Scams like these

[Lemon_Party]

End of February received an SMS from Westpac with code to complete online transaction. Have never used that card for anything other than balance transfers. Thought nothing of it and I was busy.

My Westpac online only generates an SMS code AFTER an attempt to transfer/statement download, etc is made. This means the person doing it has already successfully logged-in to the online banking portal. SMS (2nd factor) is the final hurdle to initiate the transfer.

I would definitely be changing your online banking password JohnK.

Citibank were terrible for the prior transaction questions when calling them. Mr Lemon could you please tell me your last 3 transactions on your card. What am I - Rain Man? My memory for useless trivial information is very poor and I have a lot of cards

 

[wandering_fred]

Got a "record of a paypal transaction" while away (and my webmail doesn't do html mail very well)
Checking my paypal account when I got home had no such transaction and the email was forwarded to the paypal spoof account.

Happy wandering

Fred


Dear fred

You sent a payment of $25.00 USD to Vultr Holdings LLC(xx_xx)
It may take a few moments for this transaction to appear in the Recent Activity list in your Account Overview.
Merchant
Vultr Holdings LLC

Instructions to merchant
You haven't entered any instructions.

Description Unit price Qty Amount
Vultr.com Cloud Hosting
$25.00 USD 1 $25.00 USD

......

Issues with this transaction?
You have 180 days from the date of your PayPal payment to open a dispute for eligible transactions in our Resolution Centre. Learn about Buyer Protection (A different website reference)

 

[Bundy Bear]

Another email with the heading.

We noticed you haven’t upgraded your mail security

Delete.

 

[QF WP]

An interesting group of 2 emails, starting at 1.32am this morning:

You have 1(one) unread fax.

Sender: 509-472-1535
Date: April 11, 2017

Please click the link below, to view your fax on our website: <redacted>

Please remember that, in order to view the fax online, Microsoft Word must be installed on your system.

Thank you for choosing us

© 1999-2017 RingCentral, Inc. All rights reserved.

then 70 minutes later:

You have 1(one) unread fax.

Sender: 509-472-2483
Date: April 11, 2017

Please click the link below, to view your fax on our website: <redacted>

Please remember that, in order to view the fax online, Microsoft Word must be installed on your system.

Thank you for choosing us

© 1999-2017 RingCentral, Inc. All rights reserved.

Now it must just be co-incidence that I actually have cousins who live in Spokane, WA. But I know it's not from them, not their number (plus they use email or FB to contact me). Who uses faxes these days?

 

[wandering_fred]

An interesting group of 2 emails, starting at 1.32am this morning:
then 70 minutes later:

Now it must just be co-incidence that I actually have cousins who live in Spokane, WA. But I know it's not from them, not their number (plus they use email or FB to contact me). Who uses faxes these days?

Required by financial institutions in the USA in many cases, as emails are considered not secure.

Happy wandering

Fred

 

[moa999]

Be very careful with emails coming in with Scan Data as subject at present.

https://arstechnica.com/security/20...to-push-dangerous-dridex-malware-on-millions/

 

[wandering_fred]

I'm glad I don't have an Amazon shop....

forwarded to stop-spoofing at amazon dot com
No, I have no idea what the complaint attachment said...

Just wandering

Fred


Greetings,

I have purchased an item from your shop and it turned to have an unacceptable quality
I am going to send a complaint ticket to the support department - first of all, please read the complaint about my order
If no reply follows from you, I will leave negative feedback regarding on your store , on all forums and websites I know, and I'll ask for a full refund.

See details in the attached document.

Regards,
Ellen Wilson

 

[mrs.dr.ron]

:shock: ..... maybe I should have replied to the Prince’s email after all…

$43M in cash found in empty Nigerian apartment

$43M in cash found in empty Nigerian apartment | CTV News

More than US$43 million was seized from an apartment building in Nigeria after the anti-corruption unit received a tip. The Economic and Financial Crimes Commission received a tip from a whistleblower who reported suspicious activity when they noticed someone moving bags in and out of the apartment. On Wednesday, the anti-corruption unit said they stormed the seventh floor of a residential building and entered into the apartment where they found three fireproof cabinets hidden inside a dresser. The cabinets were full of neatly packaged bills.
In total, they seized US$43 million in U.S. bills, US$35,000 in U.K. pounds and US$75,000 in Nigerian naira.
The Nigerian government launched its whistleblowing program in December 2016 to combat corruption. The program encourages citizens to report corruption-related offences through a secure online portal.

 

[prozac]

:shock: ..... maybe I should have replied to the Prince’s email after all…

$43M in cash found in empty Nigerian apartment

$43M in cash found in empty Nigerian apartment | CTV News

More than US$43 million was seized from an apartment building in Nigeria after the anti-corruption unit received a tip. The Economic and Financial Crimes Commission received a tip from a whistleblower who reported suspicious activity when they noticed someone moving bags in and out of the apartment. On Wednesday, the anti-corruption unit said they stormed the seventh floor of a residential building and entered into the apartment where they found three fireproof cabinets hidden inside a dresser. The cabinets were full of neatly packaged bills.
In total, they seized US$43 million in U.S. bills, US$35,000 in U.K. pounds and US$75,000 in Nigerian naira.
The Nigerian government launched its whistleblowing program in December 2016 to combat corruption. The program encourages citizens to report corruption-related offences through a secure online portal.

