Warning! JavaScript is turned off or disabled! Some features on this website will not work.
« »
»

Beware of "American Express Protection Service Case" Scams

2017-12-17T22:59:55 -  +
Beware of "American Express Protection Service Case" Scams

The email message below which appears to be a fraud protection alert that claims the recipients should secure their accounts by reviewing recent activities is just one of the many phishing scams created by cybercriminals to trick American Express customers into clicking on the link within it. The link goes to a phishing website (a fake American Express website) that steals online account credentials when visitors attempt to sign into it.

Please continue reading below.

American Express cardholders are asked never to click on a link in an email message to access to their accounts. They should instead, go directly to American Express website (www.americanexpress.com) and sign into their accounts from there. If there is something wrong or there is something that they need to with their accounts or cards, they will be notified after signing in.

The "American Express Protection Service Case" Scam

From: American Express Protection Service Case 02951 <aexpcase02951@aexrewardsinfo.net>

Date: December 16, 2017 at 3:45:40 PM EST

To: undisclosed-recipients:;

Subject: Urgent: Please view your recent activity and we'll help you take corrective action. #From IP 189.209.100.109

For your security, we regulary monitor accounts for possible fraudulent activity.

Please read your secure message by opening attachment (pdf). You will be prompted to open

(Visit My Account ) file or save (download) to your computer.

Please share what you know or ask a question about this article by leaving a comment below. Also, check the comment section below for additional information, if there is any.

Remember to forward suspicious, malicious, or phishing email messages to us at the following email address: info@onlinethreatalerts.com

Also, report missing persons, scams, untrustworthy, or fraudulent websites to us. Tell us why you consider the websites untrustworthy or fraudulent.

If you want to quickly find answers to your questions, use our search engine.

Remember to help us, help you, by donating. 🎁Click here to donate

Please continue reading below.

Comments, Questions and Reviews ✍
(Total: 18)

To help protect your privacy, please do not post or remove, your full name, telephone number, email address, username, password, account number, credit card information, home address or other sensitive information in or from your comments, questions, or reviews.

Show More of the 18 Comments

Write Your Comment, Question or Review

Write your comment, question or review in the box below to share what you know or to get answers. Please revisit after an hour or more to view reponses or answers to you questions.

Your comment, question or review will be posted as an anonymous user because you are not signed in. Sign-in.


The comments or reviews below do not necessarily reflect the views of Online Threat Alerts.

  • Posted: Jun 3, 2018 at 12:32 PM by an anonymous user from or near: Cypress, Texas, United States

    Received this scam:

    "From: American Express Protection IB#03132
    Sent: Sunday, June 3, 2018 12:24 PM
    Subject: Fraud Protection - Please view your recent activity and we'll help you take corrective action.RE#030405

    Please read your secure message by opening attachment (pdf). You will be prompted to open ( Visit My Account ) file or save (download) to your computer"

    delete


  • Posted: Mar 18, 2018 at 4:56 PM by info

    Here is another scam:

    "From: Amex IB Service. Case 0343526 [mailto:a500f21cyzu0343526@aexpinfomembershipsvc.net]
    Sent: Sunday, March 18, 2018 2:33 PM
    To: undisclosed-recipients:
    Subject: [SPAM] Protection Alert - Please view your recent activity and we'll help you take corrective action. CS-90456
    Importance: Low

    Dear MembershipCard:

    We regularly monitor accounts for possible fraud activity.

    To safeguard your account please follow Instructions :

    • Find Below and read attached file
    • Complete System update by filling your information"

    delete


  • Posted: Feb 25, 2018 at 12:01 PM by an anonymous user from or near: Saint Joseph, Michigan, United States

    Just got one of those emails and I don't even have an america excpress Card. Thanks you for identifying this as a scam. Keep up the good work

    delete


  • Posted: Feb 15, 2018 at 1:52 AM by an anonymous user from or near: Tualatin, Oregon, United States

    Here is another scam:

    "American Express Protection Case 07273 aexp07273@informationsmemebersrvc.netHide
    To undisclosed-recipients:;
    Dear MembershipCard:

    We regularly monitor accounts for possible fraudulent activity.
    For your security, new charges on the accounts listed above may be declined
    To safeguard your account please follow Instructions :

    • Find Below and read attached file
    • Complete System update by filling your information"

    delete


  • Posted: Feb 6, 2018 at 2:41 PM by an anonymous user from or near: Duluth, Minnesota, United States

    Here is another scam:

    "Dear MembershipCard:

    We regularly monitor accounts for possible fraudulent activity.
    For your security, new charges on the accounts listed above may be declined
    To safeguard your account please follow Instructions :

    • Find Below and read attached file
    • Complete System update by filling your information"

    delete


  • Posted: Feb 5, 2018 at 8:22 AM by an anonymous user from or near: Palm Coast, Florida, United States

    "AMERICAN EXPRESS® CARD VALIDATION

    YOUR AMERICAN EXPRESS CARD ACCOUNT REQUIRES AN URGENT VALIDATION.
    PROCESS TO AMERICAN EXPRESS® VALIDATION PAGE.

