Friday, December 28, 2012

Federal Reserve Banking@Service

If you receive  below really short email (They get frustrated) then do NOT click on the link. It is again an hacked Wordpress website!
Did you receive this is well, then send it to our temp email above.

Subject can be:

FedMail (R): Federal ACH Communication - End of Day - 12/27/12

Links is going here: /wp-admin /frb-achd.html / wp-admin /frb-achd.html

The last website has already an error :-)

Infection:HTML:RedirME-inf [Trj]

Talk about it here! (Our Forum link :-)

Please pay attention to the ACH Advice note Statement from the Federal Reserve Bank System by clicking this link. 

(Link removed)

Wednesday, December 26, 2012 Renewed eBill is Ready for review. From: AT$T Bill

If you receive below e-mail, then do NOT click on links . They are going to hacked Wordpress Website's:  wp-content /plugins/ zooofoaavex/ eBill_ready.html

Talk about it here!!!!

    Member: YOUR MAIL ADDRESS!    

Add to your address book to ensure delivery.

Your Account: Important Information
New eBill Should Be Complete

Account Number: **************2
Due Date: 12/28/2012
Amount Due: 2,517.24
Minimum Amount Due: 2,517.24

How do I view this bill?
1. Sign on to Citibank Online clicking this link.
2. Use the Payments Menu to find the bill mentioned in this message.
3. Select View Bill to overview your bill details. Select the icon to get your bill summary.

Please not try to reply to this message.

If you have any questions about your bill, please contact AT&T Bill directly. For online payment questions, please choose Bill Payment from the menu.
E-mail Security Zone
At the top of this message, you'll see an E-mail Security Zone. Its target is to help you examine that the e-mail was real sent by Citibank. If you have questions, please visit our help center. To learn more about fraud, click "Security" at the bottom of the screen.

To set up alerts sign on by clicking here and go to Account Profile.

I prefer not to have this email contain specific information from my statement. Please send me just the announcement that my statement is ready to view online.

View Your Account Pay Your Bill Contact Us

Privacy | Security

Email Preferences

If you going to contact us in writing concerning this email, please direct your correspondence to:

Citibank Customer Service
P. O. Box 5400
Sioux Wheels, NC 56530

Help / Contact Us
If you have questions about your account, please use our secure message center by signing on at click to open and browsing section "Contact Us" from the "Help / Contact Us" menu.
© 2012 Citibank, N.A.
All rights reserved.
Citi, Citibank and Citi with Arc Design are registered service marks of Citigroup Inc.


9/3M/233630/218/ZS/FE/66/4749/SYSTEGL /H8285790694394142/5908

Thursday, December 20, 2012

Uw rekening in het ABN AMRO is geblokkeerd ABN AMRO

If you receive below email, then do NOT click on links. Fake.
Going to:

http:// /index1.html

http:// /index1.html

Subject can be:

Uw rekening in het ABN AMRO is geblokkeerd
De rekening in het ING Bank is tijdelijk geblokkeerd wegens een verkeerd ingetoetste PAC code (PAC-code (Persoonlijke Authenticiteitcode))

Geachte klant van het Bank,
Uw rekening is geblokkeerd, omdat de geheime PAC- code meer dan 3 keer werd ingetoetst. Het kan gebeuren, dat men via een andere computer of mobiele telefoon de toegang probeert te verkrijgen tot uw computer.
Dat betekent, dat u geen geld meer op uw rekening kunt ontvangen en geen betalingen kunt uitvoeren.

Om nadere informatie betreffende de blokkering van de rekening te zien klikt u alstublieft hier.
Om uw rekening te deblokkeren, verzoeken wij u de autorisatie on-line uit te voeren.
Als u geen tijd heeft voor de online registratie, dan verzoeken wij u naar uw afdeling van het ING Bank te komen om uw rekening te deblokkeren.

Met vriendelijke groet,
Veiligheidsafdeling van het Bank

Tuesday, December 18, 2012

Fake Credit Report Center emails

Below email is going to (Now suspended account)
Never click on links without checking it first. /wp-content/ themes/trulyminimal /includes/framework/plugins/ score_for_free.html

Your credit score apparently increased!

- Open this link to see possible updates
- Click here to see latest updates to your credit score as of December 18th, 2012
Overview your score immediately!
Creating time: 29 seconds

Best Regards,
Visher Score Services

Thursday, December 13, 2012

Citibank - Service Fake mail

If you receive below email (That is trying to steal your information, but is a good example how to see that it is fake. Spelling mistakes. Bad graphics)

Links are going to: /components/com_ag_google_analytics2 /citialert-sign_in.html


See below example.

There are several other Subject emails send, like:

Account Warning
Account Operation Alert

It even looks like they (The spammer) is trying this out. Several emails are received that looks similar but where having errors in it :-)

Email Security Zone EMAIL SAFETY AREA   
   ATM/Debit card ending in: XXX4   
Warning Service

   Wire Complete

Ultimate Savings Account (USA) XXXXXXXXX1
Amount Withdrawn: $8,514.88
Date: 12/12/12

Log In to Abort Operation

    Wire Complete

Ultimate Savings Account (USA) XXXXXXXXX1
Amount Debited: $.45
Date: 12/12/12

Login to Cancel Detailed information

Please do not reply to this message. automative notification system cannot accept incoming mail.

Citibank, N.A. Member FDIC.
© 2012 Citigroup Inc. Citi with Arc Design and Citibank are registered service marks of Citigroup Inc. 

Saturday, December 8, 2012

AICPA Fake mail.

If you receive below email, then do NOT click on links. They are fake.
Going to hacked website : /components /com_ag_google_analytics2/ aicpataxcompl.html
Other links that are there : / components /com_ag_google_analytics2 / aicpataxcompl.html

Subject can be:

Revocation of your CPA license.
Expiration of your CPA license.

See example email below:

You're receiving this notification as a Certified Public Accountant and a member of AICPA.
Having trouble reading this email? Review it in your browser.
AICPA logo

Revocation of Accountant status due to tax return fakement

Respected AICPA participant,
We have received a note of your possible participation in income tax refund shady transactions  for one of your clients. According to AICPA Bylaw Article 740 your Certified Public Accountant license can be discontinued in case of the occurrence of submitting of a sham or fraudulent income tax return for your client or employer.
Please familiarize yourself with the notification below and provide your feedback to it within 21 work days. The refusal to submit explanation within this period will finish in terminatation of your CPA license.
Delation.doc (The fake link! (Removed))

The American Institute of Certified Public Accountants. Email:
Tel. 888.777.7077

Thursday, December 6, 2012

Fake payments to your PayPal account

There are now payments send to your PayPal account that are fake.
They send you an payment saying they ordered something from you and pay you an amount.
You need to accept it.
Do NOT do that. Report it to PayPal. Otherwise they will cancel the order, and you need to refund the money. So you lost the money.

Most of the time it is an there is no sender address. Or it is an fake.address.