No Internet Connection Detected

Fake Yahoo Mail Upgrade Notification Emails Being Sent by Cybercriminals

Fake Yahoo Mail Upgrade Notification Emails Being Sent by Cybercriminals

Would you share this Article with others?  +

Yahoo users, if you have received fake Yahoo Upgrade notification email like the one below, which claim you need to upgrade your Yahoo and threaten to close or deactivate your account if you do not, please delete the same emails and do not follow the instructions in them. This is because the email messages are phishing scams being sent by cybercriminals to trick Yahoo users into clicking on the link in them, which goes to phishing websites that steal Yahoo usernames and passwords.

A Fake Yahoo Mail Upgrade Email Being Sent by Cybercriminals

From: "Center Message" <wei.chen704@hotmail.com>

Sent: Wed, 13 Mar 2019 at 13:19

Subject: Upgrade Notification.

Yahoo mail

We are asking all users to upgrade to our newer version service, due to fixing some errors and security info malfunctioning.Starting from 03/13/2019 you will no longer have access to sign-in into your account if no action is taken.

UPGRADE TO NEW VERSION

To confirm if your account is already upgraded before please, click here . And fill

Nοte: We the Administrator will be notify if you ignore this new version upgrade , and we will be forced to de-activate your account.

All Rights Reserved

© YAHOO! INC. 2019

Yahoo users should never click on a link to sign into their accounts; they should instead, go directly to mail.yahoo.com or yahoo.com and sign-in from there. Once they are signed in, they will be alerted to updates, changes or other important notifications. Going directly to Yahoo’s website to sign into their accounts, will protect Yahoo users from phishing links that go to fake websites that steal usernames and passwords. Phishing websites steal their visitors’ usernames and passwords by asking them to sign into their accounts on the same fake website. Once visitors to the websites attempt to sign-in, their usernames and passwords (credentials) will be sent to the cybercriminals responsible for the phishing websites. As soon as the cybercriminals receive their potential victims’ usernames and passwords, they will sign into their accounts, hijack and use them fraudulently.

Yahoo users who have been tricked by the fake upgrade email, are asked to change their Yahoo passwords immediately before their accounts are hijacked and used fraudulently.

Note: Some of the information in samples on this website may have been impersonated or spoofed.

Check the comment section below for additional information and share what you know or ask a question about this article by leaving a comment below.

Remember to forward suspicious, malicious, or phishing email messages to us at the following email address: info@onlinethreatalerts.com. And, report missing persons, scams, untrustworthy, or fraudulent websites to us. Tell us why you consider the websites untrustworthy or fraudulent. Also, to quickly find answers to your questions, use our search Search engine.

Click here help maintain Online Threat Alerts (OTA).

Comments, Questions, Answers, or Reviews
Comments (Total: 36)

To protect your privacy, please do not post or remove sensitive information in or from your comments, questions, or reviews.

The comments, reviews or answers below do not necessarily reflect the views of Online Threat Alerts (OTA).

  • August 3, 2020 at 10:01 PM by an anonymous user from: New South Wales, Australia

    I have received 2 emails threatening me with loss of all my emails if I dont UPGRADE IMMEDIATELY.

    The first was in Spam...and the 2nd in my inbox and I clicked on ...but it didnt go anywhere. Stupidly I also replied before it occurred to me it was posssibly Spam.

    I really dont want to lose all my account emails so how can I be sure?

    The address on the email sender looked said Ymail.com but was in fact...rsaez@unizar.es.

    • August 3, 2020 at 10:20 PM by info

      It is a scam. Go ymail.com or mail.yahoo.com and sign into your account. After signing in, you will notice that Yahoo did not notify you of such an action.

