No Internet Connection Detected

"EarthLink Account Cancellation Confirmation" Phishing Scam

EarthLink Account Cancellation Confirmation Phishing Scam

Would you share this Article with others?  +

EarthLink customers, be aware of "EarthLink Account Cancellation Confirmation" emails like the one below. The fake email which claims a request to cancel, close or lock the recipients' Earthlink's accounts has been processed and completed is a phishing scam being sent by cyber-criminals. The phishing email tricks EarthLink customers into clicking on the link in it, which goes to a phishing website that steals Earthlink account credentials (usernames and passwords).

The "EarthLink Account Cancellation Confirmation" Phishing Scam

Subject:EarthLink Account Cancellation Confirmation, Account Closed

Date:Thu, 11 Jan 2018 02:25:11 -0700

From:Earthlink Notice <Support@earthlink.net>

EarthLink ® Account Cancellation Confirmation

Your confirmation number is: 170859748

Dear Client,

We're writing to confirm that on 01/11/18, you requested to cancel Your Earthlink Account

Your Request To Close And Lock Your Earthlink Account Has Been Processed And Completed .

You Will Be Disconnected Permanently Within 48hrs Of Receiving This Message

Your Billing Information's Has Been Deleted From Our System And Your Email Address Will Be Locked In 48hrs

FOLLOW THE STEPS BELOW IF YOU DO NOT WISH TO CLOSE YOUR ACCOUNT.

IF YOU HAVE MISTAKENLY PERFORM THIS ACTION PLS CLICK HERE TO RESTORE

Pls Delete And Disregard This Message If You Wish To Close And Lock Your Account Permanently

Sincerely,

EarthLink Support

The link in the fake email message goes to a fake EarthLink website, which was created by cyber-criminals to trick their potential victims into entering their EarthLink usernames, passwords and credit card information on it. If the requested information is submitted by the potential victims, it will be sent to the cyber-criminals, who will use it to steal their money and use their accounts fraudulently. The cyber-criminals/scammers behind the phishing email message will change the website's name, so look out for similar phishing email messages with links that go to different phishing websites.

If you are tricked into submitting your EarthLink credentials and credit card information on the fake web page, please change your EarthLink password immediately and contact your bank and let them know that you have submitted your credit card information on a phishing website.

Remember, never click on a link to sign into your EarthLink account, always go directly to www.earthlink.net and log in from there instead.

Note: Some of the information in samples on this website may have been impersonated or spoofed.

Check the comment section below for additional information and share what you know or ask a question about this article by leaving a comment below.

Remember to forward suspicious, malicious, or phishing email messages to us at the following email address: info@onlinethreatalerts.com. And, report missing persons, scams, untrustworthy, or fraudulent websites to us. Tell us why you consider the websites untrustworthy or fraudulent. Also, to quickly find answers to your questions, use our search Search engine.

Click here help maintain Online Threat Alerts (OTA).

Comments, Questions, Answers, or Reviews
Comments (Total: 3)

To protect your privacy, please do not post or remove sensitive information in or from your comments, questions, or reviews.

The comments, reviews or answers below do not necessarily reflect the views of Online Threat Alerts (OTA).

  • January 28, 2020 at 10:41 AM by an anonymous user from: Melbourne, Florida, United States

    I noticed a charge on my bank acct. haven't had this account in 20 years. Don't know password, this needs to be canceled. Patricia F.

  • October 25, 2019 at 6:04 PM by info

    Here is another scam:

    -Forwarded Message-

    From: service earthlink <service-earthlink@rindigen.com

    Subject: EarthLink Service Cancellation Confirmation

    ๐‘ซ๐’†๐’‚๐’“,

    ๐–๐ž'๐ซ๐ž ๐ฐ๐ซ๐ข๐ญ๐ข๐ง๐  ๐ญ๐จ ๐œ๐จ๐ง๐Ÿ๐ข๐ซ๐ฆ ๐ญ๐ก๐š๐ญ ๐จ๐ง ๐Ÿ๐ŸŽ/๐ŸŽ๐Ÿ“/๐Ÿ๐Ÿ—, ๐ฒ๐จ๐ฎ ๐ซ๐ž๐ช๐ฎ๐ž๐ฌ๐ญ๐ž๐ ๐ญ๐จ ๐œ๐š๐ง๐œ๐ž๐ฅ ๐ญ๐ก๐ž ๐Ÿ๐จ๐ฅ๐ฅ๐จ๐ฐ๐ข๐ง๐  ๐ฌ๐ž๐ซ๐ฏ๐ข๐œ๐ž(๐ฌ) ๐Ÿ๐จ๐ซ ๐š๐œ๐œ๐จ๐ฎ๐ง๐ญ ๐ง๐ฎ๐ฆ๐›๐ž๐ซ 1564878:

