A new phishing campaign is impersonating Starbucks and offering a free Yeti Rambler Tumbler as a reward for completing a short survey. The email claims you have been selected as a winner, then redirects victims through multiple fraudulent survey and prize pages before presenting a fake checkout form that collects personal information and credit card details. None of these pages are associated with Starbucks.
The scam begins with an email sent from an address such as alert-0978@x0w8a.mail.store.ass0028.eritrea.uk.com. This sender address has no connection to Starbucks and is part of a network of randomly generated subdomains used by large scale phishing operations. The email uses urgency, reward language, and brand impersonation to lure users into clicking a survey link.
The Scam Email
The message states that you have “won” a Starbucks Yeti Rambler Tumbler and must claim it immediately before the offer expires. The email includes:
- A congratulatory message
- A claim that you are a selected Starbucks member
The goal is to push victims into clicking the included buttons without questioning the legitimacy of the promotion.
The Fake Starbucks Survey Page
The initial link leads to a fake Starbucks themed survey hosted on a fraudulent domain. The page displays the Starbucks logo, a date stamp, and multiple questions unrelated to any real Starbucks promotion. Completing the survey does not verify eligibility. It simply routes victims deeper into the scam funnel.

The Fake Yeti Rambler Tumbler Reward Page
After completing the fake survey, victims are shown a page claiming they are eligible to receive a Starbucks branded Yeti Rambler Tumbler. The page emphasizes scarcity and urgency with countdown timers and phrases such as “limited time” and “expires today.” These tactics are commonly used in reward scam networks to pressure users into continuing the process.

The Phishing Checkout Page
The final stage of the scam redirects victims to a payment page on greatdealstoshare.com. This domain is recently registered and has no ties to Starbucks or Yeti. The page displays a fake product listing for a “Yeti 42oz Rambler” priced at $11.52. It requests full personal and billing information, including:
- Full name
This information is harvested by scammers for fraudulent charges, identity theft, and resale on criminal marketplaces.

The Domains Behind the Scam
The scam uses multiple domains to avoid detection and prolong the lifespan of the campaign. Two key domains involved are:
- maximumwaxwin.shop which hosts the fake Starbucks survey
- greatdealstoshare.com which hosts the credit card phishing checkout
WHOIS records show that these domains were recently registered, use privacy shielding services, and are hosted through companies frequently associated with short lived phishing operations. None of the domains or hosting providers have any legitimate relationship with Starbucks or Yeti.
Why This Scam Works
Scammers rely on the popularity of Starbucks and Yeti products to increase the likelihood that victims will engage. The scam uses several psychological triggers, including:
- Brand familiarity
These elements create a false perception of legitimacy while concealing the true criminal intent.
Red Flags in This Scam
- The sender email is not associated with Starbucks
What To Do If You Receive This Email
- Do not click any links
Fake brand reward scams continue to spread across email and social media as scammers attempt to harvest sensitive information. Always verify promotions directly on official websites instead of clicking links in unsolicited emails. For more scam alerts, visit the Botcrawl Scams section.
- Booking.com Scam Uses Real Reservation Data to Steal Guest Payments
- Fake YouTube Copyright Scam Impersonates City of Grand Forks
- Mothers and Kids Support Forum Email Scam Promises Fake $2 Million Donation
- OneDrive Email Scam: How It Works, Warning Signs, and How to Stay Protected
- Women and Children Support Foundation Email Scam Promises Fake $1 Million Donation
WordPress Bot Protection
Bot Blocker for WordPress
Monitor bot traffic, review live activity, and control AI crawlers, scrapers, scanners, spam bots, and fake trusted bots from one clean WordPress dashboard.
Sean Doyle
Sean is a tech author and security researcher with more than 20 years of experience in cybersecurity, privacy, malware analysis, analytics, and online marketing. He focuses on clear reporting, deep technical investigation, and practical guidance that helps readers stay safe in a fast-moving digital landscape. His work continues to appear in respected publications, including articles written for Private Internet Access. Through Botcrawl and his ongoing cybersecurity coverage, Sean provides trusted insights on data breaches, malware threats, and online safety for individuals and businesses worldwide.




