Web fraudsters are increasingly targeting consumers with password-confirmation scams, experts have warned.

The scam involves sending emails which purport to come from a service provider asking consumers to confirm their passwords at a website. Customers of several British banks were targeted last month.

The websites are cunningly constructed fakes. Once the password entries are made online thieves collect them. As well as banks, companies like eBay have also been targeted.

"A huge number of people are getting suckered by spoof websites, particularly in the US," said Scott Schnell, senior vice president of sales and marketing for RSA Security.

[ Read more ]