"American Express Fraud Protection Alert Suspicious Activities Detected" Scams Home Categories Scamming "American Express Fraud Protection Alert Suspicious Activities Detected" Scams 9 9 5.68K 0 9y ago 2017-06-02T09:56:53-05:00 8y ago 2017-12-17T23:01:22-05:00 Online Threat Alerts The email message below which appears to be a fraud protection alert that claims the recipients should confirm their recent charge activities is just one of the many phishing scams created by cybercriminals to trick American Express customers into clicking on the link within it. The link goes to a phishing website (a fake American Express website) that steals online account credentials when visitors attempt to sign into it. American Express cardholders are asked never to click on a link in an email message to access to their accounts. They should instead, go directly to American Express website (www.americanexpress.com) and sign into their accounts from there. If there is something wrong or there is something that they need to with their accounts or cards, they will be notified after signing in.The "American Express Fraud Protection Alert Suspicious Activities Detected" ScamFrom: American Express <amexpress@portaladminstator.info>Sent: Thursday, June 1, 2017 8:19 PMSubject: Confirm your recent charge activityLog in to view your statement onlineAmerican Express logoHello,Ending: **** American Express CardFRAUD PROTECTION ALERTSuspicious Activities Detected On:Thur, May 24, 2017For your security, we regularly monitor accounts for possible fraudulent activity. Below are the details of an attempted charge:Attempt Date: 04/27/17Merchant: AmazonAmount: 1,600.00 USDStatus: PENDINGPlease Follow the Link below to Cancel the Transaction if necessaryCANCEL TRANSACTIONNOTE: You would need to provide some identificationTo see balance information within this notification, switch to the Enhanced Version. Check the comment section below for answers or additional information. Share what you know, or ask a question about this article by leaving a comment below. Online Threat Alerts is not affiliated with or endorsed by any trademark owner mentioned in this article. Some of the information in samples in this article may have been impersonated or spoofed. Save + Was this article helpful? (0) (0) More For You Is Games USA Outlet a Scam at gamesusaoutlet.com? See Review of Store Is Therhood Best a Scam: Review of the Gaming Store at therhood.best Is Pearleey a Scam or an Untrustworthy Online Store? Is Dewaltwos as Scam or Fake Store? See the Review Fake 'Johnson and David Associates Bank Transfer' Emails Being Sent by Scammers Review of thenotion.shop - Read Customer Service Reviews www.malluyh.com - it is an Untrustworthy Website 'www.TheMoneyGrill.com' - It is a Fake Work-From-Home Website 'GCMS LLC Final Notice Court Case' Phishing Scam 'American Express Verification' Phishing Email Scam Chase Account Update and Confirmation Phishing Scams 'PayPal eBay Request for Changing Shipping Address' Phishing Scam 'Chase ATM Withdrawal Exceeded Alert Limit' Phishing Email Scam 'Texaco Global Company Award Promotion' Lottery Scams Comments / Answers Remove sensitive information from your post. Your IP address will be used to display your estimated location. Enter comment post here 9infohttps://www.onlinethreatalerts.com/users/#infoSep 20, 2018 at 11:23 AM by "American Express Fraud Protection Alert Suspicious Activities Detected" ScamsinfoHere is another scam:"From: AMEX Online Services 7505164556 Sent: Thursday, September 20, 2018 7:13 AMSubject: Urgent - Please review your recent activity #34984682 We noticed an Appple Pay™ transaction from an unauthorized unknown device or location on September 20, 2018We have included the detailed information in attached document in this email messageSincerely,American Express."an anonymous userhttps://www.onlinethreatalerts.com/users/#an-anonymous-userJan 7, 2018 at 6:59 PM by "American Express Fraud Protection Alert Suspicious Activities Detected" Scamsan anonymous user from: Wilmington, North Carolina, United StatesI just got an email today from Amex. I opened the attachment but didn't click the link in the attachment. Am I safe?? I don't even have an American express card but I have been a victim of identity theft. I opened it because I thought someone may have used my name to open an account with American express. I opened the attachment with my phone! Please help!!infohttps://www.onlinethreatalerts.com/users/#infoJan 7, 2018 at 7:35 PM by "American Express Fraud Protection Alert Suspicious Activities Detected" ScamsinfoYou are safe. The fake email is used to steal Amex account credentials, and you do not have an account.an anonymous userhttps://www.onlinethreatalerts.com/users/#an-anonymous-userJan 7, 2018 at 7:55 PM by "American Express Fraud Protection Alert Suspicious Activities Detected" Scamsan anonymous user from: Wilmington, North Carolina, United StatesThank God and thank you for responding :)an anonymous userhttps://www.onlinethreatalerts.com/users/#an-anonymous-userDec 20, 2017 at 2:49 PM by "American Express Fraud Protection Alert Suspicious Activities Detected" Scamsan anonymous user from: Litchfield, Connecticut, United StatesGot this today. "Begin forwarded message:From: American Express Service Protection Case 02982 Date: December 20, 2017 at 1:13:35 PM ESTTo: undisclosed-recipients:;Subject: Urgent: Please view your recent activity and we'll help you take corrective action. #From IP 189.209.100.193For your security we regulary monitor accounts for possible fraudulent activity.Please read your secure message by opening attachment (pdf). You will be prompted to open ( Visit My Account ) file or save (download) to your computer."I was not able to copy the rest of it, it is a PDF titled "Fraud Case #0992.pdf". It refers to Ames account 37*** and gives the following info: "attempt date: 19-December-2017, Merchant information: Godady Com, Amount: 655.58 EUR, Status: not approved", and instructs me to click on a link ("Visit Here") to safeguard my account.When I tried to copy the body of the email, all I got was this:{\rtf1\ansi\ansicpg1252{\fonttbl}{\colortbl;\red255\green255\blue255;}}infohttps://www.onlinethreatalerts.com/users/#infoDec 17, 2017 at 9:01 PM by "American Express Fraud Protection Alert Suspicious Activities Detected" ScamsinfoHere is another scam:-----Original Message-----From: American Express Protection Service Global Case 02960 [mailto:globalprotection02960-apimembership.net] Sent: Sunday, December 17, 2017 12:52 PMTo: undisclosed-recipients:Subject: Urgent: Please view your recent activity and we'll help you take corrective action. #From IP 189.209.100.194 For your security we regulary monitor accounts for possible fraudulent activity. Please read your secure message by opening attachment (pdf). You will be prompted to open ( Visit My Account ) file or save (download) to your computer.
