Scam alert: "Digital certificate" and "NCR" emails from TD, Tangerine, etc.

Just a heads-up:

I've been getting relentless emails for the past few months, with my full legal name, purporting to be from Tangerine and TD. Both are banks I've had accounts with in the past.

Here are screenshots of two emails, as an example: images

This is a scam.

The emails always come from different email addresses, and they request you to update your account to "add NCR" or "update your digital certificate" to prevent unauthorized users from accessing your account. Usually there is a link to a fake login page, and with the newer emails thy also include a 1-800 number (which doesn't belong to either bank). I assume there must have been some kind of data breach to allow scammers to get access to names and previous account information and it's being exploited...?

I didn't use my legal name on either account (it's too long for most systems, so I use a shortened version) and I no longer have accounts with these banks, so it was pretty fishy to me at first and I simply ignored the emails. Recently the scammers have been a little sloppy and misspelled "Easyweb" as "Easywb".

That being said, if you're not paying attention or are unfamiliar with phishing scams it can be pretty convincing — the emails are well-formatted, use your full name, lead to a url that is very similar to the actual bank website, etc.

If you get one of these emails, ignore it, don't click on any links, and log into your bank's site separately to check for any notifications.

(Obligatory "provide your province" note: I used to be in Ontario, but no longer live in Canada).