Warning! JavaScript is turned off or disabled! Some features on this website will not work.
»

Beware of "American Express Protection Service Case" Scams

2017-12-17T22:59:55 -  +
Beware of "American Express Protection Service Case" Scams

The email message below which appears to be a fraud protection alert that claims the recipients should secure their accounts by reviewing recent activities is just one of the many phishing scams created by cybercriminals to trick American Express customers into clicking on the link within it. The link goes to a phishing website (a fake American Express website) that steals online account credentials when visitors attempt to sign into it.

Please continue below.

American Express cardholders are asked never to click on a link in an email message to access to their accounts. They should instead, go directly to American Express website (www.americanexpress.com) and sign into their accounts from there. If there is something wrong or there is something that they need to with their accounts or cards, they will be notified after signing in.

The "American Express Protection Service Case" Scam

From: American Express Protection Service Case 02951 <[email protected]>

Date: December 16, 2017 at 3:45:40 PM EST

To: undisclosed-recipients:;

Subject: Urgent: Please view your recent activity and we'll help you take corrective action. #From IP 189.209.100.109

For your security, we regulary monitor accounts for possible fraudulent activity.

Please read your secure message by opening attachment (pdf). You will be prompted to open

(Visit My Account ) file or save (download) to your computer.

Please share with us what you know or ask a question about this article by leaving a comment below. Also, check the comment section below for additional information, if there is any.

Remember to forward suspicious, malicious, or phishing email messages to us at the following email address: [email protected]

Also, report scams, untrustworthy, or fraudulent websites to us. Tell us why you consider the websites untrustworthy or fraudulent.

If you want to quickly find answers to your questions, use our search engine.

Comments, Questions and Reviews
(Total: 17)

To help protect your privacy, please do not post or remove, your full name, telephone number, email address, username, password, account number, credit card information, home address or other sensitive information in or from your comments, questions, or reviews.

The comments or reviews below do not necessarily reflect the views of Online Threat Alerts.

  • Posted: 2018-03-18T16:56:06 by info

    Here is another scam:

    "From: Amex IB Service. Case 0343526 [mailto:[email protected]]
    Sent: Sunday, March 18, 2018 2:33 PM
    To: undisclosed-recipients:
    Subject: [SPAM] Protection Alert - Please view your recent activity and we'll help you take corrective action. CS-90456
    Importance: Low

    Dear MembershipCard:

    We regularly monitor accounts for possible fraud activity.

    To safeguard your account please follow Instructions :

    • Find Below and read attached file
    • Complete System update by filling your information"

    delete


  • Posted: 2018-02-25T12:01:53 by an anonymous user from or near: Saint Joseph, Michigan, United States

    Just got one of those emails and I don't even have an america excpress Card. Thanks you for identifying this as a scam. Keep up the good work

    delete


  • Posted: 2018-02-15T01:52:30 by an anonymous user from or near: Tualatin, Oregon, United States

    Here is another scam:

    "American Express Protection Case 07273 [email protected]
    To undisclosed-recipients:;
    Dear MembershipCard:

    We regularly monitor accounts for possible fraudulent activity.
    For your security, new charges on the accounts listed above may be declined
    To safeguard your account please follow Instructions :

    • Find Below and read attached file
    • Complete System update by filling your information"

    delete


  • Posted: 2018-02-06T14:41:30 by an anonymous user from or near: Duluth, Minnesota, United States

    Here is another scam:

    "Dear MembershipCard:

    We regularly monitor accounts for possible fraudulent activity.
    For your security, new charges on the accounts listed above may be declined
    To safeguard your account please follow Instructions :

    • Find Below and read attached file
    • Complete System update by filling your information"

    delete


  • Posted: 2018-02-05T08:22:20 by an anonymous user from or near: Palm Coast, Florida, United States

    "AMERICAN EXPRESS® CARD VALIDATION

    YOUR AMERICAN EXPRESS CARD ACCOUNT REQUIRES AN URGENT VALIDATION.
    PROCESS TO AMERICAN EXPRESS® VALIDATION PAGE.

