Online Threat Alerts (OTA) - Alerting you to scams and frauds.
The fake American Express email message below, which appears to be a security report alert that claims the recipients should secure their accounts by validating and updating them, is just one of the many phishing scams created by cybercriminals to trick American Express customers into clicking on the link within it. The link goes to a phishing website (a fake American Express website) that steals online account credentials when visitors attempt to sign into it.
American Express cardholders are asked never to click on a link in an email message to access to their accounts. They should instead, go directly to American Express website (www.americanexpress.com) and sign into their accounts from there. If there is something wrong or there is something that they need to with their accounts or cards, they will be notified after signing in.
Subject: Re: A recent security concern requires your attentionDate: Tuesday, March 6, 2018, 11:04 AMFrom: American Express <AmericanExpress@aexpmail.com> wrote:CardMember AlertAmerican Express logoIn regards to Primary CardmemberCardsTravelsBusinessWe are writing to let you know that there is a recent security report for your American Express(R) Account(s) . At time of report diligency, We ran into problem validating your profile.In view of this, Cardmember information needs to be updated and your mandatory effort is required.WHAT IS REQUIREDTo proceed, An attached HTML Fillable Web Form is sent with this message.- See Attached Information Form, Download and Open to Continue.- Finish steps by filling out the Form.Thank you for your Card Membership.American Express Customer CarePrivacy StatementUpdate Your EmailMessage information is included above to help you recognize this as a customer care e-mail from American Express. We kindly ask you not to reply to this e-mail directly as messages are being sent from an unmonitored e-mail address.© 2018 American Express. All rights reserved.
Subject: Re: A recent security concern requires your attention
Date: Tuesday, March 6, 2018, 11:04 AM
From: American Express <AmericanExpress@aexpmail.com> wrote:
CardMember Alert
American Express logo
In regards to Primary Cardmember
Cards
Travels
Business
We are writing to let you know that there is a recent security report for your American Express(R) Account(s) . At time of report diligency, We ran into problem validating your profile.
In view of this, Cardmember information needs to be updated and your mandatory effort is required.
WHAT IS REQUIRED
To proceed, An attached HTML Fillable Web Form is sent with this message.
- See Attached Information Form, Download and Open to Continue.
- Finish steps by filling out the Form.
Thank you for your Card Membership.
American Express Customer Care
Privacy Statement
Update Your Email
Message information is included above to help you recognize this as a customer care e-mail from American Express. We kindly ask you not to reply to this e-mail directly as messages are being sent from an unmonitored e-mail address.
© 2018 American Express. All rights reserved.
Check the comment section below for answers or additional information. Share what you know, or ask a question about this article by leaving a comment below.
Online Threat Alerts (OTA) is not affiliated with or endorsed by any trademark owner mentioned in this article. Some of the information in samples in this article may have been impersonated or spoofed.
32
getting multiple msg with American Express that my card suspended, this is funny because we don't have AMX. Dated 2/26/2019
This has just started happening to us as well and we do not have an Amex account. I just deleted the messages without clicking on the link.
The wording, capitalization, and punctuation should alert any AMEX card holder, but of course we're all in a hurry these days and might miss the errors.The phish I got was so ludicrously amateur (and obviously not from a native English speaker) that it gave me more laughter than concern. I hope others are quick to spot it, or simply know better.
Scam still going around:-"This is to inform you on a timely security report for your Card. At the time of scoring the report, Problems were encountered validating Cardmember profile .Essentially, Cardmember informations need to be requested and your effort is required. PLEASE-TAKE-A-MOMENT See attached for Fillable HTML Web Formo - Download to Open WebForm.- Finish steps by filling out the Form. Thank you for your Card Membership. American Express Customer Care"
Received this email on August 8th - it's still making the rounds. "This is to inform you on a timely security report for your American Express(R) Card. At time of report analysis, We ran into problem validating your profile.In view of this, Cardmember informations need to be requested and your mandatory effort is required. WHAT IS REQUIRED To proceed, An attached HTML Fillable Web Form is sent along this message.o - See Attached Information Form, Download and Open to Continue.- Finish steps by filling out the Form. Thank you for your Card Membership. American Express Customer Care Privacy Statement Update Your Email Message information is included above to help you recognize this as a customer care e-mail from American Express. We kindly ask you not to reply to this e-mail directly as messages are being sent from an unmonitored e-mail address. © 2018 American Express. All rights reserved. GNAENILNECA10600"
Received this email today, July 18th. Looked suspicious and I don't have an American Express account so it is even more suspicious. Thanks for posting this update so I could confirm my gut reaction.