    ๐’๐„๐‘๐•๐ˆ๐‚๐„ ๐’๐„๐‘๐•๐ˆ๐‚๐„ ๐„๐๐ƒ ๐ƒ๐€๐“๐„

    ๐จ๐ง๐ฅ๐ง๐›๐œ๐ค๐ฉ:๐›๐š๐œ๐ค๐ฎ๐ฉ๐Ÿ“๐ŸŽ๐ŸŽ ๐Ÿ๐ŸŽ/๐Ÿ6/๐Ÿ๐ŸŽ๐Ÿ๐Ÿ—

    ๐˜๐จ๐ฎ๐ซ ๐œ๐จ๐ง๐Ÿ๐ข๐ซ๐ฆ๐š๐ญ๐ข๐จ๐ง ๐ง๐ฎ๐ฆ๐›๐ž๐ซ ๐ข๐ฌ: 069343765

    ๐Ÿ‡ฎโ€‹๐Ÿ‡ซโ€‹ ๐Ÿ‡พโ€‹๐Ÿ‡ดโ€‹๐Ÿ‡บโ€‹ฮ‡๐Ÿ‡ปโ€‹๐Ÿ‡ชโ€‹ ๐Ÿ‡ทโ€‹๐Ÿ‡ชโ€‹๐Ÿ‡จโ€‹๐Ÿ‡ชโ€‹๐Ÿ‡ฎโ€‹๐Ÿ‡ปโ€‹๐Ÿ‡ชโ€‹๐Ÿ‡ฉโ€‹ ๐Ÿ‡นโ€‹๐Ÿ‡ญโ€‹๐Ÿ‡ฎโ€‹๐Ÿ‡ธโ€‹ ๐Ÿ‡ฒโ€‹๐Ÿ‡ชโ€‹๐Ÿ‡ธโ€‹๐Ÿ‡ธโ€‹๐Ÿ‡ฆโ€‹๐Ÿ‡ฌโ€‹๐Ÿ‡ชโ€‹ ๐Ÿ‡ฎโ€‹๐Ÿ‡ณโ€‹ ๐Ÿ‡ชโ€‹๐Ÿ‡ทโ€‹๐Ÿ‡ทโ€‹๐Ÿ‡ดโ€‹๐Ÿ‡ทโ€‹๏น ๐Ÿ‡ตโ€‹๐Ÿ‡ฑโ€‹๐Ÿ‡ชโ€‹๐Ÿ‡ฆโ€‹๐Ÿ‡ธโ€‹๐Ÿ‡ชโ€‹ ๐Ÿ‡จโ€‹๐Ÿ‡ฆโ€‹๐Ÿ‡ฑโ€‹๐Ÿ‡ฑโ€‹ ๐Ÿ‡บโ€‹๐Ÿ‡ธโ€‹ ๐Ÿ‡ฆโ€‹๐Ÿ‡ธโ€‹ ๐Ÿ‡ธโ€‹๐Ÿ‡ดโ€‹๐Ÿ‡ดโ€‹๐Ÿ‡ณโ€‹

    ๐Ÿ‡ฆโ€‹๐Ÿ‡ธโ€‹ ๐Ÿ‡ตโ€‹๐Ÿ‡ดโ€‹๐Ÿ‡ธโ€‹๐Ÿ‡ธโ€‹๐Ÿ‡ฎโ€‹๐Ÿ‡งโ€‹๐Ÿ‡ฑโ€‹๐Ÿ‡ชโ€‹ ๐Ÿ‡ฆโ€‹๐Ÿ‡นโ€‹ โ‚๏นฃโ‚ˆโ‚ˆโ‚ˆ๏นฃ๐Ÿ‡ชโ€‹๐Ÿ‡ฆโ€‹๐Ÿ‡ทโ€‹๐Ÿ‡นโ€‹๐Ÿ‡ญโ€‹๐Ÿ‡ฑโ€‹๐Ÿ‡ฎโ€‹๐Ÿ‡ณโ€‹๐Ÿ‡ฐโ€‹ ๐Ÿ‡ดโ€‹๐Ÿ‡ทโ€‹ ๐Ÿ‡ทโ€‹๐Ÿ‡ชโ€‹๐Ÿ‡ตโ€‹๐Ÿ‡ฑโ€‹๐Ÿ‡พโ€‹ ๐Ÿ‡บโ€‹๐Ÿ‡ธโ€‹๏น•

