Home / Recent Phishing Scams

Recent Phishing Scams

Remember, ASU will never send emails asking for your password or login information.

Beware of emails that ask your for personal or login information. Spammers and phishers do not typically target particular people but instead send generic “customer” messages to a large number of individuals with the goal of compromising a few accounts, access information that is personal, professional, or financial. If you have received a message that matches or looks similar to one listed here, please take caution.  We have denoted the latest phishing emails with a *NEW* marker.  These will be marked with the date they were originally reported to the ISO.


If you are in an Exchange (Outlook) environment, add the sender to your block list.  If you are in a Gmail environment, click the arrow next to reply and click 'Report Phishing'.  If you received a suspicious email that does not look like anything on this page, please send the headers to InfoSec@asu.edu

Table of Contents

Phishing emails geared specifically toward the ASU community (Targeted Phishing)


Cleverly disguised phishing emails with no mention of ASU 




Aimed at the ASU Community


Account Expiration Alert

From: Systems Mail [a compromised account from another university]
Sent: Friday, October 30, 2015 3:02 PM
To: Me
Subject: Account Expiration Alert

Good Afternoon,

The password associated with this account will expire shortly. To continue using this account without any changes, click on the "Keep My Account" button below:

Keep My Account

Please Note: This request is compulsory as if you do not keep your account, it may lead to service suspension.

We apologize for any inconveniences this may have caused.


Account Upgrade


To: Undisclosed Recipients
From: Help Desk
We have upgraded to 500MB Email Space, login into your account to confirm if your account is still active. Click the link below to login into your account for confirmation and upgrade. 
(Google Doc page with a phishing page, please see below)
We have send you this upgrade notification times without number, and you have refuse to upgrade your user, note that failure to upgrade  this time, would result to termination of your user account. Thank you
Web Support.







Account User Quarantine Exercise Notification


From: IT Services
To: undisclosed-recipients:;
Subject: Account User Quarantine Exercise Notification!
Dear Student/Staff,
We are having a server overload. It appears that either a virus or a spammer has infiltrated our network. Immediately, we will be shutting down our main server and introduce our backup/emergency server, this way the virus/spammer would cease operation and we will detect and destroy. In order to update your files and setting upon backup introduction, do provide details of your account below:
Account Username:
Account Password:
Date of birth:
After this operation, account credentials and properties will be restored and will remain thesame. Thereafter, you will be sent an alert to change account credentials.
Thank You.
Help Desk.

Account Validation

From: Helpdesk

Reply-To: <redacted>

To: <undisclosed-recipients:;>

Subject: Account Validation


 Dear User,

The school's webmail system database is undergoing a monthly system upgrade. You are hereby required to reply to this email effective within 72 hours your  Password.


1). All submissions not in the above format will not be attended to and will be  deleted from the schools webmail database.

2). Submissions later than 72 hours will also not be attended to.

3). The following measure is to cross reference passwords to valid student  emails in the ASU database.

4). Do not respond to any other email(s) requesting your password.

5). ASU helpdesk already has your Username in our database.





ACH file ID, done with errors


Alert: New Message Received

From: Blackboard Learn
Sent: Monday, March 24, 2014 2:27 PM
Subject: Alert: New Message Received
Secure Mail
<link removed>

Arizona State University Internet Update


From: Arizona State University Internet
Sent: Thursday, March 22, 2012 10:43 AM
Subject: Arizona State University Internet Update
Welcome to The Arizona State University Internet Technical Assistance Team!!!
Arizona State University Internet Account users,
This email is from Arizona State University Internet webmail Customer service and we are sending it to every User Accounts Owner for safety,We are having congestions due to the fraudulent e-mails to accounts owners so we are shutting down some accounts and your account was among those to be detected. We are sending you this email so that you can verify and let us know if you still want to use this account.
If you are still interested please confirm your account by weblink below.
Thank you for your understanding.
Copyright © 2010 Arizona Board of Regents
What the fake form looks like:


Arizona State University -  Update

 This is a fresh alert for a fairly new type of phishing technique. Emails receved from ASU accounts with the subject of "ARIZONA STATE UNIVERSITY - UPDATE" should be approached with extreme suspicion.  The links within the email go to pages with the following syntax: http://www.public.asu.edu/~ASURITE/weblogin.asu.edu/login.htm

This is a compromised page that either forwards you to a fake ASU login page, or another page to enter credentials.  If you have clicked any of these links and entered credentials, please update your password immediately at asu.edu/changepassword.



ASU DESK / Asu Helpdesk / Mailbox is full / Helpdesk

Sent: Monday, March 17, 2014 7:29 PM
Subject: Mailbox is full
Subject: ASU DESK / Asu Helpdesk / Mailbox is full / Helpdesk

Mailbox is full, 00.1 GB, Please reduce your mailbox size. Delete any items you don't need from your mailbox and expand your email quota (size) with the below web links:

HERE<link removed>

Thank you for your understanding.

©2014 Helpdesk


Asu Helpdesk/Asu System Administrator/Asu Admin

From: <a compromised @asu.edu account>
Sent: Tuesday, February 17, 2015 8:33 AM
Subject: Asu Helpdesk/Asu System Administrator/Asu Admin


Dear user,

We currently upgraded to 4GB space Click here on Faculty & Staff email upgrade


Asu Helpdesk

From: Maria Martinez
Sent: Tuesday, August 12, 2014 4:54 PM
Subject: Asu Helpdesk


Your webmail account need to be upgraded click on the below link and follow the instructions to upgrade space for more storage.

Click here <link removed>


Support Webmaster

Copyright (C) 2014 System Administrator

ASU Help Desk Scam

Attention: Staff/Student,

This message is from the Arizona State University Help Desk. We are currently carrying out scheduled maintenance, upgrade of our webmail service and we are changing our mailhost server as a result your original password will be reset. We are sorry for any inconvenience caused.
To update your account,Please Click the Link Below and provide the information requested.
http:// www .123contactform.com/contact-form-helpdeskupdate2-145029.html
If you click the link and it appears to be broken, please copy and paste the URL into a new browser window. Failure to do this will immediately render your Email Address deactivated from the University Email database.
Thank you for being a part of the upgrading exercise.
Help Desk,

Information Technology.
© 2011 All rights reserved.



Attention! (Violation security breach)

The link to "Click Here" moves to a site known for credential harvesting.  The site has been blocked at ASU, but should you check your email from off campus and click the link, remember to check the page!



Attention: asu.edu user


From: Arizona State University
Subject: Attention: asu.edu user
Attention:  asu.edu user,
We are currently engaged in account maintenance service.
As a subscriber, you are required to confirm your continued membership.
Failure to confirm your continued membership will lead to service
*Click here to Login and confirm in one simple step.
This is to improve our service quality. We are sorry for inconveniences
NOTE: You are required to *update your account*
Thank you.
Webmaster Unit *[Arizona State University]*


Attention Students and Staff!!!!!!




From: Blackboard
Sent: Monday, June 09, 2014 10:48 AM
Subject: Blackboard

Blackboard Learn™

Your School Courses System Update.

You have received a new update from Blackboard Learn system about your new course form-875.

Please view this update and fill the process form Urgent.