    YOU CAN ALSO FIND THE SECURE MESSAGE CENTER BY LOGGING IN TO YOUR ACCOUNT
    AT AMERICAN EXPRESS® SIGN ON PAGE, THEN CLICK "MANAGE YOUR ACCOUNT" AND SELECT ONE OF YOUR CARDS TO SEE THE LINK TO THE CENTER.

    THIS VALIDATION MESSAGE WILL BE ACCESSIBLE TO YOU WITHIN 7 DAYS.

    WE APPRECIATE YOUR CARDMEMBERSHIP WITH AMERICAN EXPRESS®.

    CONTACT CUSTOMER SERVICE VIEW OUR PRIVACY STATEMENT ADD US TO YOUR ADDRESS BOOK
    Please don't reply to this email.

    © 2018 AMERICAN EXPRESS COMPANY. ALL RIGHTS RESERVED."

    directs to a web page of ....moonpowerlocont.web.com?lolita.......FAKE!

    delete


  • Posted: Jan 20, 2018 at 4:23 PM by an anonymous user from or near: Cornwall Bridge, Connecticut, United States

    Here's the one I got 1/12/18, just discovered it in my spam folder:

    "Alert Activity: Information issues about your card account membership.
    Fri, Jan 12, 2018 12:23 pm
    American Express Protective Service 010293 (welcomev4spud25n19b81kq1a84an49ucwg33@aexp-notificationmembershipnetwork.com)
    To:you (Bcc) Details
    InformationMembership3661.pdf (193 KB)
    Dear CardMembership,

    There's been activity in your American Express account that seems unusual compared to your normal account activities on Tuesday, January 12, 2018

    Please read your secure message by opening attachment (InformationMembership3659.pdf). You will be prompted to open ( Log in Securely ) file or save (download) to your computer. Fill all necessary data which is asked in the verification page, it's important for us to verify you are the true owner.

    Immediately confirm when this message has been submitted for the security and comfort of our members.

    "This message and any attachments are solely for the intended recipient and may contain confidential or privileged information."

    Sincerely,

    American Express Global Group."

    delete


  • Posted: Jan 12, 2018 at 5:21 AM by info

    Here is another scam:

    "From: American Express Protective Service 062920
    Date: January 9, 2018 at 12:16:32 PM EST
    To: undisclosed-recipients:;
    Subject: Alert Activity: Information issues about your card account membership.

    Dear CardMembership,

    There's been activity in your American Express account that seems unusual compared to your normal account activities on Tuesday, January 09, 2018

    Please read your secure message by opening attachment (InformationMembership3654.pdf). You will be prompted to open ( Log in Securely ) file or save (download) to your computer. Fill all necessary data which is asked in the verification page, it's important for us to verify you are the true owner.

    Immediately confirm when this message has been submitted for the security and comfort of our members.

    "This message and any attachments are solely for the intended recipient and may contain confidential or privileged information."

    Sincerely,

    American Express Global Group.
    "

    delete


  • Posted: Jan 12, 2018 at 4:56 AM by info

    Here is another scam:

    "From: American Express Protection Service Case 06223
    Date: January 11, 2018 at 2:48:42 PM EST
    To: undisclosed-recipients:;
    Subject: Stay Safe : Review these simple steps you can take to prevent yourself from becoming a victim. #IP: 200.50.241.229

    For your security, we regulary monitor accounts for possible fraudulent activity.

    Please read your secure message by opening attachment (pdf). You will be prompted to open ( Visit My Account ) file or save (download) to your computer."

    delete


  • Posted: Jan 10, 2018 at 5:33 PM by info

    Here is another scam:

    "From: American Express Protective Service 072918
    Date: January 9, 2018 at 2:04:18 PM EST
    To: undisclosed-recipients:;
    Subject: Alert Activity: Information issues about your card account membership.

