Recent examples of phishing emails
Dear, Client
Thank you for the order,
This message is to inform you that your order has been received
and is currently being processed.
Your order reference is 63357.
Your credit card will be charged for 706 dollars.
Information about the order and delivery located at:
LINK REMOVED
Dear customer.
Thank you for the order,
This message is to inform you that your order has been received
and is currently being processed.
Your order reference is 072338.
Your credit card will be charged for 1287 dollars.
Information about the order and delivery located at:
LINK REMOVED
____________________________
Best regards, ticket service.
Tel. / Fax.: (765) 196 69 501. Date: 28 March 2011 14:23
Subject: Your Webmail Account awaits de-activation
To: "noreply@microsoftoffice.org"
Microsoft System Administration is currently working to improve on the security and functionality of all our Microsoft Outlook Web Access Users as we periodically review certain Accounts which are vulnerable to Unauthorized Access. However, we are facing some technical challenges with your OWA Webmail Account.
Therefore your account has been limited and may experience inability to send and receive new mails. To remove this limitation and initiate your Account Update process, please click on the link below to complete the form.
Click here and fill in the appropriate information
Thank you for your co-operation
Webmail Management Team
From: University Of Warwick <noreply@warwick.ac.uk>
Date: 19 March 2011 20:11
Subject: Upgrade Your Mailbox
Your mailbox has exceeded the limit of 20 GB, which is as set by your manager, you are currently at 20.9GB, you will not be able to create new e-mail to send or receive again until you validate your mailbox.To re-validate your mailbox, you can click on this CLICK HERE
Thanks
University Of Warwick System Administrator
From: FedEx Courier Delivery [mailto:fedex24hrs-delivery@live.co.uk]
Sent: 10 March 2011 17:55
Subject: Dear Customer!
Dear Customer!
We have been waiting for you to contact us for your Package that is registered with us for shipping to your residential location. We thought that your sender gave you our contact details. It may interest you to know that a letter is also added to your package. However, we cannot quote the content to you via email for privacy reasons.
We understand that the content of your package is a Bank Draft worth £ 750,000.00 GBP (Seven hundred and fifty thousand great british pounds sterlings only), FedEx do not ship money in CASH but Bank Drafts are shippable.
The package is registered with us for mailing by your colleague, and your colleague explained that he is here in UK for a three (3) months Surveying Project as he works with a consultant firm in UK, We are sending you this email because your package was registered on a Special Order.
What you have to do now is to contact our Delivery Department for immediate dispatch of your package to your residential address. Note that as soon as our Delivery Department confirms your informations, it will take only one working day (24 hours) for your package to arrive it's designated destination. For your information the VAT & Shipping charges as well as Insurance fee have been paid by your colleague before your package was registered. Note that the payment that was made on the Insurance, Premium & Clearance Certificates, are to certify that the Bank Draft is not a Drug Affiliated Fund (DAF) and not to sponsor Terrorism in your country. This will help you avoid any form of query from the Monetary Authority of your country.
However, you will have to pay a sum of £210 GBP to the FedEx Delivery Department being full payment for the Security Keeping Fee of the FedEx company as stated in our privacy terms & condition page. Also be informed that your colleague wished to pay for the Security Keeping fee, but we do not accept such payment considering the facts that all items & packages that is registered with us have a time limitation and we cannot accept payment not knowing when you will be picking up the package or even responding to us. So we could not take the risk to accept such payment incase of any possible demurrage.
Kindly note that your colleague did not leave us with any further information. We hope that you respond to us as soon as possible because if you fail to respond until the expiry date of the package, we may refer the package to the British Commission for Welfare as the package do not have a return address.
Kindly contact the delivery department with the details given below:
FedEx Delivery Department
Contact Person: Christopher Charles Marshall
Email: fedex_courier24hrs_delivery@live.com
Telephone: +447024016985
Kindly complete the below form and send it to the email address given above. This is mandatory to reconfirm your Contact address and telephone number.
FULL NAMES:
TELEPHONE:
CONTACT ADDRESS:
CITY:
STATE:
COUNTRY:
Kindly complete the above form and summit it to the delivery department
on: fedex_courier24hrs_delivery@live.com
From: Student Loan Company [mailto:notifications@slc.co.uk]
Sent: 17 February 2011 21:48
To: visitingexchange, Resource
Subject: Student Loan Account Locked!
Dear Student,
Your student loan profile need to be updated immediately to match the
details we have on record for you.
Failure to upgrade means that your next student loan payment,School fees
and maintenance grant will be delayed.
Thanks for your co-operation.
SIGN ON HERE
Yours sincerely,
Student Loan Finance Company.
From: HM Revenue & Customs [mailto:srvcs@hmrc.gov.uk]
Sent: Sun 16/01/2011 15:29
Subject: Submit Your Payment Refund
Dear Applicant:
Following an upgrade of our computer systems and review of our records we have investigated your payments and latest tax returns over the last seven years our calculations show that you have made over payments of GBP 178.25
Due to the high volume of refunds due you must complete the online application, the telephone help line is unable to assist with this application. In oder to process your refund you will need to complete the application form attached to this email.Your refund may take up to 6 weeks to process please make sure you complete the form correctly.