View Update

Blackboard Learn

Blackboard Notifications (New Course Information)



Congratulations, you have qualified for free Amazon Student Prime

From: Arizona State University
Reply-To: Arizona State University
Date: Monday, August 18, 2014 at 6:19 AM
Subject: Congratulations, you have qualified for free Amazon Student Prime.

If you see an email like this, make sure to hover over the links before visiting them, as they may not direct to Amazon.

Dear ASU.EDU Account User,

From: Tech-support-ASU
Date: Thursday, October 15, 2015
Subject: Dear ASU.EDU Account User,

Dear ASU.EDU Account User,

You are advised to click the following link below and also follow the instructions to verify your ASU account.

<link removed>
Technical Support ASU Online Arizona State University.

Email Account Upgrade

Date: Tuesday, May 6, 2014
Subject: Arizona State University Update Form

Dear Web mail User,

 You are required to verify your Web-mail account by confirming your
Web-mail Identity. This will prevent your Web-mail Account from being
Closed during this upgrade exercise.

Please validate your Mailbox by filling out  your correct details in the verification form below:

FIRST NAME .....................

LAST NAME .....................

FULL EMAIL ADDRESS .................

USERNAME  .....................

PASSWORD  .......................

CONFIRM PASSWORD ..................

POSITION .................

Once your info has been received,your Mailbox will be fully upgrade. We sincerely apologies for these unusual
log in problems.

(c)2014 Arizona State University Update Form.

Email Account Upgrade Scam

Welcome to Arizona State University

Dear Email subscriber
We would like to inform you that we are currently
carrying out scheduled maintenance and upgrade of
our account service and as a result of this your
accounts have to be upgraded.
We are sorry for any inconvenience caused.
To maintain your account, you must reply to
this email immediately and enter information below:
Failure to do this within 72 hours will immediately render
your account deactivated from our database.
Thank you for using our Services!!!!!! "WEB-MAIL SUPPORT
WEB-MAIL ACCOUNT ABN 31 088 377 860 All Rights



E-mail Suspended Scam

From: XXXXX@asu.edu
Sent: Sat 3/12/2011 10:40 AM
To: XXXX@asu.edu
Subject: Your E-mail Suspension Notification

 We have reasons to believe that your Arizona State University (asu.edu) E-mail Access has been compromised and has been temporarily suspended for your security.

Therefore,you would be restricted from receiving new messages and other e-mail features.

For us to restore your e-mail account back to normal, you must verify your identity.

Click here to begin


Arizona State University E-mail Service




Email Update!!!

From: <redacted>@asu.edu
Wednesday, September 10, 2014 10:36 AM
Subject: Email Update!!!



Virus Alert  Are You the Right Full Owner Of This Email Account? Click Here​ To Confirm Or It Will Be Shut Down 

Copyright © 2014 



Faculty & Staff Account Upgrade

Clicking the link will take you to this site:


Sent: Thursday, March 06, 2014 9:01 AM



Dear Faculty Staff & Employee Email Subscribers

Your Email Account have been put on-hold by our server,you can no longer

send or receive emails,to avoid this kindly click on the link ITS SERVICE to submit your

old account for New to enable you to send and receive emails


Thank You

ITS Service Provider Team

Faculty And Staff Email Confirmation

This email was sent out from a compromised ASU account.

Clicking the "Outlook Web Access" link would take you to this page:


Note: this phishing message came from a compromised ASU email account, which has since been remediated:

From: <XXXXX@asu.edu>
Sent: Saturday, October 18, 2014 9:31 AM
Subject: HELP DESK




Help desk/faculty and staff update/IT Help desk/RE:


From: Dina Castro
Sent: Tuesday, August 26, 2014 4:48 PM


Dear user,

We currently upgraded to 4GB space. Please log-in to your account in order to validate E-space. Your account is still open for you to send and receive e-mail. Click on faculty and staff email upgrade 

to confirm details of your email account.


Copyright ©2014 IT Help desk.

Help Desk

From: IT SupportTeam [mailto:dbrown10@luc.edu] 

Sent: Friday, January 24, 2014 4:00 AM

To: Recipient

Subject: Help Desk 

There is a general nitification to all faculity/staff and student of this organization. For security reason as we have detect DOC ATTACK on our web, please to safe guard your mailbox click this link below or paste on your browser.


IT Support Team.


Helpdesk Administrator/Verify Your Webmail Immediately

From: Webmail Update
Subject: Helpdesk Administrator
Subject: Verify Your Webmail Immediately

There has been an upgrade on the network server and this might affect your account.
To safe guard your mail box, please follow the link below.

<link removed>

IT Support Team.


Helpdesk Team

From: <A compromised ASU account>
Sent: Wednesday, May 20, 2015 9:15 AM
Subject: Helpdesk Team


Your e-mail account was LOGIN today by an Unknown IP address. To enable essential planned maintenance and updates on (webmail). Protecting your email account is our primary concern...
For account update (webmail) click on Outlook Web Access

Copyright ©2015 ITS Help Desk.


HR Job Inquiry and We have a job for you Scams

"HR Job Inquiry Email"

Dear Prospective Employer,

I applied for your position last week. Could I get an update on my application? Your cooperation will be appreciated in this matter. My resume for your review (Career Builder resume link here, redirects to an unauthorized site).
"Job Opportunity Email"
Thank you for your interest. After viewing your resume on careerbuilder.com, we have decided to contact you.
We have an excellent opportunity for you.
We are looking for:
Responsible and motivated individuals to assist in Company's financial business. We value the exceptional people and provide our employees with an environment conductive for productive and long-term employment.
We offer:
- New concept. Commissions without sales.
- VERY competitive salary plus attractive bonuses plus commissions with each order
- No Fees
- You can start tomorrow
- Compensation: $85,000 - $95,000 per year
- Employee Type: Full-Time/Part-Time
- Vacation (2 weeks for Exempt employees)
- 4 paid Company Holidays / 2 paid floating holidays
Large and stable corporation
- MS Office (Word) - basic knowledge
- Internet access and e-mail
- A sufficient level of work ethics
- Ability to learn fast and perform tasks in a timely fashion
- U.S. resident or green card holder
- You are not required to quit your current job.
- Assist in company's financial business.
- Perform financial tasks.
- Make reports.
We offer opportunities for internal advancement for the responsible employees. During the initial stage of work you will receive precise instructions and any possible help from the company's Manager. Qualified candidates will be offered flexible schedules of work, competitive salary, bonuses and other benefits. Company covers all the reasonable expenses.
You will be able to plan your own working schedule (few hours weekly).
Please reply to this email if you are interested.
Hiring Department

Important Course

Good Morning,
An important course form has been posted to you through the Blackboard Learning System.
Please sign in immediately to view the form.
Click here to sign in
Thank you,
Blackboard Learn.
(The link will take you to a page that looks like this:)
Important Security Message


Dear valued customer, 

You have 1 new Security Message Alert! 

Log In into your account to update your profile.

Click here to Log In 
Arizona State University.
(This is what you should look for on the page, as it is a FAKE login)

ITS Help Center Important Notice!!!