    Dear CardMembership,

    There's been activity in your American Express account that seems unusual compared to your normal account activities on Tuesday, January 09, 2018

    Please read your secure message by opening attachment (InformationMembership3654.pdf). You will be prompted to open ( Log in Securely ) file or save (download) to your computer. Fill all necessary data which is asked in the verification page, it's important for us to verify you are the true owner.

    Immediately confirm when this message has been submitted for the security and comfort of our members.

    "This message and any attachments are solely for the intended recipient and may contain confidential or privileged information."

    Sincerely,

    American Express Global Group."

    delete


  • Posted: Jan 10, 2018 at 5:06 PM by info

    Here is another scam:

    "From: American Express IB Protection Case 07276
    Date: January 9, 2018 at 4:14:26 PM EST
    Subject: Urgent: Please view your recent activity and we'll help you take corrective action. #From IP 189.209.100.141

    For your security, we regulary monitor accounts for possible fraudulent activity.

    Please read your secure message by opening attachment (pdf). You will be prompted to open ( Visit My Account ) file or save (download) to your computer."

    delete


  • Posted: Jan 9, 2018 at 8:35 AM by info

    Here is another scam:

    "From: American Express Protection Online Service Case 05239
    Date: 8 January 2018 at 15:56:46 GMT
    Subject: Urgent: Please view your recent activity and we'll help you take corrective action. #From IP 101.962.946.845

    For your security, we regulary monitor accounts for possible fraudulent activity.

    Please read your secure message by opening attachment (pdf). You will be prompted to open (Visit My Account) file or save (Download) to your computer."

    delete


  • Posted: Jan 7, 2018 at 10:58 AM by info

    Here is another scam:

    "From: American Express Service Protection Case 0722
    Subject: Urgent: Please view your recent activity and we'll help you take corrective action. #From IP 189.209.100.178
    Date: January 7, 2018 at 6:51:51 AM PST
    To: undisclosed-recipients:;

    For your security, we regulary monitor accounts for possible fraudulent activity.

    Please read your secure message by opening attachment (pdf). You will be prompted to open ( Visit My Account ) file or save (download) to your computer."

    delete


  • Posted: Dec 27, 2017 at 6:22 PM by an anonymous user from or near: Waldorf, Maryland, United States

    Received this:

    -----Original Message-----
    From: American Express Protection Service Global Case 02985
    To: undisclosed-recipients:;
    Sent: Wed, Dec 27, 2017 4:04 pm
    Subject: Urgent: Please view your recent activity and we'll help you take corrective action. #From IP 189.209.100.184

    For your security, we regulary monitor accounts for possible fraudulent activity.

    Please read your secure message by opening attachment (pdf). You will be prompted to open ( Visit My Account ) file or save (download) to your computer.

    delete


    • Posted: Jan 2, 2018 at 6:16 PM by an anonymous user from or near: Miami, Florida, United States

      happened to me too...

      delete


  • Posted: Dec 20, 2017 at 9:28 PM by info

    Here is another scam:

    "From: American Express Protection Online Service Case 0292
    Date: December 20, 2017 at 1:19:59 PM EST
    To: undisclosed-recipients:;
    Subject: Reminder - Problem About Your Membership.

    There's been activity in your American Express account that seems unusual compared to your normal account activities on Tuesday, December 19, 2017

    ( Please fill all necessary data which is asked in the verification page, it's important for us to verify you are the true owner )

    Read your secure message by opening the attachment (Confirmation36599Membership.pdf)
    you will be prompted to open (Confirm Account) the file or save (download) it to your computer. for best results, save the file first, then open it in a Web browser.

    Sincerely,

    American Express Membership Group."

    delete


  • Posted: Dec 20, 2017 at 9:48 AM by an anonymous user from or near: Farmington, Michigan, United States

    I received an email this morning with the subject: "American Express Service Protection Case 02918" from: servicecase02918@aexopenedcontrol.net

    delete


  • Posted: Dec 19, 2017 at 11:51 PM by info

    Here is another scam:

    "From: American Express Protection Service Global Case 02914
    Date: Tuesday, December 19, 2017
    Subject: Urgent: Please view your recent activity and we'll help you take corrective action. #From IP 189.209.100.194

    For your security we regulary monitor accounts for possible fraudulent activity.

    Please read your secure message by opening attachment (pdf). You will be prompted to open ( Visit My Account ) file or save (download) to your computer."

    delete