  • July 22, 2020 at 9:07 AM by an anonymous user from: Flowery Branch, Georgia, United States

    Received a very similarly worded email today with HTML attachment and excerpt of the raw header indicates from YAHOO:

    ***

    Received: from 10.253.231.19

    by atlas109.free.mail.gq1.yahoo.com with HTTP; Wed, 22 Jul 2020 11:25:25 0000

    Return-Path: <kotharigems_eou@yahoo.com>

    Received: from 98.137.64.174 (EHLO sonic301-48.consmr.mail.gq1.yahoo.com)

    by 10.253.231.19 with SMTPs; Wed, 22 Jul 2020 11:25:25 0000

    X-Originating-Ip: [98.137.64.174]

    Received-SPF: pass (domain of yahoo.com designates 98.137.64.174 as permitted sender)

    ***

    I contacted YAHOO Customer Care via their website form, they DID NOT ASK for the raw header or message content but simply, via email, confirmed that email from "kotharigems_eou@yahoo.com" is authorized. I think I was conversing via email with a Yahoo Customer Care cursed bot. I do not believe the email and HTML click thru attachment is valid and moved the email to SPAM for the following reasons:

    ** The grammar in email notification opening sentence is flawed in the original email

    ** Yahoo Customer Care did not request raw header detail to inspect

    ** My casual search on YAHOO.COM did not find a link or other reference to manually click thru to upgrade my account to YAHOO 2020 or reference the app thereof

    ** YAHOO is a server based service, it seems to me that YAHOO.COM will push required upgrades accounts rather than require the client click into an HTML attachment

    ** YAHOO has repeatedly advised its customer clients to NOT click thru on suspected HTML or other attachments embedded in email unless from a known contact AND have assured that the attachment was intentional.

    July 22, 2020

  • July 15, 2020 at 9:38 PM by an anonymous user from: Yucaipa, California, United States

    My mom received this email: Looking at the "From" email address suggests this is a scam...

    From: Yahoo Step-up <yvonne.liang@sbcglobal.net>

    Sent: Wednesday, July 15, 2020, 12:55:22 AM GMT 8

    Subject: ☑️ Mailbox Closure

    AT&T Yahoo

    Dear Yahoo User,

    Your account has been temporarily upgraded

    "Starting on July 15th 2020, Customers who have not updated their email account will no longer be able to log in to their YAHOO MAIL and through email addresses and we are deleting non-active Yahoo users to ensure more space for you! To complete the upgrade, please confirm your account active in accordance with the AT&T Services Agreement

    What do you need to do?

    Kindly use the attachment and sign in to upgrade permanently.

    Thank you,

    Yahoo service

    Please do not reply to this e-mail. Mail sent to this address cannot be answered

    • July 17, 2020 at 2:27 PM by an anonymous user from: San Antonio, Texas, United States

      I got the same thing and now I really can’t access my email, which made me second guess if it was legit?

  • June 24, 2020 at 10:52 AM by an anonymous user from: Wheaton, Illinois, United States

    this is the address used on an email I received requesting I upgrade or lose my email account with yahoo.

    2020 Admin <fry.family.in@sbcglobal.net>

    • June 24, 2020 at 11:21 AM by info

      It is a phishing a scam.

  • June 8, 2020 at 2:09 PM by an anonymous user from: San Antonio, Texas, United States

    I’ve gotten quite a few of the fake messages stated below and I always ignored them. But recently I got another one that said I must upgrade or will not be able to access my account with my email and it said to tap to download and fill out something. I ignored it as usual, but this time around I was wondering if it was legit because I can no longer access my mail, when I try to log in it says it does not recognize my email? Anyone else unable to log in anymore?

  • June 3, 2020 at 4:26 AM by an anonymous user from: Belgrade, Serbia

    HI, I have received this mail today, and similar few days ago.

    Is it a scam? This one is from suspicious address but the one before is from, seems like valid yahho.com address? I would appreciate some help.

    Tanks

    Yahoo! <anujsanyal28@yahoo.co.in>

    To:

    no-reply@yahoo.com

    Wed, Jun 3 at 12:22 AM

    Dear valued user,

    It's mandatory that you Update your account to avoid permanent deactivation of your account as our record indicates your account is not updated.

    "Starting from 7th June, 2020, YAHOO! may at any time terminate its services to accounts for failure to perform annual Security Update prior to our policy oath and terms"

    Take a minute to update your account for faster, safer and full featured YAHOO! experience.

    CLICK ON THE ATTACHED TO UPDATE YOUR ACCOUNT.

