"American Express Protection Service Case" Scams

The email message below which appears to be a fraud protection alert that claims the recipients should secure their accounts by reviewing recent activities is just one of the many phishing scams created by cybercriminals to trick American Express customers into clicking on the link within it. The link goes to a phishing website (a fake American Express website) that steals online account credentials when visitors attempt to sign into it.

American Express cardholders are asked never to click on a link in an email message to access to their accounts. They should instead, go directly to American Express website (www.americanexpress.com) and sign into their accounts from there. If there is something wrong or there is something that they need to with their accounts or cards, they will be notified after signing in.

The "American Express Protection Service Case" Scam

From: American Express Protection Service Case 02951 <aexpcase02951@aexrewardsinfo.net>
Date: December 16, 2017 at 3:45:40 PM EST
To: undisclosed-recipients:;
Subject: Urgent: Please view your recent activity and we'll help you take corrective action. #From IP 189.209.100.109
For your security, we regulary monitor accounts for possible fraudulent activity.
Please read your secure message by opening attachment (pdf). You will be prompted to open
(Visit My Account ) file or save (download) to your computer.