topic I got a very good Phishing email in SmorgasBoard

I got a very good Phishing email

NoMoreE46 — Wed, 08 Nov 2023 15:02:23 GMT

Received this email claiming I didn't have enough "funds" to cover a purchase. I knew that this was suspicious due to the wording. The other tip off was that the last four digits listed for my card are wrong. I will admit that despite these two clues, this email looks very legit otherwise.

I called Capital One and they vertifed that no such transaction was attempted on any of my accounts. They further confirmed they never sent this email. Since I confirmed that I had not proceeded with any of the links, they decided to leave my card numbers active. I fowarded this phishing email to their requested email address of abuse@capitalone.com. The subject line they wanted was: Suspicious email. In the body, they asked to include my name.

Be aware to not click on any of the links in these emails and contact your issuer asap.

Below are the screen shots of the phish:

Re: I got a very good Phishing email

ChargedUp — Wed, 08 Nov 2023 02:21:13 GMT

That's a lot more convincing than the one I got from the "IRS" asking for $1500 in WalMart gift cards...

Re: I got a very good Phishing email

FireMedic1 — Wed, 08 Nov 2023 09:17:14 GMT

The email address was a dead give away

Now if it was notification @capitalone.com. That would make sense.

Re: I got a very good Phishing email

Roisin — Sat, 11 Nov 2023 21:11:04 GMT

Thanks for sharing this. A reminder why I never click on an email link like this unless I'm expecting it, even if the sender's email address looks somewhat legit. My non-clicking stance includes responses to bank notifications asking me to verify recent charges, like the one I received just days ago -- Citi's email and request turned out to be legit; the charges to my account were not (new CC is on the way *sigh*). By contrast, two days ago I ignored the fairly legit-looking email from "Facebook" warning that I needed to take immediate action to fix all sorts of badness related to my account. Regardless, when I think an email like this might have merit, like the Citi email, I head over to my account via an app or known website to check out whether an issue may, or may not, be brewing.