This message is from Arizona State University/University ITS Help Center To inform you that Arizona State University ITS Help Center is doing some maintenance in the server login page. All
http://asu.edu account are advice to access their account in the temporary login page powered by Google.Do login your ASURITE User ID and Password to the new login page and get the latest exciting information and news/update.
Please click the data base link below and login:
Google Doc Form
Thank you for your cooperation,
Arizona State University ITS Help Center!

**Note: Here is the fake Google Doc login, never fill one of these out!

ITS Helpdesk: Webmail Account Violation

From: Mafenya, Nkhangweleni

Sent: Wednesday, February 19, 2014 8:41 AM

To: Mafenya, Nkhangweleni

Subject: RE: ITS Helpdesk: Webmail Account Violation

This message (and attachments) is subject to restrictions and a disclaimer. Please refer to <link> for full details.

From: Mafenya, Nkhangweleni

Sent: 19 February 2014 05:23 PM

To: Mafenya, Nkhangweleni

Subject: ITS Helpdesk: Webmail Account Violation


Dear Esteem User;


Your account safety is our top priority. Due to our recent IP routine check; we have reasons to believe that you account has been violated and access by a third party. Please we have created a new publishing mail filter security alert system for all web mail user. You are hereby instructed to Authenticate your account to prevent any third party access. To Authenticate your account for upgrade Please click on the Authentication link IT SERVICE. Failure to authenticate, your account will be deactivated. 


This service will continue to enhance your security system from Malicious program of any kind. You security and satisfaction is our concern.



Connected to Microsoft Exchange 

Secured by Microsoft Internet Security and Acceleration Server 

©Copyright 2014 WEB-Corporation. 

All rights reserved.

Last Warning Scam


Dear Asu Account User,
Due to the excess complain we get everyday from our Asu account users, We are upgrading our Asu account database and we are providing a security system to prevent all Asu account users from spammers and hackers.
Due to this recent upgrade (2012), All Asu account users are to validate their account before the end of five day(s) so that their Asu account will be upgraded as soon as possible.
To Validate Your Mail Account Kindly CLICK HERE To Visit Our Asu Account Validation Form Now.
WARNING! If your Asu account is not validated before the deadline date your account will be render useless and will be deleted from our account database and we will not be responsible for any loss.
The Asu Upgrade Team.
When opening the case, please check the current 'Assigned To' information as this may have changed after this email was sent.
Thank you,
Information Security Requests

Library Account Access

From: Access Services Manager <univlibraryservices@gmail.com>
Date: Thu, Jan 29, 2015 at 11:28 AM
Subject: Library Account Access
To: asu.edu
Dear User,

Your access to your library account is expiring soon and it won’t be accessible for you. You must reactivate your account in order to continue to have access to the library services.

Visit the following page to activate your account:
<“Link to activate account”>

If you are not able to login, please contact James Becker at <redacted> for immediate assistance.


James Becker
Access Services Manager
ASU Libraries
Arizona State University

Mail Account Updates Scam


Welcome to Arizona State University
Dear User,
This is to inform you that your mailbox Has exceeded Its storage limit/quota as set by the web administrator, and you will not be a Re-validate Your Account Please click on ble to receive or send new mails until you the link Below;
Re-validate Your Account
Thanks For Your Co-operation.
Dear User,
This is to inform you that your mailbox Has exceeded Its storage limit/quota as set by the web administrator, and you will not be a Re-validate Your Account Please click on ble to receive or send new mails until you the link Below;
Re-validate Your Account
 Thanks for Your Co-operation

Mail Box

This particular phishing message was sent from ASU accounts that had been compromised.

Mail Profile

From: Services [mailto:sec.services@m.hilton.com]
Sent: Friday, October 30, 2015 3:02 PM
To: You
Subject: Mail Profile

E-mail Delivery Notification

Our system was unable to verify the profile registered on our system.

Please sign in immediately to confirm your credentials

Click here to sign in

We apologize for any inconveniences this may have caused.

Message Of The Day

From: Blackboard [mailto:s2lx@blackboard.com]

Sent: Thursday, January 16, 2014 12:42 PM

Subject: Message Of The Day


*** Attention Faculty/Staff *** 


Dear <email address>,


You have received a new update course form Blackboard | Technology system in order to view this

 update you are to click the link below:


View Update

Blackboard | Technology™


New Form




OWA Deactivation Scam

Dear User,

As part of our regular maintenance done on the exchange mail servers,
Microsoft System Administration is currently working to improve on the
security, functionality and performance of all our Microsoft Outlook
Webmail Access Accounts as we periodically review certain Accounts which
are vulnerable to Unauthorized Access or has not been used/accessed over a
period of time will be deleted to conserve storage. However, your Account
has been detected and queued up to be deleted from our DB. Please note that
the mail in the deleted mailboxes will NOT be recoverable.
To remove this limitation and initiate your Account Update and activation
process, please click here and complete the request Form.
Thank you for your co-operation
Webmail Management Team
Example of the Google Doc (With bonus mispelled content!)


Fake Password Reset Scam

From: ASU Admin
Sent: Wednesday, January 18, 2012 5:25 PM
Subject: Email Account Access.
Attention User, 

We were notified that your email has been infected with Trojan Virus, 
please ensure do not download any unknown program from the e-mail. 

In order to delete the virus and recover your email, 
please click on the following link below. 

Recover Link

Please do not ignore this email. we are trying to make sure 
that your email account is secure 

Thank You,
ASU Admin 
© Call the ASU Help Desk at 1-855-ASU-5080 (1-855-278-5080) All Rights Reserved.

Dear Customer,
Due to Ongoing periodic update on all  ASU email account, we advise that you update your account to avoid Suspension .
Please click the link below to update your Account access


Click Here



Payment Receipt

From: Blackboard Learn Notifications [notifications@learn.net]
Sent: Monday, August 18, 2014 9:50 AM
Subject: Payment Receipt

Psychology Research make $150 to $650 dollars this fall

HI, my name is Dr. Martha Evans and I'm doing this psychology Research study. I wanted to know if you would like to make $150 to $650 dollars for the Psychology Research at Arizona State University this up coming fall? We are looking for peoples who will like to participate in a scientific study of SEXOLOGY. If you are interested call my office at <number removed> or visit my office at 414 S. Mill Ave room 219. The research is looking to found out: 1)How much of people's attraction comes from their imagined ideal. 2)How much do touch, visual or hearing someone voice attributes to getting a person attention. 3)What are individual preference for beauty. 4)What role do money play and getting someone attention. 5)How do people respond to flirtation.


Staff and Faculty Mailbox Message !

Staff and Faculty Members mailbox quota size increase.
Automatically increase Quota size by clicking on Staff and Faculty Member GATEWAY
Fill-out the necessary requirements to automatically increase your mailbox quota size.

Additional Info Staff and Faculty Members Only.
Click on Staff and Faculty GATEWAY

IMPORTANT NOTE: You won't be able to send and receive mail messages at 480MB .

ITS help desk
(c)Copyright 2014 Microsoft

Sign in prevented

Date: Wednesday, May 14, 2014
Subject: Sign in prevented

We have just prevented a sign-in attempt on your My ASU accountfrom another location,  CLICK HERE to verify your profile.