    Thanks,

    Yahoo! Mail Team.

    Please do not reply to this e-mail. Mail sent to this address cannot be answered.

    For assistance, log in to your email! website and choose the "Help" link on any page.

    Customer Service Email ID # 1009.

    c 2020!, Inc. All rights reserved.

    YAHOO UPDATE!

    .html

    159.9kB

    Yahoo! <susan_osp@yahoo.com>

    To:

    no-reply@yahoo.com

    Sun, May 31 at 11:11 PM

    Dear valued user,

    It's mandatory that you Update your account to avoid permanent deactivation of your account as our record indicates your account is not updated.

    "Starting from 7th June, 2020, YAHOO! may at any time terminate its services to accounts for failure to perform annual Security Update prior to our policy oath and terms"

    Take a minute to update your account for faster, safer and full featured YAHOO! experience.

    CLICK ON THE ATTACHED TO UPDATE YOUR ACCOUNT.

    Thanks,

    Yahoo! Mail Team.

    Please do not reply to this e-mail. Mail sent to this address cannot be answered.

    For assistance, log in to your email! website and choose the "Help" link on any page.

    Customer Service Email ID # 1009.

    c 2020!, Inc. All rights reserved.

    YAHOO UPDATE!

    .html

    159.9kB

    • June 3, 2020 at 9:35 AM by info

      It is a scam.

  • June 1, 2020 at 12:08 PM by an anonymous user from: United States

    "Yahoo Mail! <email.emergency.helpdesk@att.net>

    Mon, Jun 1 at 10:57 AM

    Dear User,

    We notice your email has not been confirmed for the new upgrade .

    You will be blocked from sending and receiving emails if not confirmed within 24hrs of receiving this automated mail. You are required to Upgrade through the link below.

    UPGRADE

    To log in, you'll need your ID. This is usually your email address.

    Protecting your information is important to us and we work continuously to strengthen the threats targeting our Financial Institution.

    Sincerely,

    The Yahoo Mail Secure Team."

    I received this today. Is this a scam?

    • June 1, 2020 at 1:21 PM by info

      Yes, it is a scam.

  • May 30, 2020 at 4:10 PM by an anonymous user from: Grand Rapids, Michigan, United States

    Here is what has been sent to me. It went to my spam box fortunately, however, I always go to a site and not click through any email! Looking at who sent it also will confirm suspicious activity as well:

    Yahoo Mail! <ddodom335@att.net>

    Thu, May 28 at 1:03 PM

    For your security we disabled all images and links in this email. If you believe it is safe to use, mark this message as not spam.Show images

    unnamed.gif

    Dear Valued User,

    Your Mail version is outdated,

    Failure to Upgrade to the newest AT&T Mail 8.1 now will result to a permanent account closure.

    According to provision 17.9 of Terms and Conditions, AT&T may at anytime terminate its services for accounts.

    To upgrade follow the link below and accept our new terms and conditions.

    UPGRADE NOW

    Thanks,

    AT&T

    Please do not reply to this message. Mail sent to this address cannot be answered

    ©Copyright © 2020

  • May 27, 2020 at 1:02 PM by info

    "From: Account update <tina_yadman@yahoo.com>

    Sent: Wednesday, 27 May 2020, 13:45:05 SAST

    Subject: Protect your account from getting blocked!

    We have a new unified Terms of Service and Privacy Policy

    Dear user,

    Starting April 25th 2020, the classic version of Yahoo Mail that you’re using on your computer will no longer be available.

    To ensure continued access to your Yahoo Mail account, we need you to upgraded to the latest version of Yahoo Mail or Basic Mail, and avoid being disconnection from our server

    Please Yahoo! Click Here Yahoo!to upgrade to the latest version now

    Thank you for being a loyal Yahoo Mail member.

    The Yahoo Mail Team"

    Here is another scam.

  • May 14, 2020 at 10:41 AM by an anonymous user from: San Pedro, California, United States

    Received this 14 may2020:

    "verification.desk2020@yahoo.com>

    Thu, May 14 at 2:59 AM

    VERIFY YOUR YAHOO MAIL ACCOUNT NOW TO AVOID SUSPENSION!

