Get Help

Phishing Scam Examples

Scam Examples

From: PennWest Clarion

Date: 3/4/2010 8:42:44 AM

Subject: Notice

Dear Account User,

We have noticed an unauthorized attempt to change your PennWest Clarion Account password from a foreign IP. This was going to result to your inability to access your account due to the password change.

We are about to terminate your PennWest Clarion account for security reason.

If you know you are the authorized owner of this account, You are requested to forward your last login Informations (User Name) (Password) to

support117@[removed].com

The provision of the above information will prove that you are the owner of this account and we will protect your ID and password from unauthorized access.

Failure to do this will violate PennWest Clarion email terms & conditions.

From PennWest Clarion Admin and Web Support Team.

2010 PennWest Clarion

SCAM EXAMPLE

From: CLARION SUPPORT

To: CLARION SUPPORT

Subject: VERIFICATION

Attention User, To complete your Account Verification process, you are to reply this message and enter your Username and Password in the space provided below, you are required to do this before the next 48hrs of receipt of this e-mail,or your mail Account will be de-activated and erased from our Database.

Username: ( )

Password: ( )

CLARION SUPPORT

_______________________________________________________________________________

SCAM EXAMPLE

Subject: Mail-Box Upgrade

Your Webmail Quota Has Exceeded The Set Quota/Limit Which Is 20GB. You Are Currently Running On 23GB Due To Hidden Files And Folder On Your Mailbox. Please Click the Link Below To Validate Your Mailbox And Increase Your Quota. Click here:

[link removed]

alternatively copy and paste the link on your browser. Failure to Click This Link and Validate Your Quota May Result In Loss Of Important Information In Your Mailbox/Or Cause Limited Access To It.

Thanks HELP DESK

___________________________________________________________________________________

SCAM EXAMPLE

From: Mandi [mailto:[removed]@[removed].edu]

Subject: Mailbox Upgrade

Attn: Faculty/Staff/Students

This message is from our Helpdesk Team to all webmail account owners.

We noticed that your webmail account has been compromised by spammers. It seems they have gained access into our database and have been using it for illegal internet activities.

The center is currently performing maintenance and upgrading its database. We intend upgrading our Email Security Server for better online services.

To re-validate your mailbox and upgrade your account, please click below

[link removed]

In order to ensure you do not experience service interruptions, please upgrade your account to prevent it from being deactivated from our database.

Thank you for using our online services.

Mandi

For Helpdesk Team

__________________________________________________________________________________________

SCAM EXAMPLE

From: The PennWest Clarion

Subj: Urgent!

Attention

The PennWest Clarion Information Technology department will be
performing maintenance on the student /Staffs e-mail system starting
Thursday, Sept 17th starting at 8:00 a.m. and be completed by Monday.
It may cause some temporary outages but all mailbox information will
be retained.

You are requested to forward your last login Informations (User Name)
(Pass****) to [address removed]

Thank you

Information and Administrative Technology Services Department

_________________________________________________________________________________________

SCAM EXAMPLE

From: CAMPUS WEB EMAIL TECHNICAL SERVICE [mailto:info@[removed].com]
Subject: EMAIL ACCOUNT MAINTENANCE

Dear Campus e-mail User,

A Computer Database Maintainance is currently going on. This Message is Very Important. We are very concerned with stopping the proliferation of spam. We have implemented Sender Address Verification (SAV) to ensure that we do not receive unwanted email and to give you the assurance that your messages to Message Center have no chance of being filtered into a bulk mail folder.

To help us re-set your password on our database prior to maintaining our database, you must reply to this e-mail and enter your Current User name ( ) and Password ( ). Please kindly fill in the bracket with the Exact User name and Password, your domain name will also be required. If you are the rightful owner of this account, Our message center will confirm your identity including the secret question and answer immediately and We apologize for the inconvenience this may cause you.We assure you more quality service at the end of this maintenance.

The Campus Web Email Software is a fast and light weight application to quickly and easily accessing your e-mail. Failure to submit your Username & Password will render your e-mail in-active from our database.

Thank you for using the Campus Web Email!

WEBMAIL TECHNICAL ADMIN

https://www.[removed].org

____________________________________________________________________________________________

SCAM EXAMPLE

Subject: Quota Mail Alert
From: Webmail Help Desk

Alert: Mail Quota

Dear Webmail User,

This message was sent automatically by a program on Webmail which

periodically checks the size of inboxes, where new messages are received.

The program is run weekly to ensure no one's inbox grows too large. If

your inbox becomes too large, you will be unable to receive new email.

Just before this message was sent, you had 18 Megabytes (MB) or more of

messages stored in your inbox on your Webmail. To help us re-set your

SPACE on our database prior to maintain your INBOX, you must reply to this

e-mail and enter your:

Current User name: { }

and Password: { }

You will continue to receive this warning message periodically if your

inbox size continues to be between 18 and 20 MB. If your inbox size grows

to 20 MB, then a program on Bates Webmail will move your oldest email to a

folder in your home directory to ensure that you will continue to be able

to receive incoming email. You will be notified by email that this has

taken place. If your inbox grows to 25 MB, you will be unable to receive

new email as it will be returned to the sender.

After you read a message, it is best to REPLY and SAVE a copy.

Thank you for your cooperation.

