The fake "American Express Security Update Alert" email notification below, which claims the recipients' accounts have been restricted until they can be verified, is just one of the many phishing scams created by cybercriminals to trick American Express customers into clicking on the link within it. The link goes to a phishing website (a fake American Express website) that steals online account credentials when visitors attempt to sign into it.
American Express cardholders are asked never to click on a link in an email message to access to their accounts. They should instead, go directly to American Express website (www.americanexpress.com) and sign into their accounts from there. If there is something wrong or there is something that they need to with their accounts or cards, they will be notified after signing in.
The "American Express Security Update Alert" Phishing Scam
From: American Express Alert [noreply@secure.com]
Sent: Wednesday, December 5, 2018 7:05 PM
To: Recipients <noreply@secure.com>
Subject: Account Security Mail
This is an automated email, please do not reply
Security Update
We've noticed a sign in attempt from an usual location and device.
To protect your privacy your account have been restricted until you verify your information.
Click on the link below to access your account information to restore access.
My Account
Regards,
American Express Company