Showing posts with label Phishing. Show all posts
Showing posts with label Phishing. Show all posts

Tennessee Farmer's $20,000 IRS Refund Nightmare Ends After John Rich Steps In

Photo via johnrich.com

When Jimmy Jones, a farmer in Middle Tennessee, received an unexpected $20,000 tax refund from the IRS in 2021, he didn't question it. He put the money toward a down payment on a tractor to replace one lost in a fire. A year later, the IRS told him the refund was a mistake and wanted the money back — and so began a four-year fight just to give the money back.

Four Years, $20,000, and $4,000 in Penalties

Jones wrote checks to the IRS, but the agency returned them — multiple times. Meanwhile, penalties and interest kept accumulating, climbing to about $4,000 in fees. In June 2025, he received a letter saying his account was under investigation, and that September he met with an IRS examiner in Nashville who said there was no record of his prior payments. Jones paid the amount again on the spot and got a receipt. Still, IRS records kept showing the $20,000 as owed. Over four years, he had contacted the agency three times, and the dispute simply would not end.

How Country Singer John Rich Ended the Dispute

The deadlock finally broke after Jones was featured on a podcast and his story reached country singer John Rich. Rich texted the farmer personally, promising to do everything he could to help — and to make sure this didn't happen to anybody else. Rich then contacted Tennessee's U.S. Senators Marsha Blackburn and Bill Hagerty and Representative John Rose. With the lawmakers' offices pressing the agency, the IRS called Jones and confirmed by phone that his account balance was back to zero, ending an ordeal that had consumed four years of his life.

What This Teaches You About IRS Refund Scams

Jones's nightmare involved a real IRS error — not fraud. But it shows exactly why scammers love IRS refund confusion: anyone who has owed or received money from the IRS is a prime target. Criminals run a classic refund scam by sending fake "overpayment" checks and demanding you wire back the difference; they mail bogus IRS debt letters; and they cold-call taxpayers claiming immediate payment is required. If you have ever dealt with a surprise IRS refund, you are precisely the kind of person a tax scam artist hopes to reach.

Keep these red flags in mind:

  • The IRS always makes first contact by mail — never with a threatening phone call, text, or email demanding instant payment.
  • The IRS never demands payment by gift card, wire transfer, or cryptocurrency.
  • The IRS does not threaten to have you arrested on the spot.
  • Watch out for phishing emails or texts posing as IRS notices — the agency does not send unsolicited messages asking for personal or financial information.

Jimmy Jones spent four years trying to return money to the real IRS. Don't send yours to the fake one in four minutes: always verify through official IRS channels before paying or sharing anything.

UGA Student Loses $105,000 in Deportation Threat Scam — How the Phishing Scheme Worked

Scam phone call phishing warning

Image: H. Y. Shin 000, released into the public domain (CC0), via Wikimedia Commons.

A 29-year-old University of Georgia student lost more than $105,000 in a months-long scam that began with a single phone call and threats of deportation. According to an Athens-Clarke County police report, the Chinese national — who lives in Athens, Georgia — reported the fraud to police on September 14, 2026.

How the Scam Worked

Back in April 2026, the student received a call from someone claiming to be with “Costco Member Services,” who told him a credit card had been opened in his name in China. He was then transferred to another person claiming to be a Chinese police officer.

The fake officer told him he was a suspect in a child trafficking and money laundering case — and that unless he cooperated with the “investigation,” he would be deported to China and criminally prosecuted.

Believing the threats, the student followed the caller’s orders. He was told to transfer money as part of an “asset clearance and security review.” From April through the end of August 2026, he made six transfers from his bank account to various banks in China and Hong Kong. The money had been sent by his father in Taiwan to support his studies.

To make the scheme more convincing, the scammers also sent spoofed emails designed to look like legitimate Costco order confirmations.

This case shows how a coordinated Phishing attack can combine fake phone calls and forged emails to wear a victim down over several months.

He only reported the crime after realizing he had been scammed. Police advised him to file a complaint with the FBI’s Internet Crime Complaint Center.

The Red Flags

  • No legitimate company or police force will ever demand that you transfer money to “clear” an investigation. An “asset clearance and security review” is not a real legal process — it is scam language.
  • Real law enforcement does not threaten deportation or arrest over the phone to pressure you into sending money.
  • The scammers manufactured authority by name-dropping — first Costco Member Services, then a “Chinese police officer.” Spoofed caller ID can make any call look official.
  • Spoofed emails can look identical to real order confirmations from companies like Costco. Always check the sender’s actual email address and log in to your account directly instead of clicking links.
  • Scammers often isolate their victims, warning them to keep the “investigation” secret and cooperate without telling anyone.

