Your online access to Rabobank is fine.
A phishing email impersonating Rabobank is circulating, pushing you to click a link and update account details after claiming your online access has been flagged.
You could receive an email with the subject line Important Notice - Action Required, appearing to be from Rabobank. It warns that your online access has been temporarily flagged because profile information is missing or incomplete, then urges you to click Start here now to verify and update your details. The message is plain and direct, designed to look like a routine account notice that needs immediate action.
What makes it convincing is that the email can pass basic sender checks, so it may not be blocked automatically. That does not make it genuine. The sending domain, inkamountainperu.com, is unrelated to Rabobank and has no obvious business sending banking notices, which is your clearest red flag. If the message claims to be from a bank but the actual sender address points somewhere completely different, you should treat it as hostile.
The attacker is trying to get you to click through and hand over banking or login details on a fake site. If you engage, your credentials could be stolen and reused for account access, fraud, or follow-on scams against your business. A message that looks clean at first glance can still be the entry point to account compromise.
The domain the message claims to be from. Fresh registrations and known-bad reputations are the strongest technical tells of a spoofed sender.
Practical steps you or your IT provider can take to reduce the risk from this kind of threat.
- Check: Confirm the real sender address before you click anything. If it claims to be from a bank but uses an unrelated domain, treat it as suspicious.
- Do not: Click the link or enter login, banking, or personal details from this email.
- Verify: If you are worried about your account, go to the bank website yourself using a saved bookmark or call the bank on a number from its official website.
- Report: Flag the email to your IT provider or security team and remove it from inboxes if it has been received in your organisation.
- Contact Decision1: If you believe your business has been targeted, contact the Decision1 team immediately.
See what a genuine Rabobank NZ message looks like, the real sender domain, the real link destination, and where to report a fake.