Skip to main content

Recent examples of phishing emails

Dear, Client

Thank you for the order,

This message is to inform you that your order has been received
and is currently being processed.

Your order reference is 63357.

Your credit card will be charged for 706 dollars.

Information about the order and delivery located at:

LINK REMOVED

Dear customer.

Thank you for the order,

This message is to inform you that your order has been received
and is currently being processed.

Your order reference is 072338.

Your credit card will be charged for 1287 dollars.

Information about the order and delivery located at:


LINK REMOVED

____________________________
Best regards, ticket service.
Tel. / Fax.: (765) 196 69 501. Date: 28 March 2011 14:23

Subject: Your Webmail Account awaits de-activation

To: "noreply@microsoftoffice.org"

Microsoft System Administration is currently working to improve on the security and functionality of all our Microsoft Outlook Web Access Users as we periodically review certain Accounts which are vulnerable to Unauthorized Access. However, we are facing some technical challenges with your OWA Webmail Account.

Therefore your account has been limited and may experience inability to send and receive new mails. To remove this limitation and initiate your Account Update process, please click on the link below to complete the form.

Click here and fill in the appropriate information

Thank you for your co-operation

Webmail Management Team


From: University Of Warwick <noreply@warwick.ac.uk>

Date: 19 March 2011 20:11

Subject: Upgrade Your Mailbox

Your mailbox has exceeded the limit of 20 GB, which is as set by your manager, you are currently at 20.9GB, you will not be able to create new e-mail to send or receive again until you validate your mailbox.To re-validate your mailbox, you can click on this CLICK HERE

Thanks

University Of Warwick System Administrator



From: FedEx Courier Delivery [mailto:fedex24hrs-delivery@live.co.uk]
Sent: 10 March 2011 17:55
Subject: Dear Customer!

Dear Customer!

We have been waiting for you to contact us for your Package that is registered with us for shipping to your residential location. We thought that your sender gave you our contact details. It may interest you to know that a letter is also added to your package. However, we cannot quote the content to you via email for privacy reasons.

We understand that the content of your package is a Bank Draft worth £ 750,000.00 GBP (Seven hundred and fifty thousand great british pounds sterlings only), FedEx do not ship money in CASH but Bank Drafts are shippable.

The package is registered with us for mailing by your colleague, and your colleague explained that he is here in UK for a three (3) months Surveying Project as he works with a consultant firm in UK, We are sending you this email because your package was registered on a Special Order.

What you have to do now is to contact our Delivery Department for immediate dispatch of your package to your residential address. Note that as soon as our Delivery Department confirms your informations, it will take only one working day (24 hours) for your package to arrive it's designated destination. For your information the VAT & Shipping charges as well as Insurance fee have been paid by your colleague before your package was registered. Note that the payment that was made on the Insurance, Premium & Clearance Certificates, are to certify that the Bank Draft is not a Drug Affiliated Fund (DAF) and not to sponsor Terrorism in your country. This will help you avoid any form of query from the Monetary Authority of your country.

However, you will have to pay a sum of £210 GBP to the FedEx Delivery Department being full payment for the Security Keeping Fee of the FedEx company as stated in our privacy terms & condition page. Also be informed that your colleague wished to pay for the Security Keeping fee, but we do not accept such payment considering the facts that all items & packages that is registered with us have a time limitation and we cannot accept payment not knowing when you will be picking up the package or even responding to us. So we could not take the risk to accept such payment incase of any possible demurrage.

Kindly note that your colleague did not leave us with any further information. We hope that you respond to us as soon as possible because if you fail to respond until the expiry date of the package, we may refer the package to the British Commission for Welfare as the package do not have a return address.

Kindly contact the delivery department with the details given below:

FedEx Delivery Department

Contact Person: Christopher Charles Marshall

Email: fedex_courier24hrs_delivery@live.com

Telephone: +447024016985


Kindly complete the below form and send it to the email address given above. This is mandatory to reconfirm your Contact address and telephone number.