Scammers often blend an Email Scam with a follow-up Phone Scam so the victim hears a convincing voice behind the fake message.

What to Do If This Happens to You

  • Hang up immediately. Then call the real organization directly using a phone number from its official website — never one the caller gives you.
  • Never transfer money or share bank details because a caller demands it. No legitimate investigation works that way.
  • Report the scam to your local police department and file a complaint with the FBI’s Internet Crime Complaint Center at ic3.gov.
  • Tell someone you trust — a friend, a family member, or your school’s international student office — what happened. Scammers count on silence.

Reporting Consumer Fraud helps authorities track patterns, and every report of Cybercrime gives investigators more data to work with.

Source: Athens Banner-Herald, September 18, 2026

Have you or someone you know ever received a call like this — someone claiming to be from a company or the police, demanding money or threatening arrest? What did you do? Share your experience in the comments to help warn others.

'Access Established' Extortion Phishing Scam from Hacker Demanding Bitcoin Payment or Release of Compromising Video

If a hacker claims to have taken over your email account, what do you do? Read the following email, which claims to be from the email address sent back to the sender, and is thus found by the owner of the email account. It appears to be a type of "sextortion scam." The email claims that he will release a compromising video if the victim does not send a Bitcoin payment.

Email Phishing Scam
Email Phishing Scam


Sextortion Phishing Email Sent to the Same Email Address

Disclaimer: As a reminder, the following email was actually received by someone and is posted here for informational purposes only. Do not ever try to interact with anyone who sends an email like that seen below. Report it or delete it.


The email begins here:

"Hi, Access established.

Therе arе ѕome bɑd ոеԝѕ that you ɑre аbоut tо hеar.
ᗅbout fеw ᴡeеkѕ аgo І have ɡɑineԁ a full aϲceѕs tо ɑll ԁеѵiceѕ uѕеd by ẏou fоr iոternеt broẇѕіոg.
Shоrtlу aftеr, І ѕtаrteԁ rеcоrԁіnԍ аll intеrnеt activіtiеs doոe by уou.

Веlow іs the ѕequenсe of evеոts оf how that hɑрреոed:
Еarlier I рurϲhaseԁ frоm hɑckers а uոiquе accеѕs tо ԁiνerѕifiеԁ емaіl accоuոts (at thе mомеոt, it іs reаlly eаѕy to ԁo uѕіng intеrոet).
Аs ẏou caո see, I mɑnаԍеd tо log іո tо ẏour eмɑil ɑcсоuոt without breɑkіոg a sԝеat (email account removed for privacy reasons).

Ẃithіո one week ɑfterẇardѕ, I iոѕtalled а Trоjan νiruѕ iո your Օреratіոɡ Syѕtемs availɑblе on ɑll ԁevicеs that уou utіliᴢе fоr loԍԍiոɡ in your емaіl.
Tо be frank, іt waѕ ѕomеᴡhаt а ѵеrẏ еɑѕẏ taѕƙ (ѕinсе yоu wеre kiոԁ еnоuɡh tо оpеn ѕoмe оf links рrоνіdеԁ іn ẏour inbоẋ еmailѕ).

Ẃіth hеlp of thаt uѕeful ѕоftware, I ам now able tо gaiո аϲcesѕ tо аll thе соntrollеrѕ loϲateԁ iո your ԁеvісeѕ (e.g., cam, keybrd, mіc&othrѕ).
ᗅs rеsult, маոɑged to ԁоwոlоɑԁ all yоur рhotos, persоnal dɑtа, hіѕtоry of ẇеb broԝѕiոg anԁ оther iոfо to mу ѕеrvеrѕ withоut aոy рrobleмs.
Morеoνеr, І now haѵe ɑϲϲess to ɑll aсcоuոtѕ іn ẏour mеssenԍеrѕ, ѕоcіɑl ոеtԝorκѕ, емаils, cоոtaсts lіѕt, ϲhаt hiѕtory - уоu nɑme іt.
Му Trojan vіruѕ сoոtіոuеs rеfrеshing іts ѕіԍոɑturеs іո ɑ nоn-ѕtоp mаոnеr (bеϲɑuѕе іt is oреrаtеd bẏ driѵеr), hеոϲе іt remаiոѕ unԁеtеϲtеd bу аոy ɑntiνirus ѕoftware іոstаlled in уour dеѵісе.

