Fake American Express email says your account requires attention
A new email phishing campaign spearheaded by online scammers has been making rounds globally. A fake email message claiming to be sent from American Express Card Services claims that “your account access requires immediate attention” and says “we advice all valid clients to follow our new system procedures for new on-line access.” The email message will reach the inboxes of American Express cardholders and non-cardholders alike.
Attached to the email is an HTML file that when opened directs the user to a fake American Express website. The fake website says that your identity needs to be confirmed to help you retrieve your user ID or reset your password. The website asks for your American Express user ID, password, 15-digit card number, 4-digit card ID, 3-digit card security, card expiry, zip code, social security number, date of birth, place of birth, elementary school’s name, security PIN, email address, and email password. At the bottom of the page, there are buttons to submit the information and continue. At the top of the page, there are links to the genuine American Express website to make the scam appear feasible.
The purpose of the fake American Express email message is to phish manually submitted information. The information itself is extremely sensitive and may be used unlawfully. Identity theft, extortion, and fraud are three big threats that come to mind when scammers obtain this brand of information.
We must advise readers to avoid typing and submitting their information because this email message and associated website are scams that are purely designed to phish your personal information. If you are a victim of this particular scam or other similar scams we advise you to immediately contact American Express from their website.
Here’s a transcript of the email message:
Your Online Access Requires Immediate Attention.
From American Express
To americanexp-securities2@systemax.comAmexClients-Form101.html (~207 B)
Important ConfirmationVerify Your Request
Your Account Number Staring: -37XX
Dear Esteemed Client,
We advice all valid clients to follow our new system procedures for new on-line access,
Kindly follow the given instructions in order to comply with our new sytem requirements
by passing back and forth secret information that only you and us know, you can feel even
more secure with your online banking experience. We recognize you and you recognize us.You are required to review your account information to reclude a recurrence of any future
attention with your card on-line access.To Proceed, Please find attached HTML Web Page.
See Attached for HTML Secure Web Page
Download and Save it to your Device Desktop
Go to Device Desktop to open the HTML Web Page
Continue by Filling your InformationThank you for being our Valid Cardmember. We look forward to serving you best.
Sincerely,
American Express Card Services
To some people, this email message may appear to be legitimate. After all, the email message is decorated with American Express colors and logos. Other people may immediately identify typos and errors in the email message and failed to be deceived.
In conclusion, please be advised of this email scam and other scams like it. American Express will never email their customers asking them to download an attachment, visit a website, and/or provide their personal information.
