Beware of "American Express Fraud Protection Alert Suspicious Activities Detected" Scams

Comments: 9
Views: 5,502
Updated: December 17, 2017 2017-12-17T23:01:22 -
Date: June 2, 2017 2017-06-02T09:56:53

The email message below which appears to be a fraud protection alert that claims the recipients should confirm their recent charge activities is just one of the many phishing scams created by cybercriminals to trick American Express customers into clicking on the link within it. The link goes to a phishing website (a fake American Express website) that steals online account credentials when visitors attempt to sign into it.

American Express cardholders are asked never to click on a link in an email message to access to their accounts. They should instead, go directly to American Express website (www.americanexpress.com) and sign into their accounts from there. If there is something wrong or there is something that they need to with their accounts or cards, they will be notified after signing in.

The "American Express Fraud Protection Alert Suspicious Activities Detected" Scam

From: American Express <amexpress@portaladminstator.info>

Sent: Thursday, June 1, 2017 8:19 PM

Subject: Confirm your recent charge activity

Log in to view your statement online

American Express logo

Hello,

Ending: **** American Express Card

FRAUD PROTECTION ALERT

Suspicious Activities Detected On:

Thur, May 24, 2017

For your security, we regularly monitor accounts for possible fraudulent activity. Below are the details of an attempted charge:

Attempt Date: 04/27/17

Merchant: Amazon

Amount: 1,600.00 USD

Status: PENDING

Please Follow the Link below to Cancel the Transaction if necessary

CANCEL TRANSACTION

NOTE: You would need to provide some identification

To see balance information within this notification, switch to the Enhanced Version.

Note: Some of the names, addresses, email addresses, telephone numbers or other information in samples on this website may have been impersonated or spoofed.

Please share what you know or ask a question about this article by leaving a comment below. Also, check the comment section below for additional information, if there is any.

Remember to forward suspicious, malicious, or phishing email messages to us at the following email address: info@onlinethreatalerts.com

Also, report missing persons, scams, untrustworthy, or fraudulent websites to us. Tell us why you consider the websites untrustworthy or fraudulent.

If you want to quickly find answers to your questions, use our search engine.

You can help maintain Online Threat Alerts by paying a service fee. Click here to make payment.

Comments, Questions, Answers, or Reviews

(Total: 9)

To help protect your privacy, please do not post or remove, your full name, telephone number, email address, username, password, account number, credit card information, home address or other sensitive information in or from your comments, questions, or reviews.

The comments or reviews below do not necessarily reflect the views of Online Threat Alerts.

September 20, 2018 at 11:23 AM by info
Here is another scam:
"From: AMEX Online Services 7505164556 <onlineservices7505164556e89e4rd1s37 @mycaintlrewardscanlacactionrequest.net>
Sent: Thursday, September 20, 2018 7:13 AM
Subject: Urgent - Please review your recent activity #34984682
We noticed an Appple Pay™ transaction from an unauthorized unknown device or location on September 20, 2018
We have included the detailed information in attached document in this email message
Sincerely,
American Express."
remove
January 7, 2018 at 6:59 PM by an anonymous user from Wilmington, North Carolina, United States
I just got an email today from Amex. I opened the attachment but didn't click the link in the attachment. Am I safe?? I don't even have an American express card but I have been a victim of identity theft. I opened it because I thought someone may have used my name to open an account with American express. I opened the attachment with my phone! Please help!!
remove
- January 7, 2018 at 7:35 PM by info
  You are safe. The fake email is used to steal Amex account credentials, and you do not have an account.
  remove
  - January 7, 2018 at 7:55 PM by an anonymous user from Wilmington, North Carolina, United States
    Thank God and thank you for responding :)
    remove
December 20, 2017 at 2:49 PM by an anonymous user from Litchfield, Connecticut, United States
Got this today.
"Begin forwarded message:
From: American Express Service Protection Case 02982 <servicecase02982@aexopenedcontrol.net>
Date: December 20, 2017 at 1:13:35 PM EST
To: undisclosed-recipients:;
Subject: Urgent: Please view your recent activity and we'll help you take corrective action. #From IP 189.209.100.193
For your security we regulary monitor accounts for possible fraudulent activity.
Please read your secure message by opening attachment (pdf). You will be prompted to open ( Visit My Account ) file or save (download) to your computer."
I was not able to copy the rest of it, it is a PDF titled "Fraud Case #0992.pdf". It refers to Ames account 37*** and gives the following info: "attempt date: 19-December-2017, Merchant information: Godady Com, Amount: 655.58 EUR, Status: not approved", and instructs me to click on a link ("Visit Here") to safeguard my account.
When I tried to copy the body of the email, all I got was this:
{\rtf1\ansi\ansicpg1252
{\fonttbl}
{\colortbl;\red255\green255\blue255;}
}
remove
December 17, 2017 at 9:01 PM by info
Here is another scam:
-----Original Message-----
From: American Express Protection Service Global Case 02960 [mailto:globalprotection02960@apimembership.net]
Sent: Sunday, December 17, 2017 12:52 PM
To: undisclosed-recipients:
Subject: Urgent: Please view your recent activity and we'll help you take corrective action. #From IP 189.209.100.194
For your security we regulary monitor accounts for possible fraudulent activity.
Please read your secure message by opening attachment (pdf). You will be prompted to open ( Visit My Account ) file or save (download) to your computer.
remove
December 17, 2017 at 9:00 PM by info
Here is another scam:
-----Original Message-----
From: American Express Protection Online Service Case 02978 <caseaexp02978@globalinvoices.org>
To: undisclosed-recipients:;
Sent: Sun, Dec 17, 2017 10:15 am
Subject: Urgent: Please view your recent activity and we'll help you take corrective action. #From IP 189.279.170.209
For your security, we regulary monitor accounts for possible fraudulent activity.
Please read your secure message by opening attachment (pdf). You will be prompted to open ( Visit My Account ) file or save (download) to your computer.
remove
November 22, 2017 at 10:56 PM by an anonymous user from Spokane, Washington, United States
I just received a text stating someone tried to use my card $500 at maceys. And asked for the number on the back of the card.
remove
September 10, 2017 at 9:46 AM by an anonymous user from Orlando, Florida, United States
I just received an email like this today. I did not know about this scam. I clicked on it and entered my name and home address. However when it asked me for SS# I realized it was a scam. I just went online and changed my password on the account.
remove

Show More Comments (9)

Show all Comments

Write Your Comment, Question, Answer, or Review

Write your comment, question, answer, or review in the box below to share what you know or to get answers. NB: We will use your IP address to display your approximate location to other users.

Your comment, question, answer, or review will be posted as an anonymous user because you are not signed in. Anonymous posts cannot be edited or deleted. Sign-in.