Online Threat Alerts (OTA)
An anti-cybercrime community alerting the public.

Phishing Scam - "Unusual Activity in your American Express Account"

The email message below: "American Express," is a phishing scam. The email message was sent by cyber-criminals in an attempt to trick American Express customers into visiting a phishing website, created to steal their account credentials, personal and financial information. If you have received the email message, please do not follow the instructions in it, and remember never click on a link in an email message to sign into your online accounts.

Advertisements

The Fake and Phishing American Express Email Message

Dear Customer:

We are writing to you because we need to speak with you regarding a security concern on your American Express. Our records indicate that you recently used your American Express card on March 25, 2015.

For your security, new charges on the accounts listed above may be declined. If applicable, you should advise any Additional Card Member(s) on your account that their new charges may also be declined.

To secure your account , please click log on to : link removed

Your prompt response regarding this matter is appreciated.

Sincerely,

American Express

Again, it is recommended that American Express customers should never click on a link in an email message to sign into their accounts.instead, they should go directly to American Express's website at https://www.americanexpress.com/ and sign in from there.

Recipients of the phishing email message who followed the instructions in it, are advised to change your American Express password immediately.

Although the abovementioned advise will help protect American Express or other online banking customers, there is a hacking technique called “Man-in-Middle” attack, which cyber-criminals can use to harvest financial, personal or other information that they will need to rip off their victims.

To prevent the “Man-in-Middle” attack, it is recommended that online banking users never use a public computer or Wi-Fi connection, which are usually located at cybercafes, airports or hotels, to sign into their online banking accounts. They should instead use trusted internet connections like their home, work or mobile phone data internet connections.

Check the comment section for additional information, or share what you know or ask a question about this article, by clicking the 'View or Write Comment' button below.

Note: Some of the information in samples on this website may have been impersonated or spoofed.

Share this article with others.
Advertisements
Write / View Comments (0)
View on Online Threat Alerts (OTA)
Help Maintain Online Threat Alerts (OTA)