A new spam campaign is circulating that claims you have a $1000 Cash App reward waiting to be claimed. The message arrives from a sender disguised as “CashApp” but uses a long, suspicious address such as xk7jmf059y@xtagjtao0i.sus.mkl.barcelona.us.com. The email directs recipients to a fraudulent landing page that impersonates a Cash App promotion. This page then attempts to harvest sensitive information including names, dates of birth, phone numbers, and mailing addresses.
This scam is not affiliated with Cash App. It is a data harvesting operation that uses fake rewards to trick users into surrendering information that can be sold or misused for fraud.
The Scam Email
The email claims you have:
- A $1000 balance waiting in your Cash App
- A required “validation” step before the funds appear
The message includes fake transaction details, a fake memo, a fake signature, and a fake unsubscribe address. These elements are designed to mimic legitimate notification formats, but they do not verify anything.
The Phishing Website
Clicking the link in the email leads to a fake Cash App reward page. The page uses Cash App’s green color scheme and a promotional layout that says “$1000 TO YOUR CASH APP.” On the right side, it presents a long form requesting sensitive information. The background shows beach imagery and “vacation reward” styling that is common in sweepstakes scams.
The page asks for:
- First and last name
- Email address
- Date of birth
- Mobile number
- Street address
- ZIP code
Genuine Cash App promotions never request this much personal information. This form is designed to build a complete personal profile that can be used for unwanted marketing, account takeover attempts, and identity fraud.
The Domain Behind the Scam
The fraudulent page is hosted on yousweeps.com, a domain commonly associated with sweepstakes funnels. The domain uses NameCheap registration and Cloudflare DNS, a setup frequently used by scam networks to obscure the hosting origin and avoid simple takedowns.
These kinds of domains typically redirect victims through multiple “offers,” each one requesting additional details, credit card information, or subscription enrollments. None of these actions result in receiving any money.
Why This Scam Works
Scammers imitate Cash App promotions because they generate high engagement. By using Cash App branding, bright green Call to Action buttons, fake “secure connection” seals, and urgency prompts like “Limited supply,” they create a false sense of legitimacy and encourage quick responses.
Red Flags in This Scam
- The sender address is not from Cash App
- Random multi-level subdomains
- Promise of an unsolicited $1000 reward
- Mandatory identity verification for a prize
- Requests for complete personal information
- The domain is unrelated to Cash App
- High-pressure urgency tactics
What To Do If You Receive This Email
- Do not click the link
- Do not fill out any forms
- Delete the message immediately
- Block the sender
- If you already submitted information, monitor your accounts for unusual activity
Cash reward scams remain one of the most common phishing tactics targeting Cash App users. Treat any unsolicited prize announcement with caution. For more information on similar scams, visit the BotCrawl Scams section.