infohttps://www.onlinethreatalerts.com/users/#infoSep 20, 2018 at 11:23 AM by "American Express Fraud Protection Alert Suspicious Activities Detected" ScamsinfoHere is another scam:"From: AMEX Online Services 7505164556 Sent: Thursday, September 20, 2018 7:13 AMSubject: Urgent - Please review your recent activity #34984682 We noticed an Appple Pay™ transaction from an unauthorized unknown device or location on September 20, 2018We have included the detailed information in attached document in this email messageSincerely,American Express."
an anonymous userhttps://www.onlinethreatalerts.com/users/#an-anonymous-userJan 7, 2018 at 6:59 PM by "American Express Fraud Protection Alert Suspicious Activities Detected" Scamsan anonymous user from: Wilmington, North Carolina, United StatesI just got an email today from Amex. I opened the attachment but didn't click the link in the attachment. Am I safe?? I don't even have an American express card but I have been a victim of identity theft. I opened it because I thought someone may have used my name to open an account with American express. I opened the attachment with my phone! Please help!!
infohttps://www.onlinethreatalerts.com/users/#infoJan 7, 2018 at 7:35 PM by "American Express Fraud Protection Alert Suspicious Activities Detected" ScamsinfoYou are safe. The fake email is used to steal Amex account credentials, and you do not have an account.
an anonymous userhttps://www.onlinethreatalerts.com/users/#an-anonymous-userJan 7, 2018 at 7:55 PM by "American Express Fraud Protection Alert Suspicious Activities Detected" Scamsan anonymous user from: Wilmington, North Carolina, United StatesThank God and thank you for responding :)
an anonymous userhttps://www.onlinethreatalerts.com/users/#an-anonymous-userDec 20, 2017 at 2:49 PM by "American Express Fraud Protection Alert Suspicious Activities Detected" Scamsan anonymous user from: Litchfield, Connecticut, United StatesGot this today. "Begin forwarded message:From: American Express Service Protection Case 02982 Date: December 20, 2017 at 1:13:35 PM ESTTo: undisclosed-recipients:;Subject: Urgent: Please view your recent activity and we'll help you take corrective action. #From IP 189.209.100.193For your security we regulary monitor accounts for possible fraudulent activity.Please read your secure message by opening attachment (pdf). You will be prompted to open ( Visit My Account ) file or save (download) to your computer."I was not able to copy the rest of it, it is a PDF titled "Fraud Case #0992.pdf". It refers to Ames account 37*** and gives the following info: "attempt date: 19-December-2017, Merchant information: Godady Com, Amount: 655.58 EUR, Status: not approved", and instructs me to click on a link ("Visit Here") to safeguard my account.When I tried to copy the body of the email, all I got was this:{\rtf1\ansi\ansicpg1252{\fonttbl}{\colortbl;\red255\green255\blue255;}}
infohttps://www.onlinethreatalerts.com/users/#infoDec 17, 2017 at 9:01 PM by "American Express Fraud Protection Alert Suspicious Activities Detected" ScamsinfoHere is another scam:-----Original Message-----From: American Express Protection Service Global Case 02960 [mailto:globalprotection02960-apimembership.net] Sent: Sunday, December 17, 2017 12:52 PMTo: undisclosed-recipients:Subject: Urgent: Please view your recent activity and we'll help you take corrective action. #From IP 189.209.100.194 For your security we regulary monitor accounts for possible fraudulent activity. Please read your secure message by opening attachment (pdf). You will be prompted to open ( Visit My Account ) file or save (download) to your computer.