Post up and share your examples of spam phishing emails messages #scamaware

[MIKE770]

or Whitehall 12 12

[fightbackninja]

(Important) - We Noticed Unusual Activity in Your PayPal Account

YOUR ACCOUNT HAS BEEN CLOSED

This is to conform that you closed your account.

To cancel this action please follow the link below

The email is from Keith @authorised-ntqipo3n7.business

and the link goes to another strange name website - clearly not to PayPal.

[fightbackninja]

Just a yarn in relation to online scammers

next month, me and a few buddies are going to play a game with some online scammers again

operation potential victim

We have set up a systems of 5 legit, check outable potential scammer targets ( with ther permission/involvement ) , banks, housing, online presence, for there legend is real ( there really people and real addresses )

3 stages to run

1. Giving details with some legit banking stuff, but not enough to do anything, to 1 scammers list

Then, see how intense they try extract the money from the victim. See what online checking they do if they think there's money available

we have set some online traps if the names get searched and left some photos they may consider they can use against the victim's, one checks out as a rich widower, one a confirmed bachelor above 50, one looks like new money and stupid, one looks like a single dumped female ( bunny boiler ) and one is a young ( 25 ) kid with rich parents

lol, 2 of the names and addresses make them sound very rich, and google street view makes them look the part

2. Identify those using systems/softwares that maybe we can have a chat with

muahahaha, to do assessments of whos systems are just automated, and whos systems are guided ( 419ers ) and are likely to act further to get monies from the target

3. Operation backflip, Can we scam the scammers, or, make them scam themselves ( for charity of course )

To the scammers, the people will check out, the banks and legend will check out, the home addresses and curcs with check out, and there ( the victims ) responses will be encouraging. So, can we get the scammers to pay the victims costs first

Prizes ( pizza, a badge and some cudos for a year )

Firstone to get a payment of at least £ 5 ( GBP ) into the bank accounts
Most amount received from scammers into accounts
Longest train journey by them to collect a signature/paperwork
Funnest handover/exchange ( i won this previously )
Funnest act you can get a scammer to do, to receive monies

willl update with ther resuslt after summer

Hey Crazy Council, if you do have fun with scammers - tell me the story as I can post on my anti-scam blog

[fightbackninja]

Dear Sir,Madam,
we are hereby to confirmed whether it is true that you are terminally sick and you empowered two gentlemen to came to our office to stand and claim your contract/inheritance funds due to your ill health condition.

We told them to call back in 3 days and decided to contact you first to confirm the genuineness of their submission fr the compensation of $2.25 million.
Help us to confrim the following:-
1. your full name
2. your home and work address
3. your cell numbers
4. your identification
5. your occupation/age
6. your bank account details

Then we can act without delay.

[fightbackninja]

The Fake Product Testers Phishing Scam

"Testers Wanted"
Help us to test new improved Pampers nappies Active Fit.
The nappies are free and the delivery is free.

If you click on the link, it's actually to a lifestyle survey which is just a way for the scammers to get your personal information which they can then sell to other criminals.
There are no free nappies and no testers required.

[fightbackninja]

YAHOO Mail Upgrade
Dear valued user,
your mail system is outdated.
Failure to upgrade to the newest Yahoo Mail 7.1 now eil result in a permanent account closure.
According to provision 17.9 of terms and Conditions, yahoo may at anytime terminate its services for accounts.
To upgrade open the attached below.

Thanks
the Yahoo Team

[ostell]

Dear xxxx@ostell.xxxx.xx

This email confirms the Amazon Prime subscription:

Product Name: Amazon Prime One Year Plan
Order Number: 6465353
Receipt Date: 9/12/2018
Payment Method: Amazon Account
Membership Price: £79.00

The subscription period will automatically renew unless you turn it off no later than 24 hours before the end of the current period. To cancel auto-renewal or manage your subscriptions, click below and sign in.


