Beware of "American Express Card Validation" Phishing Scam

Updated: February 8, 2018 2018-02-08T23:29:21 -
Posted: February 8, 2018 2018-02-08T23:25:16
Views: 3,496
Comments: 15

The fake America Express email below, which claims the recipients' accounts require urgent validation, is just one of the many phishing scams created by cybercriminals to trick American Express customers into clicking on the link within it. The link goes to a phishing website (a fake American Express website) that steals online account credentials when visitors attempt to sign into it.

Please continue reading below.

American Express cardholders are asked never to click on a link in an email message to access to their accounts. They should instead, go directly to American Express website (www.americanexpress.com) and sign into their accounts from there. If there is something wrong or there is something that they need to with their accounts or cards, they will be notified after signing in.

The "American Express Verification" Phishing Scam

From: AMERlCAN EXPRESS

Sent: ‎Thursday‎, ‎February‎ ‎8‎, ‎2018 ‎10‎:‎12‎ ‎PM

DETECT

AMERICAN EXPRESS® VALIDATION CARD

Your American Express Card Account Requires an Urgent Validation.

Proceed to AMERICAN EXPRESS® Validation page.

You can also find the Secure Message Center by logging in to your account at American Express® Sign on Page.

then click "Manage Your Account" and select one of your Cards to see the link to the center.

This Validation Message Will be Accessible to you Within 7 days.

We Appreciate your Cardmembership With American Express®.

This is a customer service e-mail from American Express. To learn more about e-mail security or report a suspicious e-mail.

Contact Customer Service View Our Privacy Statement Add Us to Your Address Book

© 2018 American Express Company. All rights reserved.

Note: Some of the names, addresses, email addresses and telephone numbers in email samples on this website may have been impersonated.

Please share what you know or ask a question about this article by leaving a comment below. Also, check the comment section below for additional information, if there is any.

Remember to forward suspicious, malicious, or phishing email messages to us at the following email address: info@onlinethreatalerts.com

Also, report missing persons, scams, untrustworthy, or fraudulent websites to us. Tell us why you consider the websites untrustworthy or fraudulent.

If you want to quickly find answers to your questions, use our search engine.

You can help maintain Online Threat Alerts by paying a service fee. Click here to make payment.

Comments, Questions, Answers, or Reviews

(Total: 15)

To help protect your privacy, please do not post or remove, your full name, telephone number, email address, username, password, account number, credit card information, home address or other sensitive information in or from your comments, questions, or reviews. Also, anonymous posts cannot be deleted or edited, and when you make a post, we will use your IP address to display your approximate location to other users.

Please continue reading below.

The comments or reviews below do not necessarily reflect the views of Online Threat Alerts.

Apr 17, 2019 at 3:37 PM by info
Here is another scam:

"From: American Express <mrsbebeb@spainshared.advancedserverdns.com>
Date: Wednesday, April 17, 2019
Subject: American Express Account Suspension Notification

AMERICAN EXPRESS® ACCOUNT VALIDATION

Dear Account Holder,

We detected something unusual about a recent sign-in attempts to your online account. To help keep you safe, we required an extra security challenge.

For your safety Click Here

If you're not sure this was you, a malicious user might have tried to access your online account. Please review your recent activity and we'll help you take corrective action.

Your security is very important to us. If this was you, then you can safely ignore this email.

Sincerely,
© 2019 American Express Online Banking Team."
remove
Mar 27, 2019 at 8:27 AM by an anonymous user from West Chicago, Illinois, United States
I also received the scam email with some html attached. Definitely do not click the link that allows you to download images.
remove
Mar 26, 2019 at 5:46 PM by info
The scammers are using this email address: AmericanExpress@dccnotify.com
remove
Mar 25, 2019 at 12:43 AM by info
Here is another scam:

"From: "American Express" <AmericanExpress@dccnotify.com>
Date: March 24, 2019 at 8:31:45 AM AKDT
To: americanexpress@dccnotify.com
Subject: Reminder - Notice concerning your Account

MatchServe

In regards to Card Member,

Account®

PersonaServe
MultiplyServe

As part of our regular security update on the online servcie platform.

Unusual concerns were generated on your profile at the completion of this recent update.

We advise that cardmember complete this validation task by confirming what is on record with us.

See attached for web form.