    ๏นฃ ๐Ÿ‡ฌโ€‹๐Ÿ‡ดโ€‹ ๐Ÿ‡นโ€‹๐Ÿ‡ดโ€‹ ๐Ÿ‡ฎโ€‹๐Ÿ‡ณโ€‹๐Ÿ‡งโ€‹๐Ÿ‡ดโ€‹๐Ÿ‡ฝโ€‹ ๐Ÿ‡จโ€‹๐Ÿ‡ฑโ€‹๐Ÿ‡ฎโ€‹๐Ÿ‡จโ€‹๐Ÿ‡ฐโ€‹ ๐Ÿ‡ดโ€‹๐Ÿ‡ณโ€‹ ๐Ÿ‡ฒโ€‹๐Ÿ‡ชโ€‹๐Ÿ‡ธโ€‹๐Ÿ‡ธโ€‹๐Ÿ‡ฆโ€‹๐Ÿ‡ฌโ€‹๐Ÿ‡ชโ€‹

    ๏นฃ ๐Ÿ‡ทโ€‹๐Ÿ‡ชโ€‹๐Ÿ‡ตโ€‹๐Ÿ‡ฑโ€‹๐Ÿ‡พโ€‹ ๐Ÿ‡ฆโ€‹๐Ÿ‡ณโ€‹๐Ÿ‡ฉโ€‹ ๐Ÿ‡ธโ€‹๐Ÿ‡ชโ€‹๐Ÿ‡ณโ€‹๐Ÿ‡ฉโ€‹ ๐Ÿ‡พโ€‹๐Ÿ‡ดโ€‹๐Ÿ‡บโ€‹๐Ÿ‡ทโ€‹ ๐Ÿ‡ฎโ€‹๐Ÿ‡ณโ€‹๐Ÿ‡ซโ€‹๐Ÿ‡ดโ€‹๐Ÿ‡ทโ€‹๐Ÿ‡ฒโ€‹๐Ÿ‡ฆโ€‹๐Ÿ‡นโ€‹๐Ÿ‡ฎโ€‹๐Ÿ‡ดโ€‹๐Ÿ‡ณโ€‹๏น•

    ๏นฃ ๐Ÿ‡ชโ€‹๐Ÿ‡ฒโ€‹๐Ÿ‡ฆโ€‹๐Ÿ‡ฎโ€‹๐Ÿ‡ฑโ€‹/๐Ÿ‡ตโ€‹๐Ÿ‡ฆโ€‹๐Ÿ‡ธโ€‹๐Ÿ‡ธโ€‹๐Ÿ‡ผโ€‹๐Ÿ‡ดโ€‹๐Ÿ‡ทโ€‹๐Ÿ‡ฉโ€‹

    ๏นฃ ๐Ÿ‡ฆโ€‹๐Ÿ‡จโ€‹๐Ÿ‡จโ€‹๐Ÿ‡ดโ€‹๐Ÿ‡บโ€‹๐Ÿ‡ณโ€‹๐Ÿ‡นโ€‹ ๐Ÿ‡ณโ€‹๐Ÿ‡บโ€‹๐Ÿ‡ฒโ€‹๐Ÿ‡งโ€‹๐Ÿ‡ชโ€‹๐Ÿ‡ทโ€‹