    Welcome to YAHOO Account Service!.

    Dear Valued user,

    This E-mail been sent to you by the YAHOO Verification Team to inform you that your account will be deactivated within the next 48 hours due to increased spam and phishing activities globally, a DGTFX Trojan virus has been detected in some of our YAHOO users Account and your email account was among. Your email account server will be upgraded with our new secure 1024-bit RSA key anti-virus firewall to prevent damage and spread of the virus. Click your reply tab, fill the columns below and send back to us for confirmation of the upgrade or your email account will be terminated to avoid spread of the virus. You will have to confirm your E-mail by filling out your Login Information below after clicking the reply button, otherwise your access to YAHOO services will be suspended.

    * Username: ...

    * Password: ...

    * Date of Birth: ...

    * Country Or Territory:...

    * Security Question: ...

    * Answer...

    * Phone Number...

    Warning: Account owner that refuses to update his/her account after two days of receiving this warning stands the risk of loosing his or her account permanently.

    Thanks,

    Yahoo"

  • May 7, 2020 at 2:55 PM by info

    "On Thursday, May 7, 2020, 10:17 AM, Yahoo! <jacvanton@yahoo.com> wrote:

    Email Update 2020

    Dear User,

    This Message is Sent to you to INFORM you that Your Account will expire on May 15th, 2020

    If you wish to continue using this Account, Upgrade to Our Services. Ignoring this message will cause the account to be closed

    Update your account

    Note: This upgrade is required immediately after receiving this message

    Thank you

    Security account team"

    Another scam.

  • April 29, 2020 at 1:30 PM by an anonymous user from: Anstruther, Scotland, United Kingdom

    I received an email today asking me to validate my yahoo account due to a database upgrade? If I responded to that request my emails that had been withheld would then be sent?.

    I dumped the email because there is no fascility for phishing mails available yo Yahoo users.

  • April 29, 2020 at 12:25 PM by an anonymous user from: Waterloo, Ontario, Canada

    I received this today. Is it legit? or a scam/fraud?

    I am assuming it is a scam but would like confirmation

    thank you

    What was sent is below:

    from:

    Rogers <mbeaulieudof@rogers.com>

    Wed., Apr. 29 at 10:56 a.m.

    Dear User,

    We notice your email has not been confirmed for the new upgrade .

    You will be blocked from sending and receiving emails if not confirmed within 24hrs of receiving this automated mail. You are required to Upgrade through the link below.

    UPGRADE

    To log in, you'll need your Rogers ID. This is usually your email address.

    Your online bill is ready.

    Protecting your information is important to us and we work continuously to strengthen the threats targeting our Financial Institution.

    Sincerely,

    The Rogers Mail Secure Team

    • April 29, 2020 at 12:35 PM by info

      It is a scam. Do not follow the instructions in it, just delete it.

  • April 28, 2020 at 11:39 AM by an anonymous user from: Houston, Texas, United States

    I received the following e-mail and I was suspicious and thought that it may be a phishing e-mail.

    Yahoo! <kenwms@flash.net>

    Mon, Apr 27 at 3:06 PM

    MIGRATION NOTIFICATION

    We are closing all older versions of your MailBox today, completion of AT&T migration is scheduled for 30th/APRIL/2020.

    As part of our effort to ensure your privacy and security your account will be unable to route new messages.

    You're required to accept new data "migration" terms and conditions.

    Accept Terms & Condition

    Thanks for choosing

    AT&T Yahoo Mail.

    • April 28, 2020 at 12:03 PM by info

      It is a phishing scam.

  • April 14, 2020 at 10:45 PM by an anonymous user from: Dhaka, Dhaka Division, Bangladesh

    Want to know if the below mail is fake? Received a mail today with heading Immediate Account Shutdown!

    "From Mail Service

    <wallsLisa99@yahoo.com

    Yahoo!mail.htm

    Prior to Yahoo! Agreement

    "Starting on April 120Th,2020, YAHOO! customers who have not updated their email account will no longer be able to log in to their Yahoo and through email addresses.