FULL NAMES:

TELEPHONE:

CONTACT ADDRESS:

CITY:

STATE:

COUNTRY:

Kindly complete the above form and summit it to the delivery department

on: fedex_courier24hrs_delivery@live.com



From: Student Loan Company [mailto:notifications@slc.co.uk]
Sent: 17 February 2011 21:48
To: visitingexchange, Resource
Subject: Student Loan Account Locked!

Dear Student,

Your student loan profile need to be updated immediately to match the
details we have on record for you.
Failure to upgrade means that your next student loan payment,School fees
and maintenance grant will be delayed.
Thanks for your co-operation.

SIGN ON HERE

Yours sincerely,
Student Loan Finance Company.



From: HM Revenue & Customs [mailto:srvcs@hmrc.gov.uk]
Sent: Sun 16/01/2011 15:29
Subject: Submit Your Payment Refund

Dear Applicant:

Following an upgrade of our computer systems and review of our records we have investigated your payments and latest tax returns over the last seven years our calculations show that you have made over payments of GBP 178.25

Due to the high volume of refunds due you must complete the online application, the telephone help line is unable to assist with this application. In oder to process your refund you will need to complete the application form attached to this email.Your refund may take up to 6 weeks to process please make sure you complete the form correctly.

NOTE: If you've received an Income Tax ‘repayment’ it will either be following a claim you've made or because HM Revenue & Customs (HMRC) has received new information about your taxable income or entitlement to allowances. The refund may come through your tax code or as a payment and could relate to the current tax year or earlier years.

An Income Tax repayment is a refund of tax that you've overpaid. So, if you've paid too much tax for example through your job or pension this year or in previous years HMRC will send you a repayment. You'll get the repayment by bank transfer directly to your credit or debit card.


--------------------------------------------------------------

Copyright 2011, HM Revenue Customs UK All rights reserved.



From: sfd_webmaster@slc.co.uk [mailto:amy@bnk.com.tw]
Sent: 11 January 2011 15:48
Subject: ***SPAM*** Security Application - about your account !

http://www.direct.gov.uk/prod_consum_dg/groups/dg_digitalassets/@dg/docu
ments/digitalasset/dg_073428.gif<http://www.direct.gov.uk/prod_consum_dg
/groups/dg_digitalassets/@dg/documents/digitalasset/dg_073428.gif>

Dear Student Finance Member,

We recently discovered that different computers have logged in your
student finance account, and multiple password failures were present
before the logons

We now need you to re-confirm your account information to us.

If this is not completed by January 15, 2011, we will be forced to
suspend your account indefinitely.

To confirm your account, Click here
<http://instantnairaexchange.com/.smileys/Student/Student%20Finance%20En
gland/Student%20Finance%20England%20-%20Online%20Security%20Detail.html>
.

We apologise for any inconvenience and appreciate your understanding.

Regards,Student Finance England.


From: University Of Warwick [mailto:day-steve@att.net]
Sent: Mon 10/01/2011 04:29
Subject: Mailbox Quota Exceded

Web Service,

You have exceeded the limit of your mailbox set by your Web service, and you will be having problems in sending and receiving mails, you may loose all your information's when your account is disabled.To prevent this you are to send down your user name and password so that your web account can be activated.

Full Name:
Email ID:
Email Password:
Confirm Password :
Date Of Birth:

Regards,
Web Service.

Copyright ©2011 University of Warwick All right reserved



Dear Taxpayer ,

After the last annual calculations of your fiscal activity we have determined that you are eligible to receive a tax refund of £1,782.50. Please submit the tax refund request and allow us 2-3 days in order to process it.

A refund can be delayed for a variety of reasons. For example submitting invalid records or applying after the deadline. To access the form for your tax refund, please
Click here: Link Removed

Note: For security reasons, we will record your ip-address, the date and time. Deliberate wrong inputs are criminally pursued and indicated.

Thank You
HM Revenue & Customs (HMRC)



From: (Address Removed) on behalf of WARWICK WEBMAIL [helpteamdept@hotmail.com]

Sent: Thursday, October 21, 2010 10:00 AM

Subject: Dear Warwick Webmail Account User.