    ๐Ÿ‡ธโ€‹๐Ÿ‡ฎโ€‹๐Ÿ‡ณโ€‹๐Ÿ‡จโ€‹๐Ÿ‡ชโ€‹๐Ÿ‡ทโ€‹๐Ÿ‡ชโ€‹๐Ÿ‡ฑโ€‹๐Ÿ‡พโ€‹๏น

    ๐Ÿ‡ชโ€‹๐Ÿ‡ฆโ€‹๐Ÿ‡ทโ€‹๐Ÿ‡นโ€‹๐Ÿ‡ญโ€‹๐Ÿ‡ฑโ€‹๐Ÿ‡ฎโ€‹๐Ÿ‡ณโ€‹๐Ÿ‡ฐโ€‹ ๐Ÿ‡ธโ€‹๐Ÿ‡บโ€‹๐Ÿ‡ตโ€‹๐Ÿ‡ตโ€‹๐Ÿ‡ดโ€‹๐Ÿ‡ทโ€‹๐Ÿ‡นโ€‹

    ๐Ÿ‡นโ€‹๐Ÿ‡ญโ€‹๐Ÿ‡ฎโ€‹๐Ÿ‡ธโ€‹ ๐Ÿ‡ฎโ€‹๐Ÿ‡ธโ€‹ ๐Ÿ‡ฆโ€‹๐Ÿ‡ณโ€‹ ๐Ÿ‡ฆโ€‹๐Ÿ‡ฉโ€‹๐Ÿ‡ฒโ€‹๐Ÿ‡ฎโ€‹๐Ÿ‡ณโ€‹๐Ÿ‡ฎโ€‹๐Ÿ‡ธโ€‹๐Ÿ‡นโ€‹๐Ÿ‡ทโ€‹๐Ÿ‡ฆโ€‹๐Ÿ‡นโ€‹๐Ÿ‡ฎโ€‹๐Ÿ‡ปโ€‹๐Ÿ‡ชโ€‹ ๐Ÿ‡ฒโ€‹๐Ÿ‡ชโ€‹๐Ÿ‡ธโ€‹๐Ÿ‡ธโ€‹๐Ÿ‡ฆโ€‹๐Ÿ‡ฌโ€‹๐Ÿ‡ชโ€‹ ๐Ÿ‡ซโ€‹๐Ÿ‡ทโ€‹๐Ÿ‡ดโ€‹๐Ÿ‡ฒโ€‹ ๐Ÿ‡ชโ€‹๐Ÿ‡ฆโ€‹๐Ÿ‡ทโ€‹๐Ÿ‡นโ€‹๐Ÿ‡ญโ€‹๐Ÿ‡ฑโ€‹๐Ÿ‡ฎโ€‹๐Ÿ‡ณโ€‹๐Ÿ‡ฐโ€‹. ๐Ÿ‡ฎโ€‹๐Ÿ‡นโ€‹ ๐Ÿ‡ฎโ€‹๐Ÿ‡ธโ€‹ ๐Ÿ‡ณโ€‹๐Ÿ‡ดโ€‹๐Ÿ‡นโ€‹ ๐Ÿ‡ธโ€‹๐Ÿ‡ตโ€‹๐Ÿ‡ฆโ€‹๐Ÿ‡ฒโ€‹. ๐Ÿ‡ซโ€‹๐Ÿ‡ทโ€‹๐Ÿ‡ดโ€‹๐Ÿ‡ฒโ€‹ ๐Ÿ‡นโ€‹๐Ÿ‡ฎโ€‹๐Ÿ‡ฒโ€‹๐Ÿ‡ชโ€‹ ๐Ÿ‡นโ€‹๐Ÿ‡ดโ€‹ ๐Ÿ‡นโ€‹๐Ÿ‡ฎโ€‹๐Ÿ‡ฒโ€‹๐Ÿ‡ชโ€‹๏น ๐Ÿ‡ชโ€‹๐Ÿ‡ฆโ€‹๐Ÿ‡ทโ€‹๐Ÿ‡นโ€‹๐Ÿ‡ญโ€‹๐Ÿ‡ฑโ€‹๐Ÿ‡ฎโ€‹๐Ÿ‡ณโ€‹๐Ÿ‡ฐโ€‹ ๐Ÿ‡ผโ€‹๐Ÿ‡ฎโ€‹๐Ÿ‡ฑโ€‹๐Ÿ‡ฑโ€‹ ๐Ÿ‡ธโ€‹๐Ÿ‡ชโ€‹๐Ÿ‡ณโ€‹๐Ÿ‡ฉโ€‹ ๐Ÿ‡พโ€‹๐Ÿ‡ดโ€‹๐Ÿ‡บโ€‹ ๐Ÿ‡ธโ€‹๐Ÿ‡บโ€‹๐Ÿ‡จโ€‹๐Ÿ‡ญโ€‹ ๐Ÿ‡ฒโ€‹๐Ÿ‡ชโ€‹๐Ÿ‡ธโ€‹๐Ÿ‡ธโ€‹๐Ÿ‡ฆโ€‹๐Ÿ‡ฌโ€‹๐Ÿ‡ชโ€‹๐Ÿ‡ธโ€‹ ๐Ÿ‡ฎโ€‹๐Ÿ‡ณโ€‹ ๐Ÿ‡ดโ€‹๐Ÿ‡ทโ€‹๐Ÿ‡ฉโ€‹๐Ÿ‡ชโ€‹๐Ÿ‡ทโ€‹ ๐Ÿ‡นโ€‹๐Ÿ‡ดโ€‹ ๐Ÿ‡จโ€‹๐Ÿ‡ดโ€‹๐Ÿ‡ฒโ€‹๐Ÿ‡ฒโ€‹๐Ÿ‡บโ€‹๐Ÿ‡ณโ€‹๐Ÿ‡ฎโ€‹๐Ÿ‡จโ€‹๐Ÿ‡ฆโ€‹๐Ÿ‡นโ€‹๐Ÿ‡ชโ€‹ ๐Ÿ‡ฎโ€‹๐Ÿ‡ฒโ€‹๐Ÿ‡ตโ€‹๐Ÿ‡ดโ€‹๐Ÿ‡ทโ€‹๐Ÿ‡นโ€‹๐Ÿ‡ฆโ€‹๐Ÿ‡ณโ€‹๐Ÿ‡นโ€‹ ๐Ÿ‡ฎโ€‹๐Ÿ‡ณโ€‹๐Ÿ‡ซโ€‹๐Ÿ‡ดโ€‹๐Ÿ‡ทโ€‹๐Ÿ‡ฒโ€‹๐Ÿ‡ฆโ€‹๐Ÿ‡นโ€‹๐Ÿ‡ฎโ€‹๐Ÿ‡ดโ€‹๐Ÿ‡ณโ€‹ ๐Ÿ‡ฆโ€‹๐Ÿ‡งโ€‹๐Ÿ‡ดโ€‹๐Ÿ‡บโ€‹๐Ÿ‡นโ€‹ ๐Ÿ‡พโ€‹๐Ÿ‡ดโ€‹๐Ÿ‡บโ€‹๐Ÿ‡ทโ€‹ ๐Ÿ‡ธโ€‹๐Ÿ‡บโ€‹๐Ÿ‡งโ€‹๐Ÿ‡ธโ€‹๐Ÿ‡จโ€‹๐Ÿ‡ทโ€‹๐Ÿ‡ฎโ€‹๐Ÿ‡ตโ€‹๐Ÿ‡นโ€‹๐Ÿ‡ฎโ€‹๐Ÿ‡ดโ€‹๐Ÿ‡ณโ€‹.

