Earlier today I received an email from Capital One asking me to “Take a moment to update your phone number, mail, and e-mail addresses.” The problem is the message was not addressed to me, but instead to someone else. And the line that says “Re: Your account number ending in xxxx” had four digits in place of the xxxx. They weren’t the last four digits of my account number. I think Capital One is having some major problems with their customer database.
I called them, and they denied there was a problem. I forwarded the note to them at firstname.lastname@example.org. The links in the message were all at capitalone.com, so I don’t think it was a phishing attempt. And I use a unique email address whenever I register somewhere, so I don’t think the phishers could have used it to contact me.