Online Threat Alerts (OTA) - Alerting you to scams and frauds.

"American Express Irregular Activity" Phishing Scam

8
8
2.4K
0

Mar 7, 2018 2018-03-07T14:07:59-05:00
Mar 7, 2018 2018-03-07T14:10:02-05:00

American Express Irregular Activity Phishing Scam

The "American Express Irregular Activity" email below is a scam being sent by cybercriminals to potential victims, with an attached form or HTML Web page requesting personal and financial information. American Express will never send their users an email message with an attached form or HTML Web page requesting personal, financial or account information. Therefore, American Express users are asked to delete email messages with an attached form or HTML Web page requesting the same information.

Also, they should not follow the instructions in the phishing email messages, and if they are in doubt or uncertain about an email message that they have received, they should contact American Express Customer Support for help verifying the email message authenticity.

The "American Express Irregular Activity" Phishing Scam

From: American Express <Americanexpress@americanexcpress.com>
Sent: Wednesday, March 7, 2018 10:48 AM
To: americanexpress@welcome.aexp.com
Subject: Recent Activities.
CardMember Alert
American Express logo
In regards to Primary Cardmember
Cards
Travels
Business
As part of our commitment to help keep your access secure, we have detected an irregular activity on your access and we are placing a hold on your access for your protection.
In view of this, Cardmember information needs to be updated and your mandatory effort is required.
WHAT IS REQUIRED
To proceed, An attached HTML Fillable Web Form is sent with this message.
- See Attached Information Form, Download and Open to Continue.
Thank you for your Card Membership.
American Express Customer Care
Privacy Statement
|
Update Your Email
Message information is included above to help you recognize this as a customer care e-mail from American Express. We kindly ask you not to reply to this e-mail directly as messages are being sent from an unmonitored e-mail address.
© 2018 American Express. All rights reserved.
GSU73773334

Check the comment section below for additional information, share what you know, or ask a question about this article by leaving a comment below.

Post comment or view the ones below. +

Save

Was this article helpful?

Comments, Answers or Questions

To protect your privacy, please remove sensitive or identifiable information from your post. Your IP address will be used to display your estimated location.

Comments 8

Jun 14, 2018 at 2:30 AM by an anonymous user from: Oak Park, Illinois, United States

I knew without a doubt that this was some kind of scam when I first saw it in my inbox.

First of all, I don't have an American Express card.

Secondly, as the anonymous user pointed out above, it purports to come from americanexCpress.com, which absolutely is NOT American Express.

Thirdly, an html attachment? Seriously? No. That's not how this works, and I do NOT believe the attachment is actually an html document.

Finally, this is not the method of contact a financial institution would use if there was an irregularity with your account.

May 23, 2018 at 2:49 PM by an anonymous user from: Mililani Town, Hawaii, United States

I received the same phishing email noted above last week from the fake Americanexpress-americanexcpress.com site. I was suspicious to note the extra "C" in the address. americanexCpress.com and looked it up on-line.

Thank you guys for confirming my suspicion!

EA
Hawaii

May 15, 2018 at 2:16 PM by info

Here is another scam:

"From: American Express [mailto:Americanexpress-americanexcpress.com]
Sent: Monday, May 14, 2018 3:58 PM
To: americanexpress-welcome.aexp.com
Subject: Recent Activities

American Express logo

Cardmember

Cards

Travels

Business

As part of our commitment to help keep your access secure, we have detected an irregular activity on your access and we are placing a hold on your access for your protection.

To proceed, See Attached Form, Download and Open to Continue.

Thank you for your Card Membership.

American Express Customer Care

Message information is included above to help you recognize this as a customer care e-mail from American Express. We kindly ask you not to reply to this e-mail directly as messages are being sent from an unmonitored e-mail address.

© 2018 American Express. All rights reserved.

GSU9i76709"

May 3, 2018 at 12:56 PM by an anonymous user from: Verona, Wisconsin, United States

I received this email recently:

"As part of our commitment to help keep your access secure, we have detected an irregular activity on your access and we are placing a hold on your access for your protection.

To proceed, An attached HTML Fillable Web Form is sent with this message.

- See Attached Form, Download and Open to Continue.

Thank you for your Card Membership.

American Express Customer Care"

I don't have an account with American Express, so did someone opens an account in my name? I don't have any recent new credit card accounts when I check my credit score. Is this a phishing scam as well?

Apr 18, 2018 at 9:07 AM by an anonymous user from: Salt Lake City, Utah, United States

I had the same URL as the person above stated sent to me.

I also thought it looked suspicious

It was sent from "AmericanExpress-AmericanExcpress.com, with "a c" in the word Express...
date April 16th at 6:45pm.

Poor grammar though out the message.
Deleted it.

Apr 16, 2018 at 11:52 PM by an anonymous user from: Phoenix, Arizona, United States

It was sent from "AmericanExpress-AmericanExcpress.com, with a c in the word Express...