subsidiary of First National of Nebraska, Inc. (FNNI)

While that is the legitimate login site, scammers will "fake the link" in emails to look like the real one, but the hidden link will take you elsewhere.  Here is an example:
Click the link and see where you get taken, don't worry, it is safe. You can also hover over the link to reveal the hidden one. My point is the link in the email might not actually be to the real bank login and you wind up giving your login info to a scam phishing site mirrored to look like the real one.

The best solution is to never click a link in the email, even if you think it might be safe. Always go to the website by inputting the url or bookmark it and access it from your trusted method.

Received an email saying that my account had been accessed.  The securebanklogin.com does not exist.  When I called the number, the gentleman definitely had an accent and knew the name of my bank.  The first thing they asked for was my account number.

The joke's on them tho....I'm a scambaiter and am gonna forward this to the entire scambaiting community.  Let's see if we can get this phone number taken down.

UPDATE:  So this may have been a legitimate email.  After further research, the IP they said logged into my account belonged to Amazon.  I did have an item from Amazon get shipped out today so it may be related.  I then went to login to my FNBO account from my PC (which I hadn't done before) and I literally got the exact same email showing my login.

This is just so odd.  Turns out the domain does belong to FNBO.  When I called the number, the person who answered had a very heavy accent and immediately asked for my account number...not my name or anything.  That is just not professional and seems fishy.  I did report the email to FNBO's fraud department, waiting to see what they say in return.  It's just so strange that nothing in the email or the automated system when you call mentions the bank name.  While this may have been legitimate, I still don't trust it.  I also have 2FA active on my account and I never got txt'd a login code for their supposed login so I don't think someone actually tried logging into my account as I would have gotten sent a 2FA code on my phone.

Very, VERY strange.

Email i got at 2AM EST is below. IP states Asburn VA, which is not far from me at all. However, with this being owned by Amazon, it's probably part of Amazon's AWS so this IP is known and the scammers use it to seem more legit. They managed to get my name and userid which is impressive though.

New sign-on detected for your digital banking account.
Hi [my name],
Your account [userID] was just used to sign-in from a new or unrecognized device, browser, or application. This includes the use of your User ID to log in through other financial tools (Quicken, Quickbooks, etc.) that you may have set up externally.
Sign-In Details
CHROMIUM_EDGE - Mac OS X
Tuesday, April 8, 2025
Ashburn, Virginia, United States
IP: 3.214.25.67
Location displayed is determined by your Internet Service Provider.
Don't recognize this activity?
If you do not recognize this activity, your account may have been compromised; we recommend reporting the suspicious activity by calling 855-682-9141.
We were unable to determine if you had previously signed in with this device before. This notification is common if you are signing in a new device, a new browser, have deleted your cookies or are accessing your digital banking account in Incognito Mode.

Douglas County deputies say suspects stole over $53,000 from accounts at First National Bank in Omaha - Updated: 4:28 PM CDT Apr 7, 2025
https://www.ketv.com/article/douglas-county-d ... l-bank/64408006

The domain seems to have been changed for a new login method.
https://auth.securebanklogin.com

FNBO wrote:

Account Login Process Has Changed
As our world becomes more reliant on digital technology, our team at FNBO is listening to your requests and always searching for the safest and most secure tools to improve our Online and Mobile Banking experiences.

In this effort, we updated our login process to Online and Mobile Banking. Below you’ll find more information about the update, and Frequently Asked Questions to help you better understand the update and troubleshoot if you have any issues.

https://www.fnbo.com/login-help

Said activity "on my online account" had been accessed from an unrecognised device.  Had my user name listed.  Problem was the warning email came on the 7th while the email that said told of the possible account breach came on the 8th.  They must be good to predict a problem the day before the problem.