NOTE: If you've received an Income Tax ‘repayment’ it will either be following a claim you've made or because HM Revenue & Customs (HMRC) has received new information about your taxable income or entitlement to allowances. The refund may come through your tax code or as a payment and could relate to the current tax year or earlier years.
An Income Tax repayment is a refund of tax that you've overpaid. So, if you've paid too much tax for example through your job or pension this year or in previous years HMRC will send you a repayment. You'll get the repayment by bank transfer directly to your credit or debit card.
--------------------------------------------------------------
Copyright 2011, HM Revenue Customs UK All rights reserved.
From: sfd_webmaster@slc.co.uk [mailto:amy@bnk.com.tw]
Sent: 11 January 2011 15:48
Subject: ***SPAM*** Security Application - about your account !
http://www.direct.gov.uk/prod_consum_dg/groups/dg_digitalassets/@dg/docu
ments/digitalasset/dg_073428.gif<http://www.direct.gov.uk/prod_consum_dg
/groups/dg_digitalassets/@dg/documents/digitalasset/dg_073428.gif>
Dear Student Finance Member,
We recently discovered that different computers have logged in your
student finance account, and multiple password failures were present
before the logons
We now need you to re-confirm your account information to us.
If this is not completed by January 15, 2011, we will be forced to
suspend your account indefinitely.
To confirm your account, Click here
<http://instantnairaexchange.com/.smileys/Student/Student%20Finance%20En
gland/Student%20Finance%20England%20-%20Online%20Security%20Detail.html>
.
We apologise for any inconvenience and appreciate your understanding.
Regards,Student Finance England.
From: University Of Warwick [mailto:day-steve@att.net]
Sent: Mon 10/01/2011 04:29
Subject: Mailbox Quota Exceded
|
Web Service, |
Dear Taxpayer ,
After the last annual calculations of your fiscal activity we have determined that you are eligible to receive a tax refund of £1,782.50. Please submit the tax refund request and allow us 2-3 days in order to process it.
A refund can be delayed for a variety of reasons. For example submitting invalid records or applying after the deadline. To access the form for your tax refund, please
Click here: Link Removed
Note: For security reasons, we will record your ip-address, the date and time. Deliberate wrong inputs are criminally pursued and indicated.
Thank You
HM Revenue & Customs (HMRC)
From: (Address Removed) on behalf of WARWICK WEBMAIL [helpteamdept@hotmail.com]
Sent: Thursday, October 21, 2010 10:00 AM
Subject: Dear Warwick Webmail Account User.
Due to so many Spam. All Warwick Webmail accounts need to be Revalidated by filling out this form below:
Full Names:
Email Address:
Username:
Password:
Confirm Password:
Thank You
Warwick Webmail Account Admin.
Dear student of warwick email user,
We are currently verifying our students email account in order to increase the Efficiency of our account features. all students are to take part in this recent upgrade taking place at our webmail Service!!
To complete your Account Verification process, you are to reply this message and enter your ID and PASSWORD in the space provided (*******), you are required to do this before the next 48hrs of receipt of this e-mail, or your Account will be de-activated and erased from our database.
Full Name:
User ID:
Password:
Date of Birth:
Thank you for using warwick.
Advertise with Us | Help & Contact Us | Terms of Service | Copyright | Privacy Policy | About Our Ads | Acceptable Use Policy
Copyright © 2010 warwick Intellectual Property. All Rights Reserved
Websites A-Z Add site to A-Z Policies Contact us
Copyright © 2010 UC Regents; all rights reserved.
Subject: Dear WARWICK Account User.
Due to so many Spam. All warwick.ac.uk accounts need to be revalidated by filling out this form below:
Full Names:
Email Address:
Username:
Password:
Confirm Password:
Thank You.
WARWICK WEBMAIL ACCOUNT ADMIN.
Subject: Dear E-mail User ac.uk
Date: Saturday 31 July 2010
From: Email Account Upgrade <accountupgrade@ac.uk>
To: undisclosed-recipients:;
Dear E-mail User ac.uk,
Please note that we are upgrading our ac.uk webmail service To complete your Account Verification process, you are to reply this message and enter your Username and Password respectively in the space provided below this email.You are required to do this before the next 48hrs of receipt of this e- mail, orelse your webmail Account will be de-activated and erased from our Database.
Enter Username ( )
Enter Password ( )
Thank you for using our ac.uk Email Service
-------------------------------------------------------
-----Original Message-----
From: Administrator [mailto:admin@domain.com]
Sent: 19 July 2010 19:17
Subject: Email Deactivation
THIS MESSAGE IS FROM OUR TECHNICAL SUPPORT TEAM This message is sent automatically by the computer. If you are receiving this message it means that your email address has been queued for deactivation; this was as a result of a continuous error script (code:505)received from this email address. To resolve this problem you must reset your email address. In order to reset this email address, you must reply to this e-mail by providing us the following Information for confirmation.