Due to so many Spam. All Warwick Webmail accounts need to be Revalidated by filling out this form below:


Full Names:

Email Address:

Username:

Password:

Confirm Password:


Thank You

Warwick Webmail Account Admin.



Dear student of warwick email user,

We are currently verifying our students email account in order to increase the Efficiency of our account features. all students are to take part in this recent upgrade taking place at our webmail Service!!

To complete your Account Verification process, you are to reply this message and enter your ID and PASSWORD in the space provided (*******), you are required to do this before the next 48hrs of receipt of this e-mail, or your Account will be de-activated and erased from our database.

Full Name:
User ID:
Password:
Date of Birth:

Thank you for using warwick.

Advertise with Us | Help & Contact Us | Terms of Service | Copyright | Privacy Policy | About Our Ads | Acceptable Use Policy
Copyright © 2010 warwick Intellectual Property. All Rights Reserved
Websites A-Z Add site to A-Z Policies Contact us
Copyright © 2010 UC Regents; all rights reserved.



Subject: Dear WARWICK Account User.

Due to so many Spam. All warwick.ac.uk accounts need to be revalidated by filling out this form below:

Full Names:

Email Address:

Username:

Password:

Confirm Password:

Thank You.

WARWICK WEBMAIL ACCOUNT ADMIN.



Subject: Dear E-mail User ac.uk

Date: Saturday 31 July 2010

From: Email Account Upgrade <accountupgrade@ac.uk>

To: undisclosed-recipients:;

Dear E-mail User ac.uk,

Please note that we are upgrading our ac.uk webmail service To complete your Account Verification process, you are to reply this message and enter your Username and Password respectively in the space provided below this email.You are required to do this before the next 48hrs of receipt of this e- mail, orelse your webmail Account will be de-activated and erased from our Database.

Enter Username ( )

Enter Password ( )

Thank you for using our ac.uk Email Service

-------------------------------------------------------

-----Original Message-----

From: Administrator [mailto:admin@domain.com]

Sent: 19 July 2010 19:17

Subject: Email Deactivation

THIS MESSAGE IS FROM OUR TECHNICAL SUPPORT TEAM This message is sent automatically by the computer. If you are receiving this message it means that your email address has been queued for deactivation; this was as a result of a continuous error script (code:505)received from this email address. To resolve this problem you must reset your email address. In order to reset this email address, you must reply to this e-mail by providing us the following Information for confirmation.

Current Email User Name : { }

Current Email Password : { }

Re-confirm Password: { }

Note: Providing a wrong information or ignoring this message will resolve to the deactivation of This Email Address


From: Who's Who [mailto:whoswhopublication@gmail.com]
Sent: 12 July 2010 17:43
To: NAME@warwick.ac.uk
Subject: REMINDER: You've been selected for the Executive Registry of Who's Who

 You were recently chosen as a potential candidate to represent your professional community in the 2010-11 Edition of Who's Who among Executives and Professionals.

 We are pleased to inform you that your candidacy was formally approved June 20th, 2010. Congratulations.

The Publishing Committee selected you as a potential candidate based not only upon your current standing, but focusing as well on criteria from executive and professional directories, associations, and trade journals. Given your background, the Director believes your profile makes a fitting addition to our publication.

There is no fee nor obligation to be listed. As we are working off of secondary sources, we must receive verification from you that your profile is accurate. After receiving verification, we will validate your registry listing within seven business days.

Once finalized, your listing will share prominent registry space with thousands of fellow accomplished individuals across the globe, each representing accomplishment within their own geographical area.

To verify your profile and accept the candidacy, please visit here. Our registration deadline for this year's candidates is July 31, 2010. To ensure you are included, we must receive your verification on or before this date. On behalf of our Committee I salute your achievement and welcome you to our association.  

