A new scam - Amazon
#1
I've not seen or heard of this one before. Be very careful
Today I got an email about my recent order. I haven't made one.
My first thought was that someone had hacked Amazon and made an order on my account, the $120 item to be delivered to an Ontario address. These types of email don't usually allow a reply, but this one did and that made me more suspicious, especially when I saw it wasn't Amazon in the address line.
Of course there was a 'log on' here "if you didn't make the order and want to cancel" and by hovering I could see that wasn't Amazon either.
I checked other genuine email acknowledgements and they only ever say if you want to amend, never "if you didn't make the order".
I also noticed it said "if you didn't made the order" when it should have been make. Genuine ones also say Hello my name whereas this one said Hello my email address.
I signed onto my real account (not via the link of course) and there is no order. It's also not an item shown that I've looked at.
So, looking in more detail at the email I see a delivery postcode not recognised in Canada and some other poor grammar as if someone used an online translator. The address isn't quite complete either. David Young, Ontario C2D 2V6, Canada
I have forwarded it to Amazon's fraud department.
It's obviously designed to make you click on the sign in link to either let in a virus or maybe it gives them your real sign in details for the amazon account.
But minor grammar errors aside it looks totally genuine until you read every word carefully.
Today I got an email about my recent order. I haven't made one.
My first thought was that someone had hacked Amazon and made an order on my account, the $120 item to be delivered to an Ontario address. These types of email don't usually allow a reply, but this one did and that made me more suspicious, especially when I saw it wasn't Amazon in the address line.
Of course there was a 'log on' here "if you didn't make the order and want to cancel" and by hovering I could see that wasn't Amazon either.
I checked other genuine email acknowledgements and they only ever say if you want to amend, never "if you didn't make the order".
I also noticed it said "if you didn't made the order" when it should have been make. Genuine ones also say Hello my name whereas this one said Hello my email address.
I signed onto my real account (not via the link of course) and there is no order. It's also not an item shown that I've looked at.
So, looking in more detail at the email I see a delivery postcode not recognised in Canada and some other poor grammar as if someone used an online translator. The address isn't quite complete either. David Young, Ontario C2D 2V6, Canada
I have forwarded it to Amazon's fraud department.
It's obviously designed to make you click on the sign in link to either let in a virus or maybe it gives them your real sign in details for the amazon account.

But minor grammar errors aside it looks totally genuine until you read every word carefully.
Last edited by BristolUK; Jan 17th 2019 at 2:33 am.
#2
BE Forum Addict







Joined: Jul 2015
Posts: 2,812
From: Huntsville, AL











As an IT admin, I see these almost on a daily basis (not seen the Amazon one - yet).
I regularly send out email reminders to my users. Not TOO regular as they then tend to get ignored.
Yesterday, we had an email sent to at least a dozen users (including me) with a link to a PDF on Dropbox. I just dumped mine but had at least one user click it and enter their credentials. The sender was known to the user.
Another recent one is the iTunes gift card scam. A user gets an email from the 'boss' that they need to get gift cards for clients. Personalized with first names. One user went out and bought $2,000 of iTunes gift cards before the penny finally dropped when they texted the codes instead of replying to the (bogus) email.
I regularly send out email reminders to my users. Not TOO regular as they then tend to get ignored.
Yesterday, we had an email sent to at least a dozen users (including me) with a link to a PDF on Dropbox. I just dumped mine but had at least one user click it and enter their credentials. The sender was known to the user.
Another recent one is the iTunes gift card scam. A user gets an email from the 'boss' that they need to get gift cards for clients. Personalized with first names. One user went out and bought $2,000 of iTunes gift cards before the penny finally dropped when they texted the codes instead of replying to the (bogus) email.
#3
I've been getting the Amazon ones for ages, and Walmart, Paypal, and a few others. Because the address lines aren't the real ones they go directly to my junk mail folder automatically along with the Viagra, dating ads, etc. You just need to tighten up your security filter a bit.
#4
I've been getting the Amazon ones for ages, and Walmart, Paypal, and a few others. Because the address lines aren't the real ones they go directly to my junk mail folder automatically along with the Viagra, dating ads, etc. You just need to tighten up your security filter a bit.