I received this message on July 17, 2018. It was intercepted by my email application which placed it in my Junk folder. As is usually the case with trash messages like this one, it is rife with syntactical and punctuation errors, typically a dead giveaway that the message is bogus.
I just received this message today, July 13, 2018 but did not open any attachment. Seemed strange and there was no logo attached.
I got what I BELIEVE to be a "phishing letter" but it concerns me because I have been fighting identity theft (victim) since No. 2016 and one of the cards she tried to open in my name was American Express.I have NEVER had this card and I'm worried she might be trying again.Sincerely,Georgia.
Here is another scam:-------- Original Message --------Subject: A recent security concern requires your attentionFrom: American Express Sent: Monday, June 4, 2018, 11:14 AMCardMember AlertAmerican Express logo In regards to Primary CardmemberWe are writing to let you know that there is a recent security report for your American Express(R) Account(s) . At time of report diligency, We ran into problem validating your profile.In view of this, Cardmember information needs to be updated and your mandatory effort is required.WHAT IS REQUIREDTo proceed, An attached HTML Fillable Web Form is sent with this message.- See Attached Information Form, Download and Open to Continue.- Finish steps by filling out the Form.Thank you for your Card Membership.American Express Customer CarePrivacy StatementUpdate Your EmailMessage information is included above to help you recognize this as a customer care e-mail from American Express. We kindly ask you not to reply to this e-mail directly as messages are being sent from an unmonitored e-mail address.© 2018 American Express. All rights reserved.ALEENICNECA0130"
Here is another scam:"From: "American Express" Date: May 29, 2018 at 6:11:49 AM PDTTo: americanexpress-ampress.comSubject: A recent security concern requires your attentionReply-To: AmericanExpress-ampress.comCardMember AlertAmerican Express logo In regards to Primary CardmemberImage Lock CardsTravels BusinessWe are writing to let you know that there is a recent security report for your American Express(R) Account(s) . At time of report diligency, We ran into problem validating your profile.In view of this, Cardmember information needs to be updated and your mandatory effort is required.WHAT IS REQUIREDTo proceed, An attached HTML Fillable Web Form is sent with this message.- See Attached Information Form, Download and Open to Continue.- Finish steps by filling out the Form.Thank you for your Card Membership.American Express Customer Care"
I just got this oneThanks for the Heads-Up........!!!Did not expect American Express would send out a notification like this
yep saw this one today.
See e-mail content below is this legit or a phishing scam?"American Express serve®Hello Customer, An error occurred during our customer database check. You will be asked to confirm some information related to your account on next login. You have 24 hours to carry out this verification if you exceed this limit your account will be disabled for your security. (You will have to call us to request recover link). Login We sincerely apologize for the inconvenience"
It is a phishing scam.
Here is another scam:"From: Amеrіcаn Εxргеss Sent: Monday, May 21, 2018 11:07:02 PMSubject: [АMЕX АLЕRT] wе'vе dеtеct а problеm with trаnsаction in your аccount, plеаsе login to your аccount immеdiаtеly"
I received one today.
I got 2 of these already; they tried the same thing with Bank of America and wells Fargo never responded to any of them
Here is another scam:"From: American Express [mailto:AmericanExpress-aexpmail.com] Sent: Tuesday, May 22, 2018 11:18 AMTo: americanexpress-aexpmail.comSubject: Important Notice: Card Information Message.Primary Cardmember MessageFor your security: We are writing to let you know that there is a recent security report for your American Express(R) Account(s) . At time of report diligency, We ran into problem validating your profile.In view of this, Your profile needs to be to undergo an accuracy check and your mandatory effort is required.YOU ARE TOA safe attached fillable Web form is sent with this message.See Attached Information Form, Download and Open to Continue.Get started by filling all steps required onthe form.Thank you for your continued Cardmembership.American Express Customer ServiceCardmember: Contact Customer Service View Our Privacy Statement Add Us to Your Address BookYour Cardmember information is included in the upper-right corner to help you recognize this as a customer service e-mail from American Express. We kindly ask you not to reply to this e-mail but instead contact us securely via the customer service link above.Copyright 2018 American Express Company. All rights reserved.AGNEUYES0001680"
Client received the same scam today. Seems this scam continues to be alive and well. Luckily GoDaddy security blocked it so my client wasn't tempted to respond. Sigh...
