Amex Chase Fraud Protection Emails Used As Clever Phishing Lure
A very clever phishing campaign is underway that pretends to be fraud protection emails from American Express and Chase that ask you to confirm if the listed credit card transactions are legitimate.
If you have credit cards and commonly use them, you may have received emails in the past asking you to confirm if a particular credit card transaction is valid.
These emails will display the name of the vendor, the date of the transaction, and the amount of the transaction. It then asks you to confirm if the attempted charge is legitimate or not.
In a new phishing campaign discovered by MalwareHunterTeam and shared with BleepingComputer, scammers are sending fake Chase and Amex fraud protection emails asking if charges from Best Buy, TOP UP B.V., and SQC*CASH APP are valid.
Examples of two of these phishing emails can be seen below .
|Fake American Express Fraud Verification||Fake Chase Fraud Verification|
As the listed charges are fake, someone who receives this email may assume that someone has stolen their card and clicked on the NO button to dispute the transactions.
When doing so, the victim will be brought to a fake Chase or Amex login site where they will be sent through a long and arduous “verification” process that has them enter their login name and password, address, birth date, social security number, bank card info, and credit card info.
Chase Phishing Landing Page
I Get Several Email Messages A Week That Claim To Be From You Why Can’t You Stop Them Why Don’t You Prosecute The People Responsible
We’re able to stop many of those emails. First, we try to have the server sending the messages shut down. Then we work with domestic and international law enforcement authorities to track down and arrest the people responsible.
Many of these attackers, however, are based outside the United States and use many methods to hide their tracks electronically.
Customers Are Receiving Emails Posing As Chase Bank That Ask For Personal Information
- to copyLink copied!
Customers are receiving emails posing as Chase Bank that ask for personal information
- to copyLink copied!
A Chase Bank phishing scam is targeting victims via email and text messages. In the latest campaign, fake messages posing as the national bank ask customers to review their personal information or update passwords. The data then goes straight to a deceptive third party.
Some of the emails look alarmingly authentic, and Chase warns customers to be weary of all messages that claim to be from its customer service department.
Also Check: Chase Bank Collateral Loans
Fake Louis Vuitton Sales
Louis Vuitton Bags Up To 90% Off? Thats too good to be true! Scammers send you links to fake Louis Vuitton websites via email. However, the links they use all lead to fake web addresses!
Below is a screenshot of a fake Louis Vuitton page. Please always take a close look at the web address. The official Louis Vuitton web address is us.louisvuitton.com!
I Receive Several Emails A Week That Claim To Be From Jp Morgan Or Chase Why Can’t You Stop Them Why Don’t You Prosecute The People Responsible
We can’t share all the steps we take, but we are able to stop many scams. First, we try to shut down the server that’s sending the emails. Then we work with domestic and international law enforcement to track and arrest the criminals responsible. Many, however, are based outside the United States, and disguise the emails’ origins by sending them from hacked computers.
Read Also: Ibc Mobile Bank
How To Protect Yourself
The Better Business Bureau has tips on how to avoid falling victims to scams such as this.
- Verify any issue through official websites: If you get a message pertaining to fraud, verify the suspicious activity by logging into your account. You can also contact the bank itself to ask about this. The phone number can be found on the back of your credit and debit cards or on a statement you received in the mail.
- Safeguard personal information: Dont give up any personal information when getting an unexpected call. Again, find the correct contact information for your bank before taking any further steps in identifying yourself.
- Be cautious of links received through texts: Scammers can send texts, spoof websites and login pages and make them look legitimate.
Donotpay Helps You Stay In The Drivers Seat
Not only does our app fight for your consumer rightsbut we can also help you save some money and get hundreds of dollars in compensation.
Access our app from any web browserif you need a hand with any of the following:
Also Check: Td Bank Overdraft Limit Amount
We Also Recommend Reading These
- BBC.co.uk Article dated 17 April 2020 “Google blocking 18m coronavirus scam emails every day”
- Proofpoint.com Report “2021 State of the Phish Report”
- UKfinance.org.uk Report “Fraud – The Facts 2021”
- Related articles 1 of 6, currently selected
- Related articles 2 of 6
- Related articles 3 of 6
- Related articles 4 of 6
- Related articles 5 of 6
- Related articles 6 of 6
Where The Phishing Email Fell Short
The individuals responsible for crafting this phishing email might have thought their malicious activities were clever, but the email was full of holes.
The troubles began even before the recipient got to the actual email message.
So close, scammers. But not close enough.
Similarly, the fraudsters didnt proofread their email. The message itself contained all types of capitalization and spacing errors along with some awkwardly worded phrases. Get a whiff of this doozy:
Help us secure your account by Verification of
- Mailing Address
- Primary Details.
You have to submit the following details with in 48 Hrs .