    Customers will have to verify their email addresses to confirm

    kindly click on the attachment re-login and verify now! we apologize for any inconvenience caused

    Thank you

    Yahoo!

    Attachment yahoo_mail htm"

    • April 14, 2020 at 11:34 PM by info

      The email is a fake.

  • April 9, 2020 at 5:55 PM by an anonymous user from: Port Richey, Florida, United States

    "YAHOO!

    Your Mail version is outdated.

    Failure to Upgrade to the newest Yahoo Mail 11.5 now will result to a permanent account closure.

    To upgrade please open the Attachment to avoid service disruption

    Thanks.a

    Yahoo! Mail Team

    Please do not reply to this message. Mail sent to this address cannot be answered. Double check the upgrade process to confirm if upgrade has been done successfully."

    Here is another scam.

  • April 2, 2020 at 11:53 AM by an anonymous user from: Spring, Texas, United States

    What do you do if you reply to fake email

    • April 2, 2020 at 11:59 AM by info

      Just be careful going forward.

  • February 25, 2020 at 12:07 PM by info

    "From: Yahoo Member Support <customerservice@gryffoncourier.com>

    Date: February 25, 2020 at 11:56:19 AM CST

    To: undisclosed-recipients:;

    Subject: Action Required: Upgrade your Yahoo Account

    Dear Yahoo User,

    This is regarding your Email Account Storage, ensuring the safety and

    security of your data is important to us, and we know how critical your

    email is to you.

    Our systems identified you have used 85% out of the total space

    allocated

    to your email soon you will not be able to send or receive emails.

    You will need more space if you want to continue receiving and replying

    emails.

    At Yahoo!, we strive to give you the best email experience possible.

    You can get more storage space simply by clicking upgrade and accept

    NOTE: This link will expire in 24 hours, so be sure to use it right away

    Kind regards

    Thanks.

    Yahoo! Mail Storage Team."

    Here is another scam.

  • November 3, 2019 at 8:23 AM by info

    Here is another scam:

    "From: AT&T Yahoo Mail <thogladav@sbcglobal.net>

    Date: November 3, 2019 at 5:54:28 AM CST

    Subject: Mailbox authorization

    Reply-To: AT&T Yahoo Mail <thogladav@sbcglobal.net>

    

    AT&T Yahoo

    AT&T Mailbox Latest Update!

    Hello Value Customer,

    We urgently bring this to your notice that Your AT&T Yahoo Mailbox version is currently out of date due to recent upgrade to our service.

    Failure to Upgrade to the newest AT&T Yahoo! Mail now will result to a permanent account closure According to

    provision 17.9 of Terms and Conditions, Yahoo may at anytime terminate its services for accounts.

    REVIEW - NOW!

    To re-validate your mailbox .

    Important: Failure to comply with 48hrs might lead to permanent shut-down.

    Thank you!

    © 2019 AT&T Customer Service."

  • October 16, 2019 at 7:10 AM by an anonymous user from: Dublin, Ireland

    Here is a other fake email:

    "Prior to Yahoo! Agreement

    Dear Valued User,

    Starting on Oct 17, 2019, Yahoo! customers who have not updated their email account will no longer be able to log in to their Yahoo and through email addresses.

    Customers will have to Verify their email address to confirm. You have 48 hours to Verify else you will Loose you Mailbox

    Kindly fill attached for verification of your account! We apologize for any inconvenience caused.

    Thank you,

    Yahoo! online service"

  • October 6, 2019 at 2:19 PM by an anonymous user from: Los Angeles, California, United States

    Received this scam:

    "Warning: UPDATE NOW

    And link to Verify account

    Also a Help-Desk link"

  • September 27, 2019 at 7:50 AM by info

    Here is another scam:

    "From: AT&T Mail <whiteheadarthur@att.net>

    Date: September 26, 2019 at 2:15:20 PM PDT

    Subject: 9/26/2019

    Reply-To: AT&T Mail <whiteheadarthur@att.net>

    Dear User,

    We are closing all old versions of your AT&T/Yahoo! Mailbox as from September, 29th.