Just lookin' for a home...

 

[QF WP]

I've got an email purporting to be from Delta Airlines:

Your order on Delta.com website is now complete and your credit card has been charged.
Your flight number , seat number and other important details can be found on your ticket, below:

<redacted link>

To check your flight status , please visit : <redacted link>
You can do the check-in online, here: <redacted link>

Thank you for flying with us

©2017 Delta Air Lines, Inc. | Travel may be on other airlines.


Terms and conditions apply to all offers and SkyMiles benefits. See specific offer for details, and visit SkyMiles Membership Guide & Program Rules

Problem is, I haven't booked a ticket online with Delta....

What's with that link that isn't going anywhere near Delta's website as well

 

[RAM]

Seems the browser boys continue to leave gaping holes that were supposed to have been fixed over a decade ago.

When the address shown in a link (or hovering over a link) is definitely not what it says...

Virtually impossible to detect unless you have done the quick fix suggested for your browser if affected.

That apple.com link you clicked on? Yeah, it's actually Russian • The Register

[h=3]That apple.com link you clicked on? Yeah, it's actually Russian[/h]

Didn't we fix this back in 2005? Apparently not​

 

[QF WP]

Well they tried again....

RE: RE: <my company website name> order payment

We have processed the payment today.
Here is the wire confirmation: <redacted, but includes a .jp address>
Please deliver the order as soon as possible.
Thank you
Mark Johnson
Financial Advisor
472-262-2658

 

[Major]

There is some really interesting reading here

https://www.scamwatch.gov.au/

 

[get me outta here]

Been getting calls from 08 9274 8638. Decided to answer and she went through a whole lot of health related q's all of which I answered in the negative. She must have got to the end when I answered the last q and I'd barely said no I don't have arthritis/diabetes/sciatica/high whatever, and she abruptly hung. Hopefully, that's the last call I get from them

 

[cambriamarsh]

and another, subject tline was

[h=1]We need to verify your Appłe account information[/h]Email in the link was
https://www.iclloud.com-applleid.company

It looked quite genuine but I was concerned about clicking a link. Has anybody else had this one yet?

cheers

 

[Happy Trails]

It looked quite genuine but I was concerned about clicking a link. Has anybody else had this one yet?

cheers

With a misspelt 'icloud' I wouldn't go near it.

 

[prozac]

[h=1]We need to verify your Appłe account information[/h]Email in the link was
.....

... I was concerned about clicking a link....

So are we!!!
Would you mind disabling the link please?

 

[wandering_fred]

I've been ignoring a group of emails. I'll just list the subject lines and headline...

Mail Quota Exceeded (Your mailbox is almost full.)
How are you doing? (What's new?)
Your recent payment #16092820 was completed. (Dear customer,)
Buy Medical marijuan_ from Us and have it delivered to your doorstep!
BPAY Online Payment (Telephone and Internet banking - BPAY)
Lose 13 lbs. In your first month plus a free week of shakes.
Your iOS Lost device was found near ! This email confirms that your subscription with iTunes has been expired
with all additional services*
Unusual activity in your PayPaI account (Dear Costumer,)
E-Ticket 5168241 (This is your e-ticket receipt.
) (American Airlines E-Ticket services.)
Dear man. I am in great hopes of seeing you soon (Hi, I want to find new friends in Australia,)


Happy wandering (complete without an extra clicking I hope)

Fred

 

[JessicaTam]

I've been ignoring a group of emails. I'll just list the subject lines and headline...

Mail Quota Exceeded (Your mailbox is almost full.)
How are you doing? (What's new?)
Your recent payment #16092820 was completed. (Dear customer,)
Buy Medical marijuan_ from Us and have it delivered to your doorstep!
BPAY Online Payment (Telephone and Internet banking - BPAY)
Lose 13 lbs. In your first month plus a free week of shakes.
Your iOS Lost device was found near ! This email confirms that your subscription with iTunes has been expired
with all additional services*
Unusual activity in your PayPaI account (Dear Costumer,)
E-Ticket 5168241 (This is your e-ticket receipt.
) (American Airlines E-Ticket services.)
Dear man. I am in great hopes of seeing you soon (Hi, I want to find new friends in Australia,)


Happy wandering (complete without an extra clicking I hope)

Fred

Dear "man"? :shock:

 

[whatmeworry]

Couple of weeks ago got a call from Indian claiming my computer was infected with a virus. Laughed my cough off at him, then abused him regarding his national Cricket team.

Checked the number afterwards... It was from Argentina... :shock: