Bob received this text message on his mobile phone: ""Hello, this is Scott Smelby from the Yahoo Bank. Kindly contact me for a vital transaction on: [email protected]"". Which statement below is t

The @yahoo.com domain belongs to a public email provider, not to any bank; using it for official bank communications is a direct red flag, not a sign of legitimacy.

Replying to the provided address would contact the attacker directly, potentially exposing personal information or initiating further manipulation through continued social engineering.

Legitimate financial institutions and their employees use corporate email addresses tied to the organization's registered domain (e.g., @yahoobank.com), not free consumer email services. Because any person can create a @yahoo.com address with any display name, this message provides zero authentication of the sender's identity and is a classic social engineering or phishing attempt designed to create urgency around a 'vital transaction'.

Not personally knowing Scott is not a reliable technical indicator of a scam - the definitive indicator is the use of a free public email domain instead of a verified corporate bank domain.