Online Threat Alerts (OTA)
An anti-cybercrime community alerting the public.

"EarthLink Account Cancellation Confirmation" Phishing Scam

EarthLink customers, be aware of "EarthLink Account Cancellation Confirmation" emails like the one below. The fake email which claims a request to cancel, close or lock the recipients' Earthlink's accounts has been processed and completed is a phishing scam being sent by cyber-criminals. The phishing email tricks EarthLink customers into clicking on the link in it, which goes to a phishing website that steals Earthlink account credentials (usernames and passwords).

Advertisements

The "EarthLink Account Cancellation Confirmation" Phishing Scam

Subject:EarthLink Account Cancellation Confirmation, Account Closed

Date:Thu, 11 Jan 2018 02:25:11 -0700

From:Earthlink Notice - Support@earthlink.net

EarthLink ® Account Cancellation Confirmation

Your confirmation number is: 170859748

Dear Client,

We're writing to confirm that on 01/11/18, you requested to cancel Your Earthlink Account

Your Request To Close And Lock Your Earthlink Account Has Been Processed And Completed .

You Will Be Disconnected Permanently Within 48hrs Of Receiving This Message

Your Billing Information's Has Been Deleted From Our System And Your Email Address Will Be Locked In 48hrs

FOLLOW THE STEPS BELOW IF YOU DO NOT WISH TO CLOSE YOUR ACCOUNT.

IF YOU HAVE MISTAKENLY PERFORM THIS ACTION PLS CLICK HERE TO RESTORE

Pls Delete And Disregard This Message If You Wish To Close And Lock Your Account Permanently

Sincerely,

EarthLink Support

The link in the fake email message goes to a fake EarthLink website, which was created by cyber-criminals to trick their potential victims into entering their EarthLink usernames, passwords and credit card information on it. If the requested information is submitted by the potential victims, it will be sent to the cyber-criminals, who will use it to steal their money and use their accounts fraudulently. The cyber-criminals/scammers behind the phishing email message will change the website's name, so look out for similar phishing email messages with links that go to different phishing websites.

If you are tricked into submitting your EarthLink credentials and credit card information on the fake web page, please change your EarthLink password immediately and contact your bank and let them know that you have submitted your credit card information on a phishing website.

Remember, never click on a link to sign into your EarthLink account, always go directly to www.earthlink.net and log in from there instead.

Check the comment section for additional information, or share what you know or ask a question about this article, by clicking the 'View or Write Comment' button below.

Note: Some of the information in samples on this website may have been impersonated or spoofed.

Share this article with others.
Advertisements
Write / View Comments (3)
View on Online Threat Alerts (OTA)
Help Maintain Online Threat Alerts (OTA)