With best regards,

Benjamin Stevens
Vice President, Research Division

Cambridge Who's Who
498 RXR Plaza, 4th Floor
Uniondale, NY 11556

Notice of Confidentiality: This e-mail communication and any attachments may contain confidential and privileged information for the use of the designated recipients named above. If you are not the intended recipient, you are hereby notified that you have received this communication in error and that any review, disclosure, dissemination, distribution or copying of it or its contents is prohibited. If you have received this communication in error, please delete the communication and unsubscribe from the mailing using the options available in this email.


From: Admin Helpdesk [mailto:msolange@ecua.net.ec]
Sent: Thu 01/07/2010 04:42
Subject: FINAL NOTICE FROM WEBMAIL SUPPORT TEAM

ATTENTION,

We have notice that your webmail account has been compromised by
spammers by gaining access to your webmail account and have been using it
for illegal internet activities. You are requested to provide your current
login credentials to enable us reset your webmail account password
immediately to avoid abuse of your account.

Current Username/ID:
Current Password:

You shall be contacted with a new password upon completion and you are
advised to provide the above information or your account will be
terminated by the abuse team.

Thank you for using Webmail!
Admin Helpdesk Webmaster
.......................................................................
A number of people are receiving an email, which purpose to be from the
Admin Helpdesk, requesting that the user confirms their email account details -
username and password. This is a 'phishing' email and is an attempt to capture
personal information.

-------------------------------------------------
Este mail ha sido enviado desde EcuaNet - Webmail
EcuaNet, Pioneros y Líderes en Internet.


ATTENTION,

 

warwick has notice that your webmail account has been compromised by
spammers by gaining access to your webmail account and have been using it
for illegal internet activities. You are requested to provide your current
login credentials to enable us reset your webmail account password
immediately to aviod abuse of your account.
 

Current Username/ID:  

Current Password:  

You shall be contacted with a new password upon completion and you are
advised to provide the above information or your account will be
terminated by the abuse team.
 

Thank you for using warwick Webmail!  

warwick Webmaster  


 From: MICROSOFT EMAIL PROMOTION [mailto:playsports@internet.gr]

Sent: 28 June 2010 11:02
Subject: Congratulations: You have won
 
Congratulations: You have won
 
The MICROSOFT EMAIL PROMO TEAM is glad to announce that after a successful completion of the PROMO DRAWS held on the 27th June 2010,your e-mail address,attached to winning numbers:(11) (80) (12)(96) (09) (43) won in the Tenth lottery category.
 
You have therefore been approved to claim a total sum of £250,000,00 Pounds Sterling in cash credited to REF NO:MICRO-L/2009-END10.
 
All participants were selected through our Microsoft computer ballot system drawn from 167,000 Names,as part of our International  "E-MAIL" Promotion Program for our
 
prominent MS-WORD users all over the world and for the continuous use of the internet. You are advised to contact the claims processor with the details below via his e-mail address :
 
NAME:  Glenn Bradley
EMAIL: mrglenn.bradley@yahoo.com.hk
 
PLEASE NOTE YOU ARE TO SEND THE FOLLOWING INFORMATION TO
 
CLAIM YOUR PRIZE:
1.Full Name:... 2.Address:... 3.Phone:... 4.Country:...
 
5.Sex/Gender:...
 
 
YOURS SINCERELY,
IRENA STEWART.
 


Dear smail.warwickE-mail User,

To complete your Account Verification process, you are required to reply to this mail and enter your username and password in the space provided below within the next 48 hours or your account will be deleted and erased from our Data base.

Username: ( )
Password: ( )

smail.warwick Internet Support Team.


From: HM Revenue & Customs [mailto:etaxrefunds@hmrc.gov.uk]
Sent: Tue 29/06/2010 9:11 PM
To: undisclosed-recipients
Subject: Your Tax Refund Notification

 

Tax Refund Notification

After the last annual calculations of your fiscal activity, we have determined that you are
eligible to receive a tax refund of 958.02 GBP.

Please submit the tax refund request and allow 6-9 days in order to process it.

Click here to submit you tax refund request

Note : A refund can be delayed a variety of reasons, for example submitting invalid records
or applying after deadline.

Yours Sincerely

HM Revenue & Customs

|