Online Threat Alerts (OTA)
An anti-cybercrime community alerting the public.

"American Express Transaction Declined" Phishing Scam

The fake "American Express Transaction Declined" security notification email below, which claims that a purchase has been declined on the recipients' American Express account, is just one of the many phishing scams created by cybercriminals to trick American Express customers into clicking on the link within it. The link goes to a phishing website (a fake American Express website) that steals online account credentials when visitors attempt to sign into it.

Advertisements

American Express cardholders are asked never to click on a link in an email message to access to their accounts. They should instead, go directly to American Express website (www.americanexpress.com) and sign into their accounts from there. If there is something wrong or there is something that they need to with their accounts or cards, they will be notified after signing in.

The "American Express Transaction Declined" Phishing Scam

From: Rocio perez - roperxze@misseboothnm.com

Sent: Thursday, May 10, 2018 1:08 PM

Subject: American Express:Transaction Declined

Important information regarding your recent activity

American Express logo

Account Ending:

View Account

Recent Activity

Transaction Declined

We were unable to authorize the below listed purchase on your American Express Card referenced above.

Reason: we noticed unusual activity on your account

Merchant

Wawa Gas Store 8060

Transaction Amount $125.00

Balance* (including transaction above) $14,749.00

Credit Limit $14,700.00

Note: Transaction descriptions and amounts displayed may differ once posted.

are all of the above transactions valid?

YES NO

For your security, you may not be able to use your Card or access your account until you have confirmed that the activity above is valid.

Thank you for your Card Membership.

Sincerely,

American Express Customer Care

*Includes declined transaction above and charges approved but not yet posted.

The link in the fake email goes to the following fraudulent website: hxxp://www.amerixxpree.com.

Check the comment section for additional information, or share what you know or ask a question about this article, by clicking the 'View or Write Comment' button below.

Note: Some of the information in samples on this website may have been impersonated or spoofed.

Share this article with others.
Advertisements
Write / View Comments (1)
View on Online Threat Alerts (OTA)
Help Maintain Online Threat Alerts (OTA)