Here is another scam:"We are writing to let you know that there is a recent security report for your American Express(R) Account(s) . At time of report diligency, We ran into problem validating your profile.In view of this, Your profile needs to be to undergo an accuracy check and your mandatory effort is required.*YOU ARE TO*A safe attached fillable Web form is sent with this message. * *See Attached Information Form, Download and Open to Continue. * * *Get started by filling all steps required onthe form.*Thank you for your continued Cardmembership.American Express Customer Service*Cardmember: *dbuzick-gmail.com
IO received the same scam today. I knew right away it was a scam.
Received this scam today....all sorts of hints it was a scam; spelling, syntax, name...pitched it after I took a screen shot and notified Amex.
Considering I no longer have an Amex card, I thought it was rather strange to receive this:"Primary Cardmember Message We are writing to let you know that there is a recent security report for your American Express(R) Account(s) . At time of report diligency, We ran into problem validating your profile.In view of this, Your profile needs to be to undergo an accuracy check and your mandatory effort is required.YOU ARE TOA safe attached fillable Web form is sent with this message.• See Attached Information Form, Download and Open to Continue. • Get started by filling all steps required onthe form. Thank you for your continued Cardmembership.American Express Customer Service"
Received via email:-- -- --"Primary Cardmember Message For your security:We are writing to let you know that there is a recent security report for your American Express(R) Account(s) . At time of report diligency, We ran into problem validating your profile.In view of this, Your profile needs to be to undergo an accuracy check and your mandatory effort is required.YOU ARE TOA safe attached fillable Web form is sent with this message.• See Attached Information Form, Download and Open to Continue. • Get started by filling all steps required onthe form. Thank you for your continued Cardmembership."-- -- --American Express Customer Service Cardmember: (I am not a cardmember!)wpoole1-peoplepc.com ( I do not have this email address!)This was sent to me today April 9 2018 at 5:37 AM I have received this same message at least two other times during the last 3 months. I do not nor have I ever had an american express account.Referrer"
Same message received but different email address. American Express
Received via email:"I received this threat and I do not even have an American Express Account!:On Wednesday, April 4, 2018 8:04 AM, American Express wrote:Primary Cardmember Message For your security: We are writing to let you know that there is a recent security report for your American Express(R) Account(s) . At time of report diligency, We ran into problem validating your profile.In view of this, Your profile needs to be to undergo an accuracy check and your mandatory effort is required.YOU ARE TOA safe attached fillable Web form is sent with this message.See Attached Information Form, Download and Open to Continue.Get started by filling all steps required onthe form.Thank you for your continued Cardmembership.American Express Customer Service"
Thank you for this alert. I got something that started out exactly like the one you showed as a scam, from the same email address as you described. I have not opened that email "alert" (which I have received twice in two days) so I can't confirm that the rest of the message reads as you have posted above. I just deleted the emails since I am not an AmEx customer and figured that the emails must be a phishing scam.Kudos to this website for performing this important public service.
Here is another scam:"We are writing to let you know that there is a recent security report for your American Express(R) Account(s) . At time of report diligency, We ran into problem validating your profile.In view of this, Cardmember information needs to be updated and your mandatory effort is required. WHAT IS REQUIRED To proceed, An attached HTML Fillable Web Form is sent with this message.o - See Attached Information Form, Download and Open to Continue.- Finish steps by filling out the Form. Thank you for your Card Membership. American Express Customer Care Privacy Statement Update Your Email Message information is included above to help you recognize this as a customer care e-mail from American Express. We kindly ask you not to reply to this e-mail directly as messages are being sent from an unmonitored e-mail address. © 2018 American Express. All rights reserved. ALEENICNECA0130"
Here is another scam:"From: AmericanExpress-aexpmail.comTo: americanexpress-aexpmail.comSent: 3/8/2018 12:30:57 PM Eastern Standard TimeSubject: A recent security concern requires your attention CardMember Alert American Express logo In regards to Primary CardmemberCardsTravelsBusinessWe are writing to let you know that there is a recent security report for your American Express(R) Account(s) . At time of report diligency, We ran into problem validating your profile.In view of this, Cardmember information needs to be updated and your mandatory effort is required. WHAT IS REQUIRED To proceed, An attached HTML Fillable Web Form is sent with this message.- See Attached Information Form, Download and Open to Continue.- Finish steps by filling out the Form. Thank you for your Card Membership. American Express Customer Care Privacy Statement Update Your Email Message information is included above to help you recognize this as a customer care e-mail from American Express. We kindly ask you not to reply to this e-mail directly as messages are being sent from an unmonitored e-mail address. © 2018 American Express. All rights reserved. ALEENICNECA0130"
I received this message but I am not an American Express holder. Should I be concerned with other issues since this messenger did have my E-mail address?
No, there is no need to be concerned, just do not click on the link in the email and follow the instructions on the page you are taken to.