Take a moment to download and complete this form.
Thanks for your continued Membership

American Express Online Team."
remove
Jan 31, 2019 at 3:52 PM by an anonymous user from Shallotte, North Carolina, United States
Received 2 SMS Msgs from American.express@amx.com
Review Immediately
http://qsxxoynkghlxqrky fgcwggennzyfuxzlalcxxaopnu@/whonomrn.tk
remove
- Feb 13, 2019 at 5:00 PM by an anonymous user from Dallas, Texas, United States
  I just got SMS text saying "<subject: suspension warning> http://myxiwrotlerdmtwzbibz. americanexpresscardconfirmationsystemsystemservice.com"
  remove
Nov 27, 2018 at 1:30 PM by an anonymous user from Austin, Texas, United States
"FRM:Message
SUBJ:American Express
MSG:1; Review Immediately.
http://americanexpress1wcngdfjbytyp @theallenbrothersteakhousesteak.net"

Got this today. Don’t have an American Express account.
remove
Aug 16, 2018 at 1:43 PM by an anonymous user from Ocala, Florida, United States
received a text message as follows and did not open. I do not have an account.

"FRM:4H22Z1
SUBJ:American Express
MSG:MSG: Review document immediately. hxxp//americanexpqimohazaqhwbsd. salads.cricket"
remove
May 24, 2018 at 8:56 PM by an anonymous user from LaBelle, Florida, United States
I just received this email today.
remove
Apr 17, 2018 at 6:05 AM by an anonymous user from Washington D.C., District of Columbia, United States
I got an email looked just like American Express it was about account being locked do to unusual activity this morning. Instead of a link in the email it had a fillable html webform. In the form they asked for card number, security codes, mothers maiden name, experation date, place of birth and elementary school anything you would need to answer security questions for Amex. It come from americanexpress@americanexcpress.com notice the one extra letter
remove
Apr 10, 2018 at 10:20 PM by info
Here is another scam:

"From: American Express <contact@c50695.sgvps.net>
Sent: Monday, April 9, 2018 2:14 AM
Subject: About Your Account

AMERICAN EXPRESS® CARD VALIDATION

Your American Express Card Account Requires an Urgent Validation.

Proceed to AMERICAN EXPRESS® Validation page.

You can also find the Secure Message Center by logging in to your account at American Express® Sign on Page

then click "Manage Your Account" and select one of your Cards to see the link to the center.

This Validation Message Will be Accessible to you Within 7 days.

We Appreciate your Cardmembership With American Express®.

Contact Customer Service View Our Privacy Statement Add Us to Your Address Book

This is a customer service e-mail from American Express. To learn more about e-mail security or report a suspicious e-mail, please visit us at americanexpress.com/fraudprotection. We kindly ask you not to reply to this e-mail but instead contact us securely via customer service.

© 2018 American Express Company. All rights reserved."
remove
Mar 31, 2018 at 3:44 PM by an anonymous user from Atlanta, Georgia, United States
Thank you for this. I received this exact message, and must admit this phishing scam is an especially valid-looking one. I'm thankful was able to verify my suspicions here. I reported it.
remove
Feb 28, 2018 at 1:50 PM by info
Here is another scam:

"Subject: CARD DETECTED
From: AMERlCAN EXPRESS <contact@couponsinsight.com>
Sent: 4:56pm, Saturday, February 24, 2018

CARD DETECTED

AMERICAN EXPRESS® CARD VALIDATION

Your American Express Card Account Requires an Urgent Validation.

Proceed to AMERICAN EXPRESS® Validation page.

You can also find the Secure Message Center by logging in to your account at American Express® Sign on Page, then click "Manage Your Account" and select one of your Cards to see the link to the center.

This Validation Message Will be Accessible to you Within 7 days.

We Appreciate your Cardmembership With American Express®.

Contact Customer Service

This is a customer service e-mail from American Express.

© 2018 American Express Company. All rights reserved."
remove
Feb 22, 2018 at 7:16 PM by an anonymous user from Fairhope, Alabama, United States
knew it was a scam, don’t even have Amex account but I am curious about something. Is it possible for the scammers to obtain any sensitive info by simply opening an email such as this? And what can happen if someone accidentally activates the link? Only asking because my mother is a little clumsy with her iPhone... wondering what advice I could give her were she to open a link without meaning to? Any input greatly appreciated.
Thanks for offering these alerts!
remove
- Feb 23, 2018 at 2:44 AM by info
  No, they cannot obtain your sensitive info by opening an email.
  
  What the cybercriminals want you to do is to click on the link, where you will be taken to a fake or phishing website. If you enter your info on the phishing website and submit it, it will be sent to the cybercriminals. That is how they can obtain your sensitive information.
  remove

Show More Comments (15)

Show all

Write Your Comment, Question, Answer, or Review

Write your comment, question or review in the box below to share what you know or to get answers. Please revisit after an hour or more to view reponses or answers to you questions.

Your comment, question or review will be posted as an anonymous user because you are not signed in. Sign-in.