It has the appearance of being a genuine sender. How does one set a filter so it identifies an email where the address line doesn't match what it claims to be?
I'm not sure Thunderbird deals with this very well.
Sometimes it suggests something is junk when it's not. On the rare occasion I get something that is junk, I mark it as such but it doesn't appear to do any good thereafter. Three months later I'll get something that I can tell immediately is much the same thing but there's a minor difference in the sending email so it's not stopped or diverted.
The old Outlook (and AOL) I remember was better at this.
#5
Banned










Joined: Apr 2009
Posts: 19,878
From: SW Ontario











I've had a few of those Amazon ones - and from Walmart.
I never click on anything suspect without checking the headers of the email.
I never click on anything suspect without checking the headers of the email.
Last edited by Siouxie; Jan 17th 2019 at 5:43 am.
#6
Here's the mailer's address from a fake BMO transfer notice I just got: Patrick Johnson {[email protected]) .
I marked it as junk and now anything resembling that should automatically go straight to the junk folder. When something legitimate is in my junk folder I recognise it and can transfer it to the inbox if I wish.
I marked it as junk and now anything resembling that should automatically go straight to the junk folder. When something legitimate is in my junk folder I recognise it and can transfer it to the inbox if I wish.
#7
Here's the mailer's address from a fake BMO transfer notice I just got: Patrick Johnson {[email protected]) .
I marked it as junk and now anything resembling that should automatically go straight to the junk folder. When something legitimate is in my junk folder I recognise it and can transfer it to the inbox if I wish.
I marked it as junk and now anything resembling that should automatically go straight to the junk folder. When something legitimate is in my junk folder I recognise it and can transfer it to the inbox if I wish.
Perhaps getting so little junk means it doesn't happen enough for it to learn.

#9
Thunderbird is virtually the same as Outlook was, just a couple of shortcomings. If I could get the older Outlook I'd change back in a heartbeat but it doesn't seem possible. Or rather it looks possible but very expensive or not too expensive but then it fails because what's offered isn't genuine.
#10
I used to have Outlook within MSOffice and loved it. Once W10 came out there were compatibility issues with the older versions and I really don't like the look of new Outlook. I keep gmail in reserve but I don't like the look of that either.
Thunderbird is virtually the same as Outlook was, just a couple of shortcomings. If I could get the older Outlook I'd change back in a heartbeat but it doesn't seem possible. Or rather it looks possible but very expensive or not too expensive but then it fails because what's offered isn't genuine.
Thunderbird is virtually the same as Outlook was, just a couple of shortcomings. If I could get the older Outlook I'd change back in a heartbeat but it doesn't seem possible. Or rather it looks possible but very expensive or not too expensive but then it fails because what's offered isn't genuine.
I have a regular gmail account for personal stuff (had it since 2008) and a business one for my job that I've had for 2010. Few if any spam emails. A lot of them get caught by gmail filters.
#11

#12
Banned










Joined: Apr 2009
Posts: 19,878
From: SW Ontario











I used to have Outlook within MSOffice and loved it. Once W10 came out there were compatibility issues with the older versions and I really don't like the look of new Outlook. I keep gmail in reserve but I don't like the look of that either.
Thunderbird is virtually the same as Outlook was, just a couple of shortcomings. If I could get the older Outlook I'd change back in a heartbeat but it doesn't seem possible. Or rather it looks possible but very expensive or not too expensive but then it fails because what's offered isn't genuine.
Thunderbird is virtually the same as Outlook was, just a couple of shortcomings. If I could get the older Outlook I'd change back in a heartbeat but it doesn't seem possible. Or rather it looks possible but very expensive or not too expensive but then it fails because what's offered isn't genuine.

Link Removed... it doesn't give you the old version at all... despite it being an official Microsoft site!
Last edited by Siouxie; Jan 18th 2019 at 4:44 am.
#13

I looked into it so many times before, it seems MS are just not selling anything that still works with old Outlook. Amazon and other places are selling licence numbers for older MS Office that would include the older Outlook but they're obviously not legit as people discover when contacting MS for assistance.
#14
gmail spam filters can work a little too well.
i often send reminder emails from my personal gmail account to my work email account ( non gmail) as reminders for when I get into the office
my work email blocks them as spam and sends a blocked notification back to my gmail
Which gmail then blocks as spam!!
i often send reminder emails from my personal gmail account to my work email account ( non gmail) as reminders for when I get into the office
my work email blocks them as spam and sends a blocked notification back to my gmail
Which gmail then blocks as spam!!
#15
I had a few iTunes ones saying a game been purchased if I did not I should click on suspicious link



