Phishing with Amazon. Again.

Yet another ploy to get you to click a link.

The latest phishing scam to hit my inbox: a message supposedly from Amazon to tell me that my order has been cancelled. Two of the four links in the message go to a site other than Amazon where a PHP page is waiting to do something nasty to my computer.

Amazon Order Cancelled?
Pointing to a link should display its URL. This message is obviously not from Amazon.

Don’t click links in incoming emails, folks!

The Credit Card I Never Asked For

A scam from Netspend.

Today, I received a credit card in the mail. Trouble is, I never asked for the credit card. I have enough credit cards and I certainly don’t want another one.

NetspendIt was a Small Business prepaid MasterCard from Netspend, a company I had never heard of. The accompanying paperwork told me about the related fees for use but not much else.

I called the number on the card to ask what it was all about. I was prompted for a card number, my social security number — which I, of course, did not enter — and my date of birth — which I purposely entered incorrectly. I was then prompted to agree with terms of service by pressing 1. There was no person. Just a machine taking down whatever I entered.

I tried pressing 0 and various keys. The system eventually hung up on me.

I tried calling another number on the Netspend website. It threw me into the same automated queue.

I tried again, this time using the option that the card had been lost or stolen. A prompt warned me that that option was only for lost or stolen cards. I stuck with it. When prompted for my social security number again, I entered all zeros.

Eventually I got a real person on the phone. I asked her what the card was all about and she told me I’d accepted a mail offer. I told her I hadn’t and that I wouldn’t have. I told her I didn’t want the card and that I wanted it all record of it removed from my name, including from my credit report. She apologized for the “inconvenience.” I told her that it wasn’t an inconvenience. It was an invasion of my privacy. I told her that if I saw the card on my credit report when I checked it next month, Netspend would hear from my lawyer.

And then I hung up on her before she could do any more explaining or apologizing.

Is this a scam? Sure seems like it to me. Hand out a credit card, use a toll-free number to gather social security number and date of birth information. Even if it is legit, it’s an unwanted hit to a person’s credit report, possibly damaging to a credit score. And what if someone had intercepted it on its way to my mailbox? Would I be on the hook for someone else’s transactions?

Is this an indication that I’m an identity theft victim? Should I be calling the credit services now? Are there other cards with my name on them in the hands of other people?

Or am I just being paranoid?

These days, you never know — until it’s too late.

Unlikely Tour Reservation Scam

How many times have I gotten these? Too many to count.

Got this in my email inbox for Flying M Air yesterday.

Reservation Email
This simple message has plenty of flags to indicate it’s a scam.

Looks good, huh? Three days worth of helicopter tours for four people. Cha-ching!

It’s fake, of course. Want to know how I can tell? Here are the flags:

  • “Vacation in your state.” Which state is that? Believe it or not, I’m still getting requests from people who think I still operate in Arizona. (I left the state in 2013.) The vagueness of this screams “boilerplate” or “template.” It also makes me wonder how many other tour operators got the exact same message yesterday.
  • “Reservation for 2 couples.” My aircraft only holds three passengers. Martin obviously hasn’t done his homework before dangling his credit card.
  • “Confirm availability and total cost.” How could I possibly calculate a “total cost” if I have no idea what he wants?
  • No phone number. The sender hasn’t provided any method other than an email address to contact him. Why not?
  • Sender Gmail account. Yes, I know that real people have Gmail accounts, too. But do they usually spell their last names wrong in the account address?

Yes, this is a scam. I actually played along with one of these years ago to see what he wanted. You can read the details here. How interesting to see that it’s still being played. I guess there are enough suckers out there to make trying it worthwhile.

Don’t get scammed. If something sounds too good to be true, it probably is.

Phishing Scam: Mailbox is Almost Full

Here’s a new twist on an old scam.

Got this email today:

Phishing Email

If you can’t read it, it says:

Your mailbox is almost full.

Dear [redacted]@marialanger.com,

3840MB 4096MB
Current size Maximum size

Please reduce your mailbox size. Delete any items you don’t need from your mailbox and empty your Deleted Items folder. Click here to do reduce size automatically.

Of course, the “click here” link takes you to a PHP page on a site that has nothing to do with my email server, my domain name, my ISP, the sender’s domain name, or even Google, which, for some reason appears in the footer with yet another link to the same page.

Come on, folks! Don’t be fooled into clicking links in email messages, especially if they’re from someone you don’t know. This is how hackers get into your email and social networking accounts or even your bank accounts. This is how they send email messages to your friends, trying to lure them into the same phishing scams.

Spread the word, educate the folks who don’t know better.

About My Instagram Profile

It doesn’t exist.

Instagram LogoScammers/Spammers will say and do anything. Here’s proof.

I got this email today via someone (or somebot) on my website’s contact form:

Hi there, I have just been to your Instagram profile of aneclecticmind.com and I absolutely enjoy your shots! I think your Instagram profile should have a lot more followers and likes! Did you know that you can in fact buy followers and likes on websites like [redacted url] ?

Anyway, I just wanted to let you know that you are performing a terrific job! Looking forward for more of your pictures!

Have a great day!

I don’t have an Instagram profile — or at least I don’t think I do. If I did, it would be in my name and not my website’s URL. And I know for a fact that I haven’t posted any photos on Instagram, at least not in the past few years. And why the hell would I want to buy followers or likes?

Just another ploy to get me to click a link for a service (or a scam) I have no interest in.