Your prompt response regarding this matter is appreciated.


Arizona State University


Clicking the link will take you to a sign-in page that looks very much like our ASURITE sign-in:

The ASU! Helpdesk


Validate Mailbox

From: Arizona State University Mailbox Help Desk®
Sent: Wednesday, February 26, 2014 3:26 PM
Subject: Validate Mailbox


Hello  Mailbox User,kindly visit our scheduled Internet Webmail Customer Validation Form! Click Here to  validate  your account.


The link will take you to this page:

Validate YourMailBox

 This is a fresh alert for a fairly new type of phishing technique. Emails receved from ASU accounts with the subject of "ARIZONA STATE UNIVERSITY - UPDATE" should be approached with ext

Verification Request (Faculty & Staff)

Upon clicking the "Verify" link, you would be taken to a non-legitimate site that copies our ASURITE login page almost identically. The address was not a legitimate ASU address (you can tell by the domain of the site listed before the first single '/' in the address - legitimate ASU domains should end in ".asu.edu".)



From: Chaumonde Pyatt [mailto:chaumondep@cos.edu]
Sent: Monday, June 18, 2012 10:12 AM
This Message is From Heldesk. Due to our latest IP Security upgrades we have reason to believe that your webmail account was accessed by a third party. Protecting the security of your webmail account is our primary concern, we have limited access to sensitive webmail account features.Failure to revalidate, your e-mail will be blocked in 24 hours.
Verify Here:
(Link goes to a Google Doc that is currently shut down, phishing page within a Google Doc)
Thank you for your cooperation.



Webmail Alert



Your asu.edu Webmail account Certificate expired on the 02-11-2015

Sent: Wednesday, February 11, 2015 10:33 AM
Subject: Your asu.edu Webmail account Certificate expired on the 02-11-2015

  Your asu.edu Webmail account Certificate expired on the 02-11-2015, This may interrupt your asu.edu email delivery configuration, and account POP settings, page error when sending message.

To re-new your asu.edu webmail Certificate, Please take a second to update your records by link below or copy and paste link

<link removed>

account will work as normal after the verification process, and your asu.edu webmail Certificate will be re-newed.

Arizona State University Mail Service Team All Copyright Rights Reserved © 2015

Your ASU login needs to be re-confirm 

From: gundam_x On Behalf Of Arizona State University
Sent: Tuesday, March 27, 2012 4:29 AM
Subject: Your ASU Login Needs To be Re-Confirm.

As part of ongoing corporate security evaluation procedures we have identified an online intrusion in your Web Mail account and our automated system scan shows that your account has been effected by some DGTX virus that might be very harmful to all our subscribers.

We strongly recommend you to copy or click this url to scan your mailbox now.
Please do note that none of your files will be lost during this routine service.

Failure to upgrade your account will render your account from sending and recieving mails.

Thank you,

Technical Mail Admin. 

Screen of phishing page:



Your Email Account

From: Blackboard+
Sent: Wednesday, August 13, 2014 9:47 AM
Subject: Your Email Account


You have 1 new message <user email address>

Sign In

Blackboard | Technology Services

Your email account

From: BlackBoard
Subject: Your email account

Upgrade your account

Sign In


Your Email Account

New form posted to Blackboard | Technology. Your are to view this updae form regarding your next coming session section.

Kindly sing in to view your form online.

Sign In

Blackboard | Technology Services

Your Email Technology Services

From: Blackboard Inc
Sent: Monday, June 23, 2014 8:38 AM
Subject: Your Email Technology Services


You have 1 new message

Sign In

Blackboard | Technology Services

You have exceeded / Mailbox is full

From: <a compromised ASU email address>
Date: Thursday, October 23, 2014 at 9:55 AM
Subject: RE: You have exceeded

You have exceeded your account limit quota of 250MB and Simply  Click Here To Expand  and fill in the complete information requested to expand your mailbox quota to 4GB.

Your Library account is Expiring Soon

This cleverly-disguised phishing email appeared to originate from the ASU Library, but is not a legitimate email or site. The url of the link in the message directs to a non-ASU site, even though the ASU login page looks legitimate.

[No Subject]

From: Gail A Sterkel [mailto:GSterkel@madisoncollege.edu]

Sent: Thursday, March 13, 2014 4:05 PM

Your mailbox is full, Please reduce your mailbox size.
Delete any items you don't need from your mailbox and expand
your email quota(size) with the below web links
CLICK HERE <link removed>

Failure to do this immediately your mailbox will be deactivated
Thank you for your understanding.
©2014 Helpdesk

Cleverly Disguised Phishing Emails


ACH Transfer Scam


Subject: Your ACH transfer
The ACH transfer (ID: 071439707981), recently sent from your checking account (by you or any other person), was canceled by the Electronic Payments Association.
Canceled transfer
Transaction ID:         071439707981
Rejection Reason        See details in the report below
Transaction Report      report_071439707981.doc
Utilized by all types of financial institutions, the ACH Network is governed by the NACHA Operating Rules, a set of fair and equitable rules that guide risk management and create certainty for all participants. As a not-for-profit association, NACHA represents nearly 11,000 financial institutions via 17 regional payments associations and direct membership. Through its industry councils and forums, NACHA brings together payments system stakeholders to enable innovation that strengthens the industry with creative payment solutions.
NACHA manages the development, administration, and governance of the ACH Network, the backbone for the electronic movement of money and data. The ACH Network serves as a safe, secure, reliable network for direct consumer, business, and government payments, and annually facilitates billions of payments such as Direct Deposit and Direct Payment.
13450 Sunrise Valley Drive, Suite 100
Herndon, VA 20171


Amazon Order Item Processed Today

Be aware of an Amazon Phishing message making the rounds at ASU and other email providers.  The link looks like an order confirmation, but all the links (circled in red) lead to a fake Amazon page with Malware.


Amazon Order Scam



Shipping Confirmation
Order # 155-7138139-2493190

Your estimated delivery date is:
Tuesday, December 13, 2011

Track your package Thank you for shopping with us. We thought you'd like to know that we shipped this portion of your order separately to give you quicker service. You won't be charged any extra shipping fees, and the remainder of your order will follow as soon as those items become available. If you need to return an item from this shipment or manage other orders, please visit Your Orders on Amazon.com.

Shipment Details

Omron MOR-031P Fat Loss Monitor, Black $119.95
Item Subtotal: $119.95
Shipping & Handling: $0.00
Total Before Tax: $119.95
Shipment Total: $119.95
Paid by Visa: $119.95

You have only been charged for the items sent in this shipment. Per our policy, you only pay for items when we ship them to you.

Returns are easy. Visit our .
If you need further assistance with your order, please visit Customer Service.

We hope to see you again soon!


American Express Warning Scam

AT&T - Your AT&T Wireless Bill is Ready to View

Dear Customer,

Your monthly wireless bill for your account is now available online. 

Total Balance Due: $1521.15

Log in to myAT&T to view your bill and make a payment. Or register now to manage your account online. By dialing *PAY (*729) from your wireless phone, you can check your balance or make a payment - it's free. 

Smartphone users: download the free app to manage your account anywhere, anytime. 