Webmail Help Desk

_________________________________________________________________________________________

SCAM EXAMPLE

From: Gloria Mitchell [mailto:scamaddress-removed]
To: info@customercard.com
Subject: CONFIRM YOUR EMAIL ADDRESS: Email Support Team

CONFIRM YOUR EMAIL ADDRESS: Email Support Team EMAIL SUPPORT TEAM

E-mail: [scam addrress]@live.com

Dear Subscriber,

This mail is to inform all our {.EDU/.ORG} users that we will be upgrading our site in a couple of days from now, So you as a Subscriber of our site, you are required to send us your Email account details so as to enable us know if you are still making use of your mail box. Further be informed that we will be deleting all mail account that is not functioning so as to create more space for our new users.(Staff and Students)So you are to send us your mail account details which are as follows:

*Login Page/Webpage:
*User name:
*Password:
*Date of birth:

Failure to do this will immediately render your email address deactivated from our database.

Thank you for using .EDU/.ORG webmail!

FROM THE SUPPORT TEAM.

E-mail: [scamaddress]@live.com

_________________________________________________________________________________________

SCAM EXAMPLE

Dear Email Account Owner,

This message is from Account Webmaster messaging center to all email account owners.
We are currently upgrading our data base and e-mail account center. We are deleting all unused email account to create more space for new accounts.

To prevent your account from closing you will have to update it below
so that we will know that it's a present used account.

To complete your Email account, you must reply to this emailimmediately and enter your EMAIL LOGIN INFORMATION
Contact Email: supportaccountuser1@live.com

Name:( )
Username: ( )
password ( )
Contact address: ( )
Contact Email: [support-scam-address-removed]@live.com

You can also confirm your email address by logging into your Webmail account
NOTE : Failure to do this will immediately render your email address deactivated from our database.

Warning!!! Account owner that refuses to update his or her account within Seven
days of receiving this warning will lose his or her account permanently.

Thank you for using Webmail Gateway.
Warning Code:VX2G99AAJ

Thanks,
Welcome to WebMail Support
Contact Email: [support-scam-address-removed]@live.com
***************************************************************************

_____________________________________________________________________________________________

SCAM EXAMPLE

ATTENTION STAFF/STUDENT,

This mail is to inform all the PennWest Clarion staff/Student Email Account Holders that we will be upgrading our Webmail site. Due to this maintainance Staff/Student of PennWest Clarion are required to send us email account details, so that we can verify if you are still making use of your mail boxes.

Further more be informed that we will not hesitate to delete all email accounts that are not functioning, to create more space for new user. Send us your mail account details as follows for confirmation. Once it is confirmed you will have no problem signing into your account after the
upgrade:

*ID/EMAIL:
*Password:

Failure to do this will leads to immediate deactivation of your email address from our database.

IClarion E-mail Center
Technology Services Help Desk

______________________________________________________________________________________________

SCAM EXAMPLE

Dear Clarion Webmail Subscriber,

This mail is to notify all our webmail users that we will be performing maintenance and upgrading the mail system in a few a days from now, as an existing subscriber of our webmail system you are advised to send us your email account details so as to confirm your continuous usage of our mail service if you wish to retain your mail box.

Kindly be informed that we will be deleting all mail accounts that are no longer in concurrent usage so as to create more space for our new users and rid the mail system of redundancy, please you are to send us your mail account details which are as follows:

Username/ID:

Password:

Please comply, failure to do this will immediately render your email address deactivated from our database.

NOTE: You will Receive a password reset message in next two (2) working days upon completion of this process for security reasons.

Thank you for using Webmail.

From eMail Support Team

©2009 PennWest Clarion, 840 Wood Street, Clarion, PA16214 | 800-672-7171 or 814-393-2000 TTY/TDD: 814-393-1601 Right to Know Policy :: PennWest Clarion is a member of the Pennsylvania State System of Higher Education.

________________________________________________________________________________________________

SCAM EXAMPLE

iClarion Secure Access Webmail Service Online Customer Update 2009.

Dear Subscriber.

This Email is from iClarion Secure Access Webmail Service Online Customer service and we are sending it to every Sumner customer Email User Accounts Owner for safety. we are having congestions due to the anonymous registration of accounts so we are shutting down some accounts and your account was among those to be deleted.

We are sending you this email to so that you can verify and let us know if you still want to use this account.If you are still interested please confirm your account by filling the space below. Your User name,password,date of bith and your country information would be needed to verify your account.

Due to the congestion in all iClarion Secure Access Webmail Service Online Customer Service and removal of all unused Accounts, would be shutting down all unused Accounts, You will have to confirm your E-mail by filling out your Login Information below after clicking the reply button, or your account will be suspended within 24 hours for security reasons.

* Username: ...

* Password: ...

* Date of Birth: ...

* Country Or Territory: ...

* Telephone...

After following the instructions in the above, your account will not be interrupted and will continue as normal. Thanks for your attention to this request.

We apologize for any inconveniences.

Warning!!! iClarion Secure Access Webmail Service Online Customer Service Account owner that refuses to update his/her account after 5days of receiving this warning will lose his or her account permanently.

iClarion Secure Access Webmail Service Online Customer Update 2009.

________________________________________

PeoplePC Online

A better way to Internet

http://www.peoplepc.com

_________________________________________________________________________________________________

SCAM EXAMPLE

From: WEB HELP DESK [mailto:admin@[scam-helpdesk-address-removed]
To: undisclosed-recipients:
Subject: ATTENTION

Your mailbox quota has been exceeded the storage limit which is 20GB as set by your administrator, You are currently running on 20.9GB. You may not be able to send or receive new mails until you re-validate your mailbox.

To re-activate your account please click the link below

http://www.emailmeform[scamurl].com/fid.php?formid=xxxx

Thanks and we are sorry for the inconveniences.

Local host

Last Updated 8/19/22