[Possible Scam/Phishing] capitalone@email.capitalone.com

[L0RDAVENTAD0R]

I just received this e-mail from the email address: capitalone@email.capitalone.com

I applied for a CapitalOne VentureOne credit card last night and was denied (another story for another day, will try to recon once I get the letter).

I stupidly clicked the link and "logged in" the third party site because I was anxious to see why I was denied. I tried downloading the Application Rejection Letter and instead of it being in .pdf file, it was a .aspx file. I thought that was weird. Then went back to the original email and realized what type of password they required of me. How stupid of me.

I've already ran MalwareBytes on my computer and it didn't pick up any malware, etc. I already have a full account with myFICO which includes identity monitoring and myFICO/Credit Karma is pretty good about letting me know whenever an inquiry hits my credipt reports.

But since this website now has thet last four of my SSN, birthdate, zipcode, and email - How screwed am I, identity-theft wise?

Anybody else here ever receive an email from capitalone@email.capitalone.com? I've already forwarded the email to abuse@capitalone.com.

Edit: Fixed image.

[msbia]

OP, I have logged into Capital One for letters like that before. I can't be certain about yours though so you did the right thing in the short term. 

Just a note: is that your actual email address at the bottom of the letter? If so, please edit that out! 

[Anonymous]

Stay away from the sites that have "visit" in them. They are not secure sites. Everything secured will have an HTTPS:// versus HTTP:// 

Last time I made the mistake of trying to log in a site that had visit in the address, I found it did not have a valid security certificate.

[L0RDAVENTAD0R]

---

@msbia wrote:

OP, I have logged into Capital One for letters like that before. I can't be certain about yours though so you did the right thing in the short term. 

Just a note: is that your actual email address at the bottom of the letter? If so, please edit that out! 

---

Thanks for the heads up. Can't believe I missed that at the bottom.

I did a search for that email in this forum and saw this thread: http://ficoforums.myfico.com/t5/Credit-Card-Applications/Is-this-a-real-capital-one-email/td-p/38688...

Multiple users are claiming that the email address is legit and that CapitalOne uses a third-party for letter-forwarding services. That doesn't make any sense to me though since CapitalOne can upload their own documents into our online accounts?

[Imperfectfuture]

---

@lordAventador wrote:

I just received this e-mail from the email address: capitalone@email.capitalone.com

I applied for a CapitalOne VentureOne credit card last night and was denied (another story for another day, will try to recon once I get the letter).

I stupidly clicked the link and "logged in" the third party site because I was anxious to see why I was denied. I tried downloading the Application Rejection Letter and instead of it being in .pdf file, it was a .aspx file. I thought that was weird. Then went back to the original email and realized what type of password they required of me. How stupid of me.

I've already ran MalwareBytes on my computer and it didn't pick up any malware, etc. I already have a full account with myFICO which includes identity monitoring and myFICO/Credit Karma is pretty good about letting me know whenever an inquiry hits my credipt reports.

But since this website now has thet last four of my SSN, birthdate, zipcode, and email - How screwed am I, identity-theft wise?

Anybody else here ever receive an email from capitalone@email.capitalone.com? I've already forwarded the email to abuse@capitalone.com.

Edit: Fixed image.

---

Same denial letter I got.  Since I can check actual email addresses, if it came from cap one, is good.

[Anonymous]

I have received that as well but it is not a scam or phishing. It is ligit. when you click on the letter view it leads to you a pdf.aspx which don't actually download just loads up in another tab using adobe reader plug in. Why I know its real because it matches the same Ietter i received in the mail. You can save the link and use it for later if you apply for Cap One the user id and password is always the same to you Hope that helps.

[Loquat]

I've seen that letter a time or 3 in my life and they were legit.  I will say though that my letters have always been in the PDF format...

[core]

As had been said, it's legit.  As for being prompted to save an .aspx file extension rather than pdf:   That happens when the Content-Type header from the server gets scewed up.  Normally the server should include this header and specify pdf or html, but if it's missing due to a "glitch" or misbehaving proxy on your ISP's side, your browser prompts you to save the file and you can't do anything.

Retrying should allow you do download the pdf and see your reasons.

[jeffery581]

In the future log into cap one and read your messages that way. More secure. I dont click on anything in an email. the email addy could be a spoofed addy.

[Anonymous]

I've yet to see one that, when you click to see the actual email addy, that it doesn't say 93jfjwk48@gmail.com or captialone@gmail.com

But I'm always wary of giving any info over the Internet unless I'm the one that is soliciting for it.