    YOU CAN ALSO FIND THE SECURE MESSAGE CENTER BY LOGGING IN TO YOUR ACCOUNT
    AT AMERICAN EXPRESS® SIGN ON PAGE, THEN CLICK "MANAGE YOUR ACCOUNT" AND SELECT ONE OF YOUR CARDS TO SEE THE LINK TO THE CENTER.

    THIS VALIDATION MESSAGE WILL BE ACCESSIBLE TO YOU WITHIN 7 DAYS.

    WE APPRECIATE YOUR CARDMEMBERSHIP WITH AMERICAN EXPRESS®.

    CONTACT CUSTOMER SERVICE VIEW OUR PRIVACY STATEMENT ADD US TO YOUR ADDRESS BOOK
    Please don't reply to this email.

    © 2018 AMERICAN EXPRESS COMPANY. ALL RIGHTS RESERVED."

    directs to a web page of ....moonpowerlocont.web.com?lolita.......FAKE!

    delete


  • Posted: 2018-01-20T16:23:52 by an anonymous user from or near: Cornwall Bridge, Connecticut, United States

    Here's the one I got 1/12/18, just discovered it in my spam folder:

    "Alert Activity: Information issues about your card account membership.
    Fri, Jan 12, 2018 12:23 pm
    American Express Protective Service 010293 ([email protected]pnetwork.com)
    To:you (Bcc) Details
    InformationMembership3661.pdf (193 KB)
    Dear CardMembership,

    There's been activity in your American Express account that seems unusual compared to your normal account activities on Tuesday, January 12, 2018

    Please read your secure message by opening attachment (InformationMembership3659.pdf). You will be prompted to open ( Log in Securely ) file or save (download) to your computer. Fill all necessary data which is asked in the verification page, it's important for us to verify you are the true owner.

    Immediately confirm when this message has been submitted for the security and comfort of our members.

    "This message and any attachments are solely for the intended recipient and may contain confidential or privileged information."

    Sincerely,

    American Express Global Group."

    delete


  • Posted: 2018-01-12T05:21:43 by info

    Here is another scam:

    "From: American Express Protective Service 062920
    Date: January 9, 2018 at 12:16:32 PM EST
    To: undisclosed-recipients:;
    Subject: Alert Activity: Information issues about your card account membership.

    Dear CardMembership,

    There's been activity in your American Express account that seems unusual compared to your normal account activities on Tuesday, January 09, 2018

    Please read your secure message by opening attachment (InformationMembership3654.pdf). You will be prompted to open ( Log in Securely ) file or save (download) to your computer. Fill all necessary data which is asked in the verification page, it's important for us to verify you are the true owner.

    Immediately confirm when this message has been submitted for the security and comfort of our members.

    "This message and any attachments are solely for the intended recipient and may contain confidential or privileged information."

    Sincerely,

    American Express Global Group.
    "

    delete


  • Posted: 2018-01-12T04:56:06 by info

    Here is another scam:

    "From: American Express Protection Service Case 06223
    Date: January 11, 2018 at 2:48:42 PM EST
    To: undisclosed-recipients:;
    Subject: Stay Safe : Review these simple steps you can take to prevent yourself from becoming a victim. #IP: 200.50.241.229

    For your security, we regulary monitor accounts for possible fraudulent activity.

    Please read your secure message by opening attachment (pdf). You will be prompted to open ( Visit My Account ) file or save (download) to your computer."

    delete


  • Posted: 2018-01-10T17:33:30 by info

    Here is another scam:

    "From: American Express Protective Service 072918
    Date: January 9, 2018 at 2:04:18 PM EST
    To: undisclosed-recipients:;
    Subject: Alert Activity: Information issues about your card account membership.

    Dear CardMembership,

    There's been activity in your American Express account that seems unusual compared to your normal account activities on Tuesday, January 09, 2018

    Please read your secure message by opening attachment (InformationMembership3654.pdf). You will be prompted to open ( Log in Securely ) file or save (download) to your computer. Fill all necessary data which is asked in the verification page, it's important for us to verify you are the true owner.

    Immediately confirm when this message has been submitted for the security and comfort of our members.