    Avoid being deactivated.Tap below;

    UPGRADE NOW TO THE NEWEST VERSION

    Thank you for choosing AT&T/Yahoo!"

  • September 19, 2019 at 8:20 AM by info

    Here is another scam:

    "From: Yahoo!Mail Security® <tagaste_rh@yahoo.com>

    To: noreply@yahoo.com <noreply@yahoo.com>

    Sent: Thursday, September 19, 2019, 07:24:23 AM GMT-3

    Subject: 🔓🚩✉: FINAL WARNING: Don't Get Locked Out!

    Dear Valued Customer,

    YAHOO! ✉ MAILBOX DUE FOR UPGRADE.

    The security of your Email is important to us. In light of reported security issues or suspicious activity on this Email, please confirm the ownership of your Email to prevent shutdown of this account.

    Kindly follow the verify button below to secure your account according to our terms of services and privacy poIicy.

    Verify and Secure Email!"

  • June 26, 2019 at 8:27 AM by info

    "Date: Tuesday, June 25, 2019, 03:06:03 PM EDT

    From: Y@hoo Mail <tluu4707@att.net>

    AT&T Yahoo

    Dear -Yahoo Mail User,

    Your -Yahoo Mail version is outdated, Failure to Upgrade to the newest Yahoo Mail Basic Version.

    Will result to a permanent account closure.

    To upgrade click the link below and accept our new terms and conditions.

    Click here to Upgrade to -Yahoo Mail Basic Version

    Thanks for choosing -Yahoo Mail.

    Powered by Microsoft Excel"

    Here is another scam.

  • June 20, 2019 at 11:30 AM by info

    "From: Yahoo Mail Administrator <yolawore@yahoo.com>

    To: Yahoo! Inc. <yahoo@communications.yahoo.com>

    Sent: Tuesday, June 18, 2019, 11:11:12 AM CDT

    Subject: Action required: Mailbox Service Upgrade.

    Yahoo!

    Email Upgrade Notification.

    Attn:

    With courtesy to you. We noticed that you have been ignoring our messages to upgrade your email. We are about to stop incoming emails to your email if you don't upgrade to our latest version within 48 hours from receiving this message.

    You need to upgrade your email address immediately. Please re-login from Upgrade here and your email will be upgraded automatically.

    Do not discard, this notice is not an invoice, it's courtesy reminder to upgrade.

    We are sorry for the inconvenience.

    Yahoo Team 2019."

    Here is another scam.

  • June 10, 2019 at 12:23 PM by info

    "From: Mail Support <ericaguirre127@hotmail.com>

    Sent: Monday, June 10, 2019, 6:53:00 PM GMT 2

    Subject: New Security Information About Your Account.

    Upgrade to the latest Yahoo Mail to prevent pending emails and get faster email delivery with notifications.

    YAHOO MAIL

    Just one tap away.

    Tap to upgrade

    Do not ignore this message if not your Yahoo Mail suspended. You’re just a tap away from the upgraded Yahoo Mail app that has faster performance, improved search, personalised news, and weather updates."

    Received the above scam.

  • April 30, 2019 at 11:43 AM by info

    Here is another scam:

    "From: AT&T Yahoo mail <geberry2@bellsouth.net>

    Subject: Upgrade Yahoo Mail.

    To:

    Date: Tuesday, April 30, 2019, 9:31 AM

    Dear User, The Classic version of your mail will be replaced by our new version on 30th April 2019. So it's time to upgrade, before you lose your email access.

    CLICK HEREProtecting your information is important to us and we work continuously to strengthen the threats targeting our Financial

    Institution.

    2019 AT&T Intellectual Property. All Rights Reserved. Terms of Service | Privacy Policy | HelpAT&T and the AT&T logo are trademarks of AT&T Intellectual Property. Powered by Microsoft Excel"

Comments Show More Comments (35)
Write Your Comment, Question, Answer, or Review

NB: We will use your IP address to display your approximate location to other users.

Your post will be set as an anonymous because you are not signed in. Anonymous posts cannot be edited or deleted. Sign-in.

Keep your comment respectful.

Fake Yahoo Mail Upgrade Notification Emails Being Sent by Cybercriminals