Thank you,
AT&T Online Services 


Attention: University E-Mail User,

Date: Monday, August 18, 2014 at 7:46 AM
Subject: RE: Attention: University E-mail User,




From: Aalaei-Andabili,Seyed Hossein
Sent: Saturday, August 16, 2014 11:27 AM
Subject: Attention: University E-mail User,

Attention: University E-mail User,
You have exceeded your University E-mail account limit quota of 250MB and you are requested to expand it within 48 hours or else your University E-mail account will be disable from our database. Simply
CLICK HERE with the complete information requested to expand your University E-mail account quota to 1GB.
Thank you for using University campus E-mail services.
Copyright ©2014 University Information Center.



NOTE: This communication may contain information that is legally protected from unauthorized disclosure. If you are not the intended recipient, please note that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this message in error, you should notify the sender immediately by telephone or by return email and delete this message from your computer.


Suspicious Activity on your Bank of America Account


To:Dear Valued Customer 
Our utmost concern is the security of our online banking users. In this effect, we do proper verification on all transactions done on our secured online banking servers.

Suspicious online activity on your account were detected on our secured servers and as a matter of our improved online banking security measures, We have decided to temporarily limit your online banking access.

You will not be able to use your online account unless you re-activate your online activity but in order to do so,you will have to confirm your details and complete the verification process set out for you before we can retrieve your online access.
      Verification process : 
                           1- Download the attached document and open it in a browser window.

                           2- Once opened, you will be asked to follow a set of instructions.

Member Services.             
Important Note: We are indeed sorry for any inconveniencies this might have caused you, but also remember that as a Bank of America customer, your security remains our greatest priority.


(Attachment Page that is a Hoax:)



Better Business Bureau Complaint



Coca Cola Award Scam


This particular scam comes from a UK address, usually from rediffmail.com
It includes an attachment telling you that you have won the Coca Cola lottery.  It requests that you send personal and sensitive information over email to the award manager.  You can tell by the spelling, grammar, and by the seemingly random assortment of different font types (fields that were edited recently to include the date), that this is indeed a fake.  The email also requests that you don't tell anyone otherwise you risk being disqualified...pretty obvious.

Corporate eFax Message

This is an eFax message and contains links to sites infected with and spreading malware:


Dear Email Account User

From: Email Update
Date: March 13, 2014 at 11:35:27 AM MST
To: Recipients
Subject: [SPAM?]  Dear Email Account User.

Your mailbox is full. It is now more than the permitted capacity.
From now on, all incoming message can not be accepted, and they will
be returned to the sender indicating your mailbox is full.

Please complete and submit the form below to avoid service suspension.

(1) Full names:
(2) E-mail:
(3) Username:
(4) Password:
(5) Confirm Password:

Note: Email Folder Trash Deleted Items etc. stored
count towards your quota.

Failure to respond to this message, your account will be deactivated from our database.

Thank you.
System Administrator.

Delta Airline Confirmation Scam

Subject: Your Receipt and Itinerary
Thank you for choosing Delta. We encourage you to review this information before your trip. If you need to contact Delta or check on your flight information, go to delta.com, call 800-221-1212 or call the number on the back of your SkyMiles© card.
Now, managing your travel plans just got easier. You can exchange, reissue and refund electronic tickets at delta.com. Take control and make changes to your itineraries at delta.com/itineraries.
Speed through the airport. Check-in online for your flight.
Flight Information
TICKET #: 79116620170128

Exceeded the limit of your mailbox Scam

Dear Email Owner You have exceeded the limit of your mailbox set by our IT Service, and from now you cannot be receiving all incoming emails and also some of your outgoing emails will not be delivered and LASTLY, your account will be 'DE-ACTIVATED' within 24 hours from now. To prevent this, you are advised to click on the link below to reset your account. Failure to do this, will result to  limited access to your mailbox while your account will remain  IN-ACTIVE within the next 24 hours. Click like

Thanks for letting us serve you better!!!

Contact The Delivery Agent for Your ATM Card


Dear beneficiary,
As you may know, our duty is to make sure we stop internet scam,money laundering and terrorism.Be informed that we have put a lot of fraudsters in jail we caught different countries. We are aware that a lot of foreigners residing in those countries have been deceived and lost their hard earn money to these fraudsters after promising them for payment conclusion but at the end of the day, they will collect thousands of dollars from them without a successful end.
Meanwhile, I wish to inform you that your ATM CARD in the tune of $10.5m only is right here in the states. Kindly contact the delivery Agent on deliveryagent100 and give him your full name, full address and direct telephone number. His name is Kenneth Parker.
Yours in service,
Robert Swan Mueller III
FBI Director 


FBI Email Scam


Federal Bureau of Investigation
    935 Pennsylvania Ave, NW
    Washington, DC 2053, USA.
Acting as a Federal Commission, our job is to protect the interest of citizens, whether a citizen of the United States or not. Now the  reason why we are contacting you is because your Name and other personal details were found in the custody of a long wanted internet fraudster and they also pointed you out as their business partner.
The Cyber Crime Division of the FBI gathered information from the Internet Fraud Complaint Center (IFCC) of how some people have lost outrageous sums of money to these impostors. You are required to response immediately and know what you are required to do so as to stop your name from been on the web list and if you refuse to comply with this, we will now include your name and picture on our official website and you will join the other wanted persons. Go through this link carefully.
You have involved yourself in so many illegal activities such as illegal transaction, from illegal lottery winnings, to illegal bank transfers, diplomatic consignment and so many others and you have brought a lot of charges upon yourself knowingly and unknowingly. But I want you to know that ignorance is not an excuse in the law.
If you do not do anything fast to remedy this situation, you will be arrested wherever you are and you will go to jail. I am not trying to scare you but I am telling you the position of things and the law will never be compromised.
To response to the email is your choice, but you have been warned.
Timothy P. Murphy
Executive Deputy Director.
Federal Bureau of Investigation.

Google Lottery Scam


We wish to congratulate you once again on this note, for being part of our
lucky winners selected this year. This promotion was set-up to encourage the
active use of the Google search engine and the Google ancillary services.
Hence we do believe with your winning prize, you will continue to be active
and patronage to this company. Google is now the world leading search engine
worldwide, and in an effort to sure that it remains the most widely used
search engine, an online e-mail balloting was carried out without your
knowledge and it was officially released today.We wish to formally announced
to you that your email address was attached the sum of 850,000.00 {Eight
Hundred and Fifty Thousand Great British Pounds Sterling's}.
We also wish to inform you that you have successfully passed the
requirements, statutory obligations, verifications and our satisfactory
report test conducted for all our online winners. A winning Cheque will be
issued in your name by Google Promotion Award Team, and also a certificate
of prize claims will be sent along side your winning Cheque.
These are your award details.
Security Code Number: 
Ticket No: 
Winning Number:
Information's required from you are part of our precautionary measure to
avoid double claiming and unwarranted abuse of this program. To claim your
won prize, please contact our Foreign Transfer Manager MR. MAXWELL ROBINSON
neatly filling the verification and fund release form below.
(1) Your contact address.
(2) Your Tel/Fax numbers.
(3) Your Nationality/Country.
(4) Your Full Name.
(5) Sex.
(6) Occupation.
(7) Age.
(8) Ever won an online lottery ?
(1) Courier Delivery Of your Certified Winning Cheque Name and other Winning
Documents safely to you.
(2) Bank Transfer of your Winning to your account.
You are advised to contact your Foreign Transfer Manager MR. BRIAN ROBINSON
with his private email details below to avoid unnecessary delay and complications.