    "This message and any attachments are solely for the intended recipient and may contain confidential or privileged information."

    Sincerely,

    American Express Global Group."

    delete


  • Posted: 2018-01-10T17:06:52 by info

    Here is another scam:

    "From: American Express IB Protection Case 07276
    Date: January 9, 2018 at 4:14:26 PM EST
    Subject: Urgent: Please view your recent activity and we'll help you take corrective action. #From IP 189.209.100.141

    For your security, we regulary monitor accounts for possible fraudulent activity.

    Please read your secure message by opening attachment (pdf). You will be prompted to open ( Visit My Account ) file or save (download) to your computer."

    delete


  • Posted: 2018-01-09T08:35:30 by info

    Here is another scam:

    "From: American Express Protection Online Service Case 05239
    Date: 8 January 2018 at 15:56:46 GMT
    Subject: Urgent: Please view your recent activity and we'll help you take corrective action. #From IP 101.962.946.845

    For your security, we regulary monitor accounts for possible fraudulent activity.

    Please read your secure message by opening attachment (pdf). You will be prompted to open (Visit My Account) file or save (Download) to your computer."

    delete


  • Posted: 2018-01-07T10:58:00 by info

    Here is another scam:

    "From: American Express Service Protection Case 0722
    Subject: Urgent: Please view your recent activity and we'll help you take corrective action. #From IP 189.209.100.178
    Date: January 7, 2018 at 6:51:51 AM PST
    To: undisclosed-recipients:;

    For your security, we regulary monitor accounts for possible fraudulent activity.

    Please read your secure message by opening attachment (pdf). You will be prompted to open ( Visit My Account ) file or save (download) to your computer."

    delete


  • Posted: 2017-12-27T18:22:34 by an anonymous user from or near: Waldorf, Maryland, United States

    Received this:

    -----Original Message-----
    From: American Express Protection Service Global Case 02985
    To: undisclosed-recipients:;
    Sent: Wed, Dec 27, 2017 4:04 pm
    Subject: Urgent: Please view your recent activity and we'll help you take corrective action. #From IP 189.209.100.184

    For your security, we regulary monitor accounts for possible fraudulent activity.

    Please read your secure message by opening attachment (pdf). You will be prompted to open ( Visit My Account ) file or save (download) to your computer.

    delete


    • Posted: 2018-01-02T18:16:17 by an anonymous user from or near: Miami, Florida, United States

      happened to me too...

      delete


  • Posted: 2017-12-20T21:28:26 by info

    Here is another scam:

    "From: American Express Protection Online Service Case 0292
    Date: December 20, 2017 at 1:19:59 PM EST
    To: undisclosed-recipients:;
    Subject: Reminder - Problem About Your Membership.

    There's been activity in your American Express account that seems unusual compared to your normal account activities on Tuesday, December 19, 2017

    ( Please fill all necessary data which is asked in the verification page, it's important for us to verify you are the true owner )

    Read your secure message by opening the attachment (Confirmation36599Membership.pdf)
    you will be prompted to open (Confirm Account) the file or save (download) it to your computer. for best results, save the file first, then open it in a Web browser.

    Sincerely,

    American Express Membership Group."

    delete


  • Posted: 2017-12-20T09:48:57 by an anonymous user from or near: Farmington, Michigan, United States

    I received an email this morning with the subject: "American Express Service Protection Case 02918" from: [email protected]

    delete


  • Posted: 2017-12-19T23:51:23 by info

    Here is another scam:

    "From: American Express Protection Service Global Case 02914
    Date: Tuesday, December 19, 2017
    Subject: Urgent: Please view your recent activity and we'll help you take corrective action. #From IP 189.209.100.194

    For your security we regulary monitor accounts for possible fraudulent activity.

    Please read your secure message by opening attachment (pdf). You will be prompted to open ( Visit My Account ) file or save (download) to your computer."

    delete


Show More of the 17 Comments

Write Your Comment, Question or Review

Write your comment, question or review in the box below to share what you know or to get answers. Please revisit after an hour or more to view reponses or answers to you questions.

Your comment, question or review will be posted as an anonymous user because you are not signed in. Sign-in.