  • August 26, 2019 at 11:06 AM by info

    "From: EarthLink Support <confirmbillinginformation@earthlink.net>

    Sent: Monday, August 26, 2019 5:37 AM

    Subject: Thanks For Closing Your Account : EarthLink Service Cancellation Confirmation

    Service Cancellation Confirmation

    EarthLink

    EarthLinkร‚ยฎ Service Cancellation Confirmation

    Dear User,

    We're writing to confirm that on 08/24/19, you requested to cancel the following service(s) for your account :

    Your Webmail, Internet, TV Connection Will be disconnected And Deactivated After 24hrs Of Receiving This Message.

    Your confirmation number is: 172, The following service will be disconnected from the EarthLink network within 24hrs of receiving this message.

    DELETE AND CANCEL THIS MESSAGE IF YOU HAVE DELIBERATELY PERFORM THIS ACTION OR CLICK HERE TO CANCEL THIS REQUEST.

    Click The Link Above To Cancel Your Account Deactivation Before 24hrs Of Receiving This Message"

    Here is another scam.

Comments Show More Comments (2)
Write Your Comment, Question, Answer, or Review

NB: We will use your IP address to display your approximate location to other users.

Your post will be set as an anonymous because you are not signed in. Anonymous posts cannot be edited or deleted. Sign-in.

Keep your comment respectful.

"EarthLink Account Cancellation Confirmation" Phishing Scam