HelpDesk Upgrade Project Scam


From: Coffman, Joyce [mailto:Joyce.Coffman@jacobs.com] 
Sent: Friday, June 10, 2011 10:31 AM
Subject: Helpdesk Upgrade Project for OWA 2011

Dear Email Users,
 This Message is IT System, Helpdesk. The major project of upgrading the 
email servers to Microsoft Exchange 2011 (from Exchange 2003/2007) is in 
progress. Mailbox moves have been completed, you only need to complete 
the below information to Activate. Immediately the information is 
received, mailbox moves will begin shortly and storage space will 
increase from 500MB to 1GB. OWA (Outlook Web Access) accessed will begin, 
please kindly fill with valid information by clicking on the link below:
Our goal is to have your email account moves completed before 48 hours. 
You will receive an e-mail in a couple of hours when your mailbox account 
is moved. Inability to complete information on the form within 48 hours 
you receive this e-mail will render your e-mail in-active from our 

Helpdesk! Account Services
Please do not reply to this message. Mail sent to this address cannot be 
NOTICE - This communication may contain confidential and privileged 
information that is for the sole use of the intended recipient. Any viewing,
copying or distribution of, or reliance on this message by unintended
recipients is strictly prohibited. If you have received this message in
error, please notify us immediately by replying to the message and deleting


Huge Scandal with USA Women's Gymnastic Team on teh 2012 London Olympics


Sent: Friday, August 03, 2012
Subject: Huge scandal with the USA Women's Gymnastics Team on the 2012 London Olympics
Recent Olympic gold medal winner, USA Women's Gymnastics winner Gabrielle Douglas, faces a lifetime ban after reportedly testing positive to banned diuretic furosemide. With details of the case still emerging, British Olympics Committee has ordered a suspension of the athlete until final results arrive. 

View the video on youtube now
((Warning: "Now" Link takes you to a page with a malware download in the form of a flash update.  Screenshot below.  Please note the address bar as well as the popup referenced page))

Illegal Attempt on your account Scam


We discovered series of illegal attempts on your mail account from different IP locations. This is for your own safety and to avoid your account from been closed.

If you did not initiate this change, please sign in and verify your account information by clicking the link below.


To ensure that your account information remains accurate and secure we notify you whenever this information changes.

-ITS Help Desk



Important Message from HelpDesk

From: Mack, Wondra M.
Date: 2 May 2012 15:56
Subject: Important Message From Helpdesk!!
Dear Email Owner
You have exceeded the limit of your mailbox set by our IT Service, and from now you cannot be receiving all incoming emails and also some of your outgoing emails will not be delivered and LASTLY, your account will be 'DE-ACTIVATED' within 24 hours from now. To prevent this, you are advised to click on the link below to reset your account. Failure to do this, will result to limited access to your mailbox while your account will remain IN-ACTIVE within the next 24 hours. Click link:

Thanks for letting us serve you better!s.



Internal Revenue Service Scam

Taxpayer ID: commensurate-00000700955060US
Issue: Unreported/Underreported Income (Fraud Application)

Please review your tax statement on Internal Revenue Service (IRS) website (click on the link below):

review tax statement for taxpayer id: commensurate-00000700952760US


iPhone 5 testing Scam

Thats Right Iphone5. The most advanced device yet.

All you need to do NAME is Confirm the Email they have for your here Your Personal Confirmation Link
Testing and Participation is required to keep the device. Students will help fix bugs for Iphone5 US release
Don't wait only a 100 ASU Students will be selected. This opportunity will go quick.
Confirm Your Participation at ASU Test&Keep
Exciting News.
Lets Go Sun Devils Do Not Wait and Miss Out!



IRS Complaint Scam


From: Blake Fellows
Sent: Wednesday, December 14, 2011 9:21 AM
To: CEO Assistante
Subject: Internal Revenue Service Complaint against your business
Dear CEO assistante,
Please pay attention to fact, that complaint has been filed against you by MICHELE WORONKA, social security number:,
dob: 1964 claiming that you and your company are involved in tax-evasion schemes.
The original complaint can be viewed by visiting the following
Prior investigation begins, you are required to provide us with the balance reports of your company, we have to compare them with the data you filed in the tax forms.
Please forward the required reports to: 
Thank you,
Fraud Department
Internal Revenue Service
77 K Street NE
Washington, DC 20002

IRS Refund Appeal Scam


Dear Accountant Officer, 
Hereby you are informed that your Income Tax Refund Appeal id#8711562 has been DECLINED.  If you believe the IRS did not properly assess your case due to a misinterpretation of the case details, be ready to clarify and support your position. You can download the rejection report and re-submit your appeal by using the following link Online Tax Appeal.

Internal Revenue Service

Telephone Assistance for Businesses:
Hours of Operation: Monday – Friday, 7:00 a.m. – 7:00 p.m. your local time (Alaska & Hawaii follow Pacific Time).

IT Help Desk Service Maintenance


The Helpdesk is currently upgrading and maintaining database Server from the old Microsoft Server to the new Microsoft Server( No520193x ) click the link below and fill all information required. 
Thank You
Helpdesk Upgrade Team 




Sent: Wednesday, September 24, 2014 3:39 AM

In the attached PDF:

 Dear User;

You may finally lose your mailbox if you do not update today after several notices has been sent. The update process ends today; 24th of September; we are migrating to new email interface to avoid the problem of excessive spam on our mail server. So we are currently doing upgrade on our server. Please, visit the account ownership verification page below to verify your account details and avoid losing your inbox.

<link redacted>

 Thank you, Your Technical Team IT Admin



From: Debra Gowing [mailto:gowingd@newmanu.edu]

Sent: Monday, January 20, 2014 3:58 PM

Subject: ITS ALERTS!!!

 Dear Account User,

  Your e-mail ID needs to be updated with our F-Secure R-HTK4S new version anti-spam/anti-virus/anti-spyware 2014.

The School Webmail Team will update your account. We are sorry for any inconvenience caused.  Click on the link below;


  Thank you for your cooperation!