Its only fitting the scammers signed off as Chase Digital Fraud Care Department, an entity which doesnt actually exist.
You May Like: Regions Bank Chattanooga Tn Hours
Beware Of Too Good To Be True Prices In Online Stores
When shopping on Amazon or other online shopping sites, beware of vendors who offer an unusually low price for popular items. If youre an Amazon seller, watch out for attempts to hijack your seller account.
While phishing attempts continue to rise, you can prevent the tricksters from affecting your life by being more vigilant when opening emails or clicking links. In the future, keep up on the latest in phishing and other tools the bad guys use by becoming a regular visitor of my website.
Phishing / Vishing / Smishing
Phishing, vishing, and smishing sound like words from the world of science fiction, but are actually scams where someone pretends to be from a reputable organisation â a legitimate company, your bank, or even a government department.
In phishing, theyâll get in touch by email. Vishing is a scam phone call, while smishing involves texts.
In each case, the aim is to trick you into giving out passwords and other personal details, either by asking you to follow a link or, in the case of vishing, over the phone.
Unfortunately, phishing, vishing, and smishing are commonplace, and worryingly in 2020 more than 75% of organisations surveyed worldwide for a Proofpoint report said they faced a phishing attack. The good news is that they can be easy to spot if you know where to look.
Weâll never send you an email asking for your security information, or for any personal details such as your name or date of birth. If youâre ever uncertain about an email claiming to be from Chase, please forward it to then delete it immediately. Weâll send an automated response to let you know that weâve received it.
Recommended Reading: Pnc Home Insight Tracker
How To Avoid Installation Of Malware
It is highly advisable not to open files or links in received emails if they are not relevant and sent from a suspicious, unknown addresses. It is very common for emails of this kind are part of some malspam campaign that cybercriminals use to deliver malware .
Files, programs downloaded via third-party downloaders, unofficial web pages, Peer-to-Peer networks, free file hosting sites, etc., can be designed to install unwanted, malicious software. They should be downloaded from official pages and via direct links.
It is important to remember that third-party, unofficial installers can be malicious too. Furthermore, it is important to update and activate the operating system and any installed software using implemented functions or tools that the official developers have created/designed.
Users who use ‘cracking’ tools to activate or third-party updaters to update software tend to infect their computers – it is common that those tools are bundled with malware. Another reason not to use ‘cracking’ tools is that it is not legal to bypass software activation using such tools.
Additionally, it is advisable to run virus scans regularly and do it using a reputable and up-to-date antivirus or anti-spyware software. If you’ve already opened malicious attachments, we recommend running a scan with Combo Cleaner Antivirus for Windows to automatically eliminate infiltrated malware.
Appearance of the Chase account has been locked email :
Delete Chase Fraud Text Messages
If you receive a text message and aren’t sure if it’s a legitimate Chase message, the best thing to do is log into your Chase account via the website or app directly. Don’t follow any links in the text or call the phone number listed.
You can also call Chase directly:
- Checking and savings: 1-800-935-9935
- Personal credit card: 1-800-432-3117
- Chase Sapphire: 1-888-262-4273
If you don’t see any messages or alerts from Chase within your account, you can be sure the text message was fake and a ploy to steal your information, , and money.
Also Check: Nearest Pnc Atm Near Me
$1billion Malabu Fraud: Nigerian Government Submits Fresh Evidence Indicting Ex
The Nigerian government has made fresh submissions before the London Commercial Court, where Nigeria is suing JP Morgan ChaseBank and established that former Attorney-General, Mohammed Bello Adoke, was complicit in the controversial sale of the OPL 245 oil bloc licence to Shell and Eni,
Too Much Spam Fake Antivirus Scam
Have you ever seen text messages that warn you that your phone is compromised or exposed to too much spam? Dont panic. The message itself is a SCAM!
- operator report: awareness! your phone has been exposed by too much spam. solve this issue asap! > >
Sending fake spam alerts, scammers urge you to visit the attached link to secure your phone. If you do as instructed, you will be led to this fake Verizon website:
This page says that your phone has been receiving lots of spam texts and suggests you start cleaning your device now. Dont fall for it! If you do, you will be directed to another scam website that sells antivirus software. Scammers can record the personal information and credit card details you submit and use them for their own good. Watch out!Phishing links also often take you to online survey pages that state you can claim a gift by filling out an online questionnaire. After you complete the questionnaire, you are prompted to enter credit card details before your gift can be delivered:
Also Check: Bank Of America Cashpay Routing Number
How To Stop Chase Emails With Donotpay
Has your tally of unread emails already reached figures in the several hundred mark, if notwe shudder at the thoughtthousands? Does the very idea of cleaning up your inbox cause you to break out in cold sweat?
