RSA FraudAction – Trial Offer Terms of Service

RSA FraudAction – Trial Offer Terms of Service

RSA, The Security Division of EMC, is offering a free Trial of RSA’s FraudAction shutdown service on a select basis. Institutions wishing to sign up for this trial offer must register with RSA, where their application will be reviewed for approval. Enrollment in the Trial offer is not a guarantee of Service from RSA, nor does it imply contractual obligations between the enrollee and RSA.

1. Institutions approved for participation in the free Trial will receive up to three (3) shutdowns of “Phishing” sites directed against the approved institution. Shutdown services will be provided by the RSA Anti-Fraud Command Center (AFCC), RSA’s 24x7 team fighting External Threats.


1. Shutdown services will be provided only for the main Brand of the enrolled institution. Alternate Brands or 3rd party “on behalf of” shutdowns are not permitted.


2. Final authority on deciding whether or not to work to shut a site down will rest exclusively with the RSA AFCC.


3. For this Trial offer, RSA is only able to provide shutdowns of traditional “phishing” sites. Shutdown requests for Brand Infringement, Pharming, Trojans/Malware, and other alternative External Threats cannot be honored as part of this offer.


4. The RSA AFCC will track the number of shutdowns provided per approved institution. Generally speaking, a “shutdown” is defined as the effort to close a unique site (by URL) at a single ISP.


5. Participating institutions will have up to sixty (60) days from the date of registration approval to request usage of their trial shutdowns for active phishing sites. RSA reserves the right to extend the available time window.


6. RSA reserves the right to terminate the Trial offer at any time without advance notice to participating accepted institutions.




2. Upon receipt from an approved institution of a legitimate Phishing site, RSA will make all reasonable efforts to shut the site down per our Standard Operating Procedures within the AFCC.


1. For this Trial, the RSA AFCC will only initiate a shutdown on suspected sites provided by approved institutions. RSA will not provide any Detection services, nor will RSA proactively attempt to shut sites down without request.


2. There are no Service Level Agreements (SLAs) associated with the time it takes to respond to and shut down a phishing site, as there are too many variable factors involved to maintain rigid time expectations. RSA will make all reasonable efforts to close the site in an acceptable window of time.


3. RSA requests best efforts to be made to provide copies of the Phishing email as well as the URL of the legitimate site to be provided upon submission of a phishing site. This will assist the RSA AFCC in verification of the phishing site.


4. Upon successful shutdown of a phishing site, RSA will continue to monitor the site for a limited period of time to ensure it does not re-launch itself.




3. Service Notes


1. All Communications as part of this Trial offer will either be web-based (via sites provided by RSA) or via email. Upon receipt of a confirmed phishing site, the RSA AFCC will correspond via email with the approved institution to confirm the attack, confirm shutdown, and provide any interim updates as necessary.


2. Whenever reporting a phishing site, accepted institutions must provide a single point of contact email address for the RSA AFCC to communicate with.


3. All communications associated with this Trial offer will be in English.


4. The RSA AFCC will use its standard Cease and Desist (C&D) letter template on behalf of accepted institutions when requesting of ISPs, Registrars, or any other necessary entity to assist in terminating the phishing site.


5. Forensic research on phishing sites shut down as part of this Trial will be provided at the sole discretion of the RSA AFCC.




4. RSA is not responsible or liable for any negative impact to the approved institution as a result of the existence of the phishing sites or RSA’s efforts to shut down these sites. RSA is offering this Trial as a promotional effort and bears no legal obligation to participating institutions.


5. Promotion and/or Publicity by an approved institution of the engagement with RSA must be done with the explicit approval of RSA. RSA will provide all reasonable confidentiality of approved institutions’ participation in this Trial, but withholds the right to use statistical research and results that may be an outcome of the Trial.