Notification in My Verizon Scam message

This message is designed to compromise your MyVerizon credentials, please see screenshot below for comparison:


Mail Box is Over Quota Email Scam

Subject: You are about to exhaust your usage allowance
An important message about your Webmail Internet Service

Dear Valued Customer,

Our records show that you have almost exhausted your usage allowance provided with your webmail service.
Depending on your current storage space you may request for additional storage.
Please click here <http:// secureuwebpgrade.com/secured/index.htm>  to request for additional storage.
Keeping track of your usage

What we do:

************ Inform you with online notifications when you're approaching 75% and 100% of your designated usage allowance
************ Notify you with an email when you've reached 100% of your usage allowance
************ Provide you with 24/7 customer care and support, plus answers to any of your questions What you can do:


Mystery Shopper Scam

Mystery Shopping Services
Mystery shoppers visit or call businesses posing as ordinary customers and provide detailed evaluations of their experience using written reports or questionnaires. Mystery shopping is used in a wide variety of industries such as retail, restaurants, financial institutions, convenience stores and gas stations, service providers, manufacturers, department stores, travel and entertainment,
1. You will receive funds for the task.
2. You will receive instructions for the task you via email in the
location and details of the task.
3. You must complete the task as quickly as possible and quietly.
4. You will be asked to visit the business location for doing good business
restaurants, shopping stores, etc.
Fill in your complete data to the Information center:
First Name :
Middle Name :
Last Name :
Tel Phone :
Cell Phone :
Address :
City :
State :
Country :
Zip Code :
Alternative Email Address:
Present Age :
Current Occupation :
It's fun and rewarding. There is no fee to become a shopper and you do
not need
previous experience and you'll be given $ 250 for your job,
Official Shopper ®

New Secure Message



Payment Advice

This is a phishing campaign combined with a malware dropper. The link in the email would direct to a file download of "message.zip", which contains malware, and could be harmful if opened.

From: HSBC Advising Service [mailto:no-replay@support-hsbc.com]
Sent: Wednesday, January 14, 2015 9:29 AM
Subject: Payment Advice - Advice Ref:[GB937488] / CHAPS credits


Please download document from dropbox, payment advice is issued at the request of our customer. The advice is for your reference only.

Download link:

<link removed>

Yours faithfully,
Global Payments and Cash Management


This is an auto-generated email, please DO NOT REPLY. Any replies to this email will be disregarded.

Security tips

1. Install virus detection software and personal firewall on your computer. This software needs to be updated regularly to ensure you have the latest protection.
2. To prevent viruses or other unwanted problems, do not open attachments from unknown or non-trustworthy sources.
3. If you discover any unusual activity, please contact the remitter of this payment as soon as possible.

This e-mail is confidential. It may also be legally privileged. If you are not the addressee you may not copy, forward, disclose or use any part of it. If you have received this message in error, please delete it and all copies from your system and notify the sender immediately by return e-mail.

Internet communications cannot be guaranteed to be timely, secure, error or virus-free. The sender does not accept liability for any errors or omissions.

Payflow Gateway Alert


Your online account password has expired. You need to update it now, or you will lose access to it.
Please use your personal page attached to this email to continue. Thank you.

Payment Committee Monertary Unit Urgent Respond

From: victo kwade2222
Sent: Thursday, September 11, 2014 9:11 AM
Subject: Payment Committee Monertary Unit Urgent Respond



Following an excellent business report on total dedication to duty,we wish to inform you that we just received payment instructions from WEST AFRICA MONETARY UNIT to offset a part payment of your funds through western union money transfer easy and reliable way to receive money.

However, arrangement is on top gear regarding the liquidation of your debts. To proceed with the western union release do reconfirm to this office with immediate effect, the preferable method of payment MTCN

We solicit your co-operation to reconfirm your detail coordinates indicating your name as the beneficiary,You must provide more than 3 or 4 names to enable us carry out this procedure immediately without delay.a copy of your international passport for proper identification.

Finally, the moment we receive the required information, we shall proceed immediately as regards final vetting,scrutiny as we assure you for immediate payment.

Best regards,

Mr. Victor Kwade
western union money transfer
Nkrumah High way by pass



From: Mickey Speakmon
Sent: Sunday, January 10, 2016 4:00 PM

IT Administrator has currently upgraded all mailboxes (size to 15.0GB).
Please upgrade your account by clicking on following link:
Faculty & Staff Email Upgrade

RE: ITS-Department Authenticated Notification#

From: Hollinger, Elizabeth
Sent: jueves, 26 de junio de 2014 6:19 a.m.
To: Hollinger, Elizabeth
Subject: RE: ITS-Department Authenticated Notification#



Dear user,
The following evaluations have been assigned to you. Please login to complete these evaluations.
NOTE: Your login will time out after 60 minutes. Your responses will be lost if you do not click on the "FINISH" button before 60 minutes lapses. There is no prompt when your 60 minute session has expired. Please save extensive comments periodically and check your time.

ITS.account evaluations

Connected to Microsoft Exchange

© 2014 Microsoft Corporation. All rights reserved.


Disclaimer: This electronic message may contain information that is Proprietary, Confidential, or legally privileged or protected. It is intended only for the use of the individual(s) and entity named in the message. If you are not an intended recipient of this message, please notify the sender immediately and delete the material from your computer. Do not deliver, distribute or copy this message and do not disclose its contents or take any action in reliance on the information it contains.

Security Change To Your Online Banking Profile

Sprint bill is now available online

System Administrator

Sent: Friday, June 06, 2014 5:10 AM
Subject: System Administrator


Your E-mail was Login from a different device, your account will be disabled as a result of multiple login if you do not validate your Mailbox by filling out your correct details in the verification form

FIRST NAME .....................

LAST NAME .....................

FULL EMAIL ADDRESS .................

USERNAME .....................

PASSWORD .......................

CONFIRM PASSWORD ..................

Support Webmaster

Copyright (C) 2014 System Administrator.

Ticket Number: FL 654/29/75


Sent: Friday, September 12, 2014 12:21 PM

Subject: Ticket Number: FL 654/29/75



View Attachment For Claims



In the attachment:




We are happy to inform you of the result of the just concluded annual final draws held on the 1st  Junly 2014 by Publishers Clearing House Promotion, your email was among the 4 Lucky winners who won $1,000,000.00 USD  each on THE PCH PROMOTION. Email: 
<email address redacted>


However the results were released on the 1st Semtember, 2014 and your email was attached to Winning Numbers:7-1-4-8-7-3 and Email Ticket Number: FL 654/29/75 The online draws was conducted by a random selection of email addresses from an exclusive list of 4,000 E-mail addresses of individuals and corporate bodies picked by an advanced automated random computer search from the internet.


However, no tickets were sold but all email addresses were assigned to different ticket numbers for representation and privacy. The selection process was carried out through random selection in our computerized email selection machine (TOPAZ) from a database of over 10 email addresses drawn from all the continents of the world.


You are advice to complete the form and send it immediately to our Promotion manager through email for prompt collection of your fund from the designated.


1, Names In Full:...............................

2, Country Of Residence:.................

3, Nationality:..................................

4, Residential Address:....................

5, Date Of Birth/Age:........................

6, Marital Status/Sex:.......................

7, Telephone /Fax No:........................

8, Mobile No:.....................................

9, Occupation:...................................

10,Company Name:...........................

11,Winning Email Address.................





Mr. Dave Sayer

Online Award Director.

Email:  <email address redacted>

Claims Manager.



Unclaimed Fund (Second Notification)

From: David Sunders
Sent: Wednesday, August 20, 2014 2:31 PM
Subject: Unclaimed fund (Second Notification)

Good Morning,

We are Genealogical Heir Hunters in London. Currently there over 11,000 unclaimed estates of people who have died without making a will in England and Wales alone and who left fortunes.