Want to cancel and refund your Prime membership? Cancel and Refund Amazon Prime >>


Received this one today and because I am having an argument with Amazon about Prime (I don't want it) I followed the link and it's asking for details. When it got to card details I smelt a rat and checked the domains etc. then killed the page.

[fightbackninja]

[QUOTE=ostell;n1423535]Dear xxxx@ostell.xxxx.xx

This email confirms the Amazon Prime subscription:

Product Name: Amazon Prime One Year Plan
Order Number: 6465353
Receipt Date: 9/12/2018
Payment Method: Amazon Account
Membership Price: £79.00

The subscription period will automatically renew unless you turn it off no later than 24 hours before the end of the current period. To cancel auto-renewal or manage your subscriptions, click below and sign in.


Want to cancel and refund your Prime membership? Cancel and Refund Amazon Prime >>


Received this one today and because I am having an argument with Amazon about Prime (I don't want it) I followed the link and it's asking for details. When it got to card details I smelt a rat and checked the domains etc. then killed the page.



Good job you spotted that in time.

[dogtired]

YAHOO Mail Upgrade
Dear valued user,
your mail system is outdated.
Failure to upgrade to the newest Yahoo Mail 7.1 now eil result in a permanent account closure.
According to provision 17.9 of terms and Conditions, yahoo may at anytime terminate its services for accounts.
To upgrade open the attached below.

Thanks
the Yahoo Team

Had something very similar about Microsoft account went straight to junk!

[ostell]

Received the following. It had a spreadsheet attachment. Any body care to open it?

email from HM Revenue & Customs <Lynn.B@hmrctax.co.uk>, Subject Company tax credits

Looking at the signature I think they've forgotten who they are supposed to be,

HM Revenue & Customs We need to check some details about your tax credits. We are working to ensure that people get the right amount of tax credits. We think that your payments might be wrong. Please check your company report and send us all the information we ask for by 24 Sep 2018. If we don't hear from you by this date we will suspend all or part of your tax credits payments. In order to complete our check we also need your completed tax credits renewal. You will soon receive your tax credits renewal pack. Please complete this and send it to us as soon as possible, if you do not renew it by 24 Sep 2018, we will stop your tax credits. You can renew online at www.gov.uk/renewtaxcredits . Its really important that you don't ignore this letter. What we're trying to do is to make sure you don't end up being paid too much tax credits, resulting in a debt which you'll have to repay later. Sincerely, Mrs Lynn Brandon CCBC/Mcol Correspondence Section

[Amethyst]

Not sure why you'd check your company report to see if your tax credits were correct, but there we go... I hope not too many people fall for it.

[ostell]

It's what could be in the attachment that is the worry.

[fightbackninja]

Another way of phishing for PayPal login details.

This one has the title "Negative Balance / Limitations".
It claims that my account has been limited until they hear from me.

"Recently, we found that some of the activities you are violating your agreement with us. Therefore we have limited your account and can not offer the service for you".

The scammer has gone to some trouble to make the message look reasonably real, but there are the usual grammatical errors.
The layout is copied from valid PayPal messages.

The email domain name is an attempt to look official as it is appl-notice-verified.com but that of course is not PayPal.

Bye bye scammer.

[fightbackninja]

An email trying to look like an official Lloyds Bank notification.

Reference: BACS340917849462541537822

Dear customer, the detailed information about this incoming BACS payment is available in the attached report.

The scammer wants the recipient to open the attachment and input their details. No thanks.

The scammer doesn't know my name whereas the bank do of course and the email is actually from o.wilson @lloydsbankcorp.co.uk which is not Lloyds Bank, though a good attempt to get a domain name similar to Lloyds Bank.

Usual phishing email

[fightbackninja]

Microsoft Onedrive.
A user has sent you 2 files. using Onedrive.

Review awaiting files below:

Onedrive Files

Remittance_Advice.pdf
Invoice.pdf

Click to review files


The link actually goes to orslundybtimeshtr.com