Most of us have experienced the deep dark well of a congested mailbox brimming with long-ignored junk. The great news is that DoNotPay has developed a straightforward solution to managing your unsolicited Chase emails and other spam thats racking up in your inbox. Regardless of whether you want to block spam email on your Android or iOS device, your tablet, or your laptop, we are able to help you stop receiving such emails.
Our app can:
- Unsubscribe you from spam emails
- Inform you if there is a class-action lawsuit against the senders of illegal spam
Heres how it works:
- Enter your email address and link it to the DoNotPay app
- When you get your next spam email, forward it to
A spam email is illegal when you didnt agree to receive it, or there was no easily available option to unsubscribe. Other people may have experienced the same annoyance, so well check to see if theres a current class-action lawsuit against the sender.
If there is, you can choose to join the plaintiffs list. A little bit of spam email revenge could result in a nice settlement amount for you, and the company behind those spam emails will hopefully be discouraged from engaging in similar misconduct in the future.
And Now Its Time to Tidy Up Your Physical Mailbox, Too
Contact Us Electronically To Report Fraud
We strongly urge you to call us right away if you think your Chase account is at risk, because thats the fastest way for us to help you. But if youd rather contact us electronically, please sign in to chase.com and send us a secure message. We may need to speak with you to gather additional information.
We’re here to help you manage your money today and tomorrow
Don’t Miss: What Is Td Debit Card Advance
Managing Chase Spam Emails On Your Own
If every time you open your inbox, you wonder how to stop spam emails, you should know that there are several options you can look into.
To opt out of Chases promotional email offers, you can simply follow the instructions provided at the bottom of the email.
If you need to delete or change the email address linked to your Chase Account Alerts, its best to do the following:
Keep Your Information To Yourself
Chase will never ask you to provide your personal information via email or text message. Don’t respond to any text messages or give your information to anyone over the phone if you can’t verify they are indeed a Chase representative. This includes your:
- Bank account information
- Social Security number
If you visit a Chase website to log into your account, always before entering your username and passwordscammers can set up fake sites that look like the real deal.
Scammers will set up similar-looking websites to trick you into thinking you’re logging into the genuine website. However, they won’t be able to use the same URL as the actual Chase.com website, so this is the first thing you should check.
In addition, if you notice any obvious typos or grammatical errors, you’re likely on a fake website.
Recommended Reading: Boa Overdraft Fee Refund
New: Very Clever Citibank Phishing Scam
Another interesting phishing scam, this time supposedly from Citibank’s Citibusiness service, warns that someone tried to log into your account and you must now “confirm” your account info.
Again, that’s hardly new. The phishing spam takes you to a very convincing replica of the Citibusiness login page, including a long web address that looks like it ends with Citibank.com, but in fact goes to a website in Russia.
The login page asks for your user name, password, and a token-generated key that Citibusiness customers are used to. The phishing site passes the info to the real Citibusiness site, so if you intentionally put in bogus info, you’ll get the real error messages from Citibusiness. It’s very cleverly done.
What to do: Again, don’t click on links in spam emails to “confirm” your account info. If you have a question, use your browser and directly type in the web address of your bank, etc.
That’s it for now — time to close for today. Wishing you a wonderful week.
I Have Email That Looks Like It’s From You How Can I Tell If It’s Legitimate
It can be hard, especially as criminals learn to make more-convincing forgeries of legitimate email and websites. We suggest you consider the tone and the requests of the message. Criminals want you to give them information and they’re usually quite direct about asking for it. We send you emails generally to tell you about products and services we think will interest you.
We won’t do these things:
- Send email that requires you to tell us your personal information directly in the email. Instead, we’ll ask you to navigate to chase.com yourself and then sign in to our site before telling us any of your sensitive information. That way, you’ll know you’re not signing in to a site that’s posing as chase.com.
- Send email threatening to close your account if you don’t tell us your personal information immediately.
Recommended Reading: Ibc Bank Debit Card Limit
New: Phishing Scams Now Use Phones Instead Of Fake Websites
In a new twist, identity thieves are sending spam that warns victims that their bank account or PayPal accounts were supposedly compromised.
Nothing new so far.
However, unlike typical phishing emails, there is no website address in these phishing messages. Instead, the victim is urged to call a phone number to verify account details.
The automated voice message says: “Welcome to account verification. Please type your 16-digit card number.”
The goal is to get the victim to enter their credit card number. In these reported scams, no mention of the bank or PayPal is made.
What to do: Never call a number you receive from a spam email, and certainly don’t enter in any private information if you make a mistake and do call. If you want to call your bank, use the normal phone number you regularly use, not the phone number you get in an email.
You can read more about this scam here:
Main Types Of Phishing Emails
There are three main types of phishing emails. Spear Phishing targets a particular individual or company. Clone Phishing is where a cloned email is used to put a recipient at ease. Whaling is a phishing attempt directed at a senior executive or another high-profile individual in a company or organization.
Also Check: Ibc Bank Mobile App