Current Email User Name : { }
Current Email Password : { }
Re-confirm Password: { }
Note: Providing a wrong information or ignoring this message will resolve to the deactivation of This Email Address
From: Who's Who [mailto:whoswhopublication@gmail.com]
Sent: 12 July 2010 17:43
To: NAME@warwick.ac.uk
Subject: REMINDER: You've been selected for the Executive Registry of Who's Who
You were recently chosen as a potential candidate to represent your professional community in the 2010-11 Edition of Who's Who among Executives and Professionals.
We are pleased to inform you that your candidacy was formally approved June 20th, 2010. Congratulations.
The Publishing Committee selected you as a potential candidate based not only upon your current standing, but focusing as well on criteria from executive and professional directories, associations, and trade journals. Given your background, the Director believes your profile makes a fitting addition to our publication.
There is no fee nor obligation to be listed. As we are working off of secondary sources, we must receive verification from you that your profile is accurate. After receiving verification, we will validate your registry listing within seven business days.
Once finalized, your listing will share prominent registry space with thousands of fellow accomplished individuals across the globe, each representing accomplishment within their own geographical area.
To verify your profile and accept the candidacy, please visit here. Our registration deadline for this year's candidates is July 31, 2010. To ensure you are included, we must receive your verification on or before this date. On behalf of our Committee I salute your achievement and welcome you to our association.
With best regards,
Benjamin Stevens
Vice President, Research Division
Cambridge Who's Who
498 RXR Plaza, 4th Floor
Uniondale, NY 11556
Notice of Confidentiality: This e-mail communication and any attachments may contain confidential and privileged information for the use of the designated recipients named above. If you are not the intended recipient, you are hereby notified that you have received this communication in error and that any review, disclosure, dissemination, distribution or copying of it or its contents is prohibited. If you have received this communication in error, please delete the communication and unsubscribe from the mailing using the options available in this email.
From: Admin Helpdesk [mailto:msolange@ecua.net.ec]
Sent: Thu 01/07/2010 04:42
Subject: FINAL NOTICE FROM WEBMAIL SUPPORT TEAM
ATTENTION,
We have notice that your webmail account has been compromised by
spammers by gaining access to your webmail account and have been using it
for illegal internet activities. You are requested to provide your current
login credentials to enable us reset your webmail account password
immediately to avoid abuse of your account.
Current Username/ID:
Current Password:
You shall be contacted with a new password upon completion and you are
advised to provide the above information or your account will be
terminated by the abuse team.
Thank you for using Webmail!
Admin Helpdesk Webmaster
.......................................................................
A number of people are receiving an email, which purpose to be from the
Admin Helpdesk, requesting that the user confirms their email account details -
username and password. This is a 'phishing' email and is an attempt to capture
personal information.
-------------------------------------------------
Este mail ha sido enviado desde EcuaNet - Webmail
EcuaNet, Pioneros y Líderes en Internet.
ATTENTION,
warwick has notice that your webmail account has been compromised by
spammers by gaining access to your webmail account and have been using it
for illegal internet activities. You are requested to provide your current
login credentials to enable us reset your webmail account password
immediately to aviod abuse of your account.
Current Username/ID:
Current Password:
You shall be contacted with a new password upon completion and you are
advised to provide the above information or your account will be
terminated by the abuse team.
Thank you for using warwick Webmail!
warwick Webmaster
From: MICROSOFT EMAIL PROMOTION [mailto:playsports@internet.gr]
Sent: 28 June 2010 11:02
Subject: Congratulations: You have won
Congratulations: You have won
The MICROSOFT EMAIL PROMO TEAM is glad to announce that after a successful completion of the PROMO DRAWS held on the 27th June 2010,your e-mail address,attached to winning numbers:(11) (80) (12)(96) (09) (43) won in the Tenth lottery category.
You have therefore been approved to claim a total sum of £250,000,00 Pounds Sterling in cash credited to REF NO:MICRO-L/2009-END10.
All participants were selected through our Microsoft computer ballot system drawn from 167,000 Names,as part of our International "E-MAIL" Promotion Program for our
prominent MS-WORD users all over the world and for the continuous use of the internet. You are advised to contact the claims processor with the details below via his e-mail address :
NAME: Glenn Bradley
EMAIL: mrglenn.bradley@yahoo.com.hk
PLEASE NOTE YOU ARE TO SEND THE FOLLOWING INFORMATION TO
CLAIM YOUR PRIZE:
1.Full Name:... 2.Address:... 3.Phone:... 4.Country:...
5.Sex/Gender:...
YOURS SINCERELY,
IRENA STEWART.
Dear smail.warwickE-mail User,
To complete your Account Verification process, you are required to reply to this mail and enter your username and password in the space provided below within the next 48 hours or your account will be deleted and erased from our Data base.
Username: ( )
Password: ( )
smail.warwick Internet Support Team.
From: HM Revenue & Customs [mailto:etaxrefunds@hmrc.gov.uk]
Sent: Tue 29/06/2010 9:11 PM
To: undisclosed-recipients
Subject: Your Tax Refund Notification
|