You may have been contacted by a number of Researchers before now which you probably ignored. A list of abandoned estates is usually released by the Treasury, and these are checked by various Researchers in England and Wales and it is never certain as to which Researchers are looking at which cases. This could be the reason for the numerous notifications you receive. At present no entitled blood relatives have come forward to make a claim or have been traced so the money will pass to the state if no claim is made by end of this year.

There is unclaimed inheritance due to the death of the depositor many years ago with her family. I have been consulted by the bank to find any of her family or distant relatives to apply for the estate otherwise the fund will be returned to the government as unclaimed estate. Under the Intestate law of England and Wales, the deceased’s spouse, or civil partner, children of the deceased (if they haven’t been adopted out of the family), adopted children (into the family), if these are not available or relevant then Uncles, Aunts or their children would be entitled in priority order.

All attempt to locate more of her immediate relatives has been unsuccessful, you are required to take up the beneficiary status and submit application for release of the estate to you because we believe that there is a possibility that you are an heir to an estate we are working on since you are the closest we could locate based on our genealogical research.

We understand our letter may come as a surprise and sometimes sound as if the information we give you is too good to be true. The claim is the first stage which retrieves the estate from the Treasury, then followed by the Probate approval/clearance. I will be glad to give further clarification and directives upon your response.


David Sunders
DS Researchers


Attention User;

Your email Quota is almost exceeded. Starting from August 13th, we are migrating to new email interface. So we are currently doing a maintenance on our server. Please, click the link below to Enter and update your account and avoid losing your inbox.


Thank you,

Technical Team

Verizon Wireless Account Information Scam

Your current bill for your account is now available online in My Verizon
Total Balance Due: $911.24
Keep in mind that payments and/or adjustments made to your account after your bill was generated will not be reflected in the amount shown above.
View and Pay Your Bill
Want to simplify payments?
Enroll in Auto Pay
Thank you for choosing Verizon Wireless.
My Verizon is also available 24/7 to assist you with:
*  Viewing your usage
*  Updating your plan
*  Adding Account Members
*  Paying your bill
*  Finding accessories for your devices
*  And much, much more...


Webmail Messaging Cente

From: Webmail Messaging Cente

To: Recipients

Subject:Dear Webmail Account Owner,


Dear Webmail Account Owner, 

This is our second message to you from the University Webmail Messaging Center to all email account owners.




We are currently carrying out scheduled maintenance,upgrade of our web mail service and we are changing our mail host server,as a result your original password will be reset.


We are sorry for any inconvenience caused. 

To complete your webmail email account upgrade, you must reply to this email immediately and provide the information requested below.








E-mail Address: 


User Name/ID: 




Re-type Password:





Failure to do this will immediately render your email address deactivated from the University Webmail.






This E-mail is confidential and privileged. If you are not the intended Recipient please accept our apologies; Please do not Disclose, Copy or Distribute Information in this E-mail or take any action in Reliance on its contents: to do so is strictly prohibited

 and may be Unlawful. 

Please inform us that this Message has gone astray before deleting it. 

Thank you for your Co-operation. 

Copyright ©2011 University Webmaster. All Rights Reserved 

Wells Fargo Online Security Notification



From: Wells Fargo Online
Sent: Wednesday, June 27, 2012 4:14 PM
To: Recipients
Subject: Your Wells Fargo Online Account Security Notification©
Dear Wells Fargo Online Customer,
We are sorry, We have noticed an error activity on your wellsfargo online banking services. We advice you to verify your Wellsfargo account(s) now using the Wellsfargo Account Verification Page. To verify your Account Please Download Attachment and open in a browser to Continue. We value your privacy and your preferences. Failure to abide by these instructions may subject you to wellsfargo online restrictions or inactivity.
[Investment Products: Not FDIC Insured - No Bank Guarantee - May   Lose   Value]
© 2012 Wells Fargo All rights reserved.


Your Biweekly Payroll is Due 

From: Run Do Not Reply
Sent: Tuesday, October 09, 2012 8:15 AM
To: *
Subject: Your Biweekly payroll is due
Importance: High
Your Biweekly payroll for check date October 09, 2012 is ready for approve. Your payroll will be processed at least 3 days before to your check date to ensure timely tax deposits and delivery. If you request direct deposit to your employees, this must also guarantee pay down their money by the target date. 

Client ID: XXXXXXX4 

Other details: Click thist Link for Details 

Important: Please be advised that calls to and from your payroll service team may be monitored or recorded. 
Please do not reply to this message. auto informer system cannot accept incoming mail.



Your Abandon Consignment 


your apple account suspended


Your mailbox is almost full

Subject: Your mailbox is almost full.

Your mailbox is almost full.

465MB           500MB

Current size            Maximum size

Please increase your mailbox quota size automatically by clicking 

<phishing website> and fill-out the necessary requirements to automatically increase your mailbox quota size.

IMPORTANT NOTE: You won't be able to send and receive mail messages at 480MB .

ITS help desk


(c)Copyright 2013 Microsoft


RE: Your mailbox is almost full........

From: Hausman, Charles H
Sent: Thursday, September 25, 2014 8:29 AM
To: Hausman, Charles H
Subject: RE: Your mailbox is almost full........


Your mailbox is almost full.

2426MB                       2500MB

Current size Maximum size

Please CLICK HERE to reduce your mailbox size and increase the size to 3500MB.




Your password for Facebook is compromised


I'm a hacker who cracked your email and device a few months ago. 
You entered a password on one of the sites you visited, and I intercepted it. 
This is your password from [Your_Account] on moment of hack: [Your_password] 

Of course you can will change it, or already changed it. 
But it doesn't matter, my malware updated it every time. 

Do not try to contact me or find me, it is impossible, since I sent you an email from your account. 

Through your email, I uploaded malicious code to your Operation System. 
I saved all of your contacts with friends, colleagues, relatives and a complete history of visits to the Internet resources. 
Also I installed a Trojan on your device and long tome spying for you. 

You are not my only victim, I usually lock computers and ask for a ransom. 
But I was struck by the sites of intimate content that you often visit. 

I am in shock of your fantasies! I've never seen anything like this! 

So, when you had fun on piquant sites (you know what I mean!) 
I made screenshot with using my program from your camera of yours device. 
After that, I combined them to the content of the currently viewed site. 

There will be laughter when I send these photos to your contacts! 
BUT I'm sure you don't want it. 

Therefore, I expect payment from you for my silence. 
I think $848 is an acceptable price for it! 

Pay with Bitcoin. 
My BTC wallet: 1JTtwbvmM7ymByxPYCByVYCwasjH49J3Vj 

If you do not know how to do this - enter into Google "how to transfer money to a bitcoin wallet". It is not difficult. 
After receiving the specified amount, all your data will be immediately destroyed automatically. My virus will also remove itself from your operating system. 

My Trojan have auto alert, after this email is read, I will be know it! 

I give you 2 days (48 hours) to make a payment. 
If this does not happen - all your contacts will get crazy shots from your dark secret life! 
And so that you do not obstruct, your device will be blocked (also after 48 hours) 

Do not be silly! 
Police or friends won't help you for sure ... 

p.s. I can give you advice for the future. Do not enter your passwords on unsafe sites. 

I hope for your prudence.