Warning! JavaScript is turned off or disabled! Some features on this website will not work.
Previous Next
»

Beware of "American Express Irregular Activity" Phishing Scam

2018-03-07T14:10:02 -  +
Beware of "American Express Irregular Activity" Phishing Scam

The "American Express Irregular Activity" email below is a scam being sent by cybercriminals to potential victims, with an attached form or HTML Web page requesting personal and financial information. American Express will never send their users an email message with an attached form or HTML Web page requesting personal, financial or account information. Therefore, American Express users are asked to delete email messages with an attached form or HTML Web page requesting the same information.

Advertisements

Also, they should not follow the instructions in the phishing email messages, and if they are in doubt or uncertain about an email message that they have received, they should contact American Express Customer Support for help verifying the email message authenticity.

The "American Express Irregular Activity" Phishing Scam

From: American Express <Americanexpress@americanexcpress.com>

Sent: Wednesday, March 7, 2018 10:48 AM

To: americanexpress@welcome.aexp.com

Subject: Recent Activities.

CardMember Alert

American Express logo

In regards to Primary Cardmember

Cards

Travels

Business

As part of our commitment to help keep your access secure, we have detected an irregular activity on your access and we are placing a hold on your access for your protection.

In view of this, Cardmember information needs to be updated and your mandatory effort is required.

WHAT IS REQUIRED

To proceed, An attached HTML Fillable Web Form is sent with this message.

- See Attached Information Form, Download and Open to Continue.

Thank you for your Card Membership.

American Express Customer Care

Privacy Statement

|

Update Your Email

Message information is included above to help you recognize this as a customer care e-mail from American Express. We kindly ask you not to reply to this e-mail directly as messages are being sent from an unmonitored e-mail address.

© 2018 American Express. All rights reserved.

GSU73773334

Please share what you know or ask a question about this article by leaving a comment below. Also, check the comment section below for additional information, if there is any.

Remember to forward suspicious, malicious, or phishing email messages to us at the following email address: info@onlinethreatalerts.com

Also, report missing persons, scams, untrustworthy, or fraudulent websites to us. Tell us why you consider the websites untrustworthy or fraudulent.

If you want to quickly find answers to your questions, use our search engine.

Remember to help us, help you, by donating. 🎁Click here to donate

Advertisements
Comments, Questions and Reviews
(Total: 8)

To help protect your privacy, please do not post or remove, your full name, telephone number, email address, username, password, account number, credit card information, home address or other sensitive information in or from your comments, questions, or reviews. And, when you post a comment or review, we will use your IP address to display your approximate location to other users.

The comments or reviews below do not necessarily reflect the views of Online Threat Alerts.

  • Posted: Jun 14, 2018 at 2:30 AM by an anonymous user from or near: Saint Joseph, Michigan, United States

    I knew without a doubt that this was some kind of scam when I first saw it in my inbox.

    First of all, I don't have an American Express card.

    Secondly, as the anonymous user pointed out above, it purports to come from americanexCpress.com, which absolutely is NOT American Express.

    Thirdly, an html attachment? Seriously? No. That's not how this works, and I do NOT believe the attachment is actually an html document.

    Finally, this is not the method of contact a financial institution would use if there was an irregularity with your account.

    delete


  • Posted: May 23, 2018 at 2:49 PM by an anonymous user from or near: Waialua, Hawaii, United States

    I received the same phishing email noted above last week from the fake Americanexpress@americanexcpress.com site. I was suspicious to note the extra "C" in the address. americanexCpress.com and looked it up on-line.

    Thank you guys for confirming my suspicion!

    EA
    Hawaii

    delete


  • Posted: May 15, 2018 at 2:16 PM by info

    Here is another scam:

    "From: American Express [mailto:Americanexpress@americanexcpress.com]
    Sent: Monday, May 14, 2018 3:58 PM
    To: americanexpress@welcome.aexp.com
    Subject: Recent Activities

    American Express logo

    Cardmember

    Cards

    Travels

    Business


    As part of our commitment to help keep your access secure, we have detected an irregular activity on your access and we are placing a hold on your access for your protection.

    To proceed, See Attached Form, Download and Open to Continue.

    Thank you for your Card Membership.

    American Express Customer Care

    Message information is included above to help you recognize this as a customer care e-mail from American Express. We kindly ask you not to reply to this e-mail directly as messages are being sent from an unmonitored e-mail address.

    © 2018 American Express. All rights reserved.

    GSU9i76709"

    delete


  • Posted: May 3, 2018 at 12:56 PM by an anonymous user from or near: Middleton, Wisconsin, United States

    I received this email recently:

    "As part of our commitment to help keep your access secure, we have detected an irregular activity on your access and we are placing a hold on your access for your protection.

    To proceed, An attached HTML Fillable Web Form is sent with this message.

    - See Attached Form, Download and Open to Continue.

    Thank you for your Card Membership.

    American Express Customer Care"

    I don't have an account with American Express, so did someone opens an account in my name? I don't have any recent new credit card accounts when I check my credit score. Is this a phishing scam as well?

    delete


  • Posted: Apr 18, 2018 at 9:07 AM by an anonymous user from or near: Salt Lake City, Utah, United States

    I had the same URL as the person above stated sent to me.

    I also thought it looked suspicious

    It was sent from "AmericanExpress@AmericanExcpress.com, with "a c" in the word Express...
    date April 16th at 6:45pm.

    Poor grammar though out the message.
    Deleted it.

    delete


  • Posted: Apr 16, 2018 at 11:52 PM by an anonymous user from or near: Phoenix, Arizona, United States

    It was sent from "AmericanExpress@AmericanExcpress.com, with a c in the word Express...

    delete


  • Posted: Apr 10, 2018 at 11:40 PM by info

    Here is another scam:

    ---------- Forwarded message ----------
    From: "American Express"
    Date: Fri, Apr 6, 2018 at 5:55 PM -0700
    Subject: Recent activities

    CardMember Alert

    American Express logo

    In regards to Primary Cardmember

    As part of our commitment to help keep your access secure, we have detected an irregular activity on your access and we are placing a hold on your access for your protection.

    WHAT IS REQUIRED

    To proceed, An attached HTML Fillable Web Form is sent with this message.

    - See Attached Information Form, Download and Open to Continue.

    Thank you for your Card Membership.

    American Express Customer Care


    Privacy Statement
    |
    Update Your Email

    Message information is included above to help you recognize this as a customer care e-mail from American Express. We kindly ask you not to reply to this e-mail directly as messages are being sent from an unmonitored e-mail address.

    © 2018 American Express. All rights reserved."

    delete


  • Posted: Apr 10, 2018 at 12:07 PM by info

    Here is another scam:

    -----Original Message-----
    From: "American Express"
    Sent: Friday, April 6, 2018 3:44pm
    To: americanexpress@welcome.aexp.com
    Subject: Recent activities

    CardMember Alert

    American Express logo

    In regards to Primary Cardmember

    Image Lock

    Cards Travels Business

    As part of our commitment to help keep your access secure, we have detected an irregular activity on your access and we are placing a hold on your access for your protection.

    WHAT IS REQUIRED

    To proceed, An attached HTML Fillable Web Form is sent with this message.

    - See Attached Information Form, Download and Open to Continue.

    Thank you for your Card Membership.

    American Express Customer Care"

    delete


 Show More Comments (8)
Write Your Comment, Question or Review
Write your comment, question or review in the box below to share what you know or to get answers. Please revisit after an hour or more to view reponses or answers to you questions.

Your comment, question or review will be posted as an anonymous user because you are not signed in. Sign-in.