Online users who have received email messages like the one below, which claim that their email accounts will expire or mailbox will shutdown, should delete them. This is because the email messages are phishing scams being sent by cyber criminals to trick the recipients into clicking on the links in them that go to phishing websites that steal email account usernames and passwords.
A Sample of an "Account Will Expire" or "Mailbox will be Shutdown" Phishing Scam
From: Email management team <ahsan.cecil@hotmail.com>
Sent: Thursday, 15 June 2017 9:05 AM
To: user@hotmail.com
Subject: Confirm your email
Dear E-Mail User,
On 19th June 2017, Your account will expire, If you like to continue using your email address,
Update your e-mail account using the link below.
Confirm Your Email Here
This is to reduce the number of dormant account.
Best Regards
Mail Service
©2017 Mail Service. All Rights Reserved.
If the links in the phishing email messages are clicked by the recipients, they will be taken to a phishing website and ask to sign-in. If they attempt to do so, their email account credentials (usernames and passwords) will be sent to the cybercriminals behind the scam. Once the cybercriminals have gotten the stolen credentials, they will gain access to the accounts, hijack them, and use them fraudulently.
Therefore, online users who have received email messages with a link to update their information or make changes to their accounts should always go directly to their email account provider's website and sign into their accounts instead of clicking on the link. Once online users have signed into their accounts, they will be noticed of changes or updates, if there are any. Going directly to their email provider's website and signing in from there is the only guaranteed way of preventing online users from becoming victims of phishing scams.
Online users who have already been tricked by the phishing scam are asked change their passwords immediately before their accounts are hijacked and used fraudulently. If their accounts have already been hijacked by cybercriminals they need to contact their email providers for help.