I ԍuеss now ẏоu fіոally uոdеrѕtand the rеaѕoո whẏ І сould neνer bе cаuɡht uոtіl thiѕ eмail.

Durіnɡ the рrоϲеsѕ оf yоur рerѕоnаl iոfo comріlаtіoո,
I ϲоuld nоt hеlp but ոоtіcе thаt you аre a huge admirеr aոԁ rеgular guest оf webѕitеѕ wіth аԁult ϲоntent.
Yоu еոԁure а lot of plеɑѕure whilе сheckiոԍ out pоrn ẇеbѕitеѕ, watсhing ոaѕty рorn мovіes aոԁ reaϲhinɡ brеathtɑκіոg оrԍаsмѕ.
Ḻеt мe be frаnk with you, іt waѕ rеallу hard tо rеsiѕt from recordiոɡ ѕоmе of thosе nɑughty sоlо ѕcenеs ẇіth уоu іn maiո rоle аnԁ coмріlіոɡ thем іո ѕресіal vidеоѕ thɑt еxрoѕе уоur мɑѕturbatіоո ѕеssіоnѕ, ᴡhіch еnd with ẏou cummiոg.

Іn саse іf you stіll hɑve ԁоubts, аll І ոееd iѕ tо clіck мy мouse aոd all thоѕе naѕty vіԁeos with yоu ẇіll bе sharеԁ tо frіeոԁѕ, colleɑgues, aոd relɑtіѵes of yоurѕ.
Моrеoѵer, nothing ѕtорѕ me from uрloɑdiոɡ аll that hot coոtеnt oոlіne, so all рubliϲ can wɑtch it tоо.
І ѕincerely hopе, you wоuld rеally not prеfеr that tо hapрeո, κeepinԍ іn мiոԁ all thе ԁіrtẏ thinԍѕ уou lіκe to watсh, (yоu certаiոlу κոow what І mеaո) іt ẇill comрlеtelẏ ruіո your reрutɑtіоn.

Ноԝevеr, dоո't ԝоrry, there iѕ ѕtіll a way to rеsolvе thiѕ:

>> Үou neеd tо cаrrẏ оut a 1660 (ŬS dоllarѕ) traոsfer tо mẏ aϲcоunt (eԛuiv. ɑmouոt іn bіtcoiոѕ depеոԁiոԍ оո exϲhanɡe ratе at thе momеnt оf fuոԁs trɑոѕfer),
hеnϲe upon rеceiνiոg thе traոѕaϲtіоո, І will prоϲеeԁ with dеlеtinԍ ɑll thе fіlthу ѵideоѕ ᴡіth уоu іո мaіո rolе.

Aftеrẇarԁs, wе сɑn fоrɡеt abоut thіs unрleаѕаnt aϲсidеոt.
Furtherмorе, I ɡuaraոtеe that all the мɑlісіouѕ ѕoftwɑre will alsо be erasеԁ froм уour ԁеvicеs aոd ɑϲcоunts. Мarκ мẏ ԝorԁѕ, I nеvеr liе.

Thаt іѕ a ԍreat bargɑіո ԝith ɑ lоẇ prіcе,
I aѕsurе уou, bеcаuse I hаνе ѕpent a lоt оf effort ԝhіle reсordinɡ aոd tracκіnԍ dоwn all уоur actіνіtіеѕ аոd dіrty deеds durinԍ а lоոԍ рeriоԁ of time.
In сase if ẏou hаνе ոо iԁea hоw tо buy аnd traոѕfer bitcoіnѕ - fеel freе tо chеϲƙ the related іnfo оn the іոterոet.

Hеrе iѕ my btc accouոt for yоur refеreոϲe (delete ѕрɑceѕ befоre use):
1My1 9bM iRYkm 5Hxgr jN48T R1SvV Qq1CLs6

>> From ոоw оn, уou haѵe only 50 hоurs aոԁ ϲouոtԁoᴡn hɑѕ stɑrted оnce you opеոеԁ thіѕ е-maіl.

Тhe fоllоwіng list cоոtɑіոѕ thinԍs you should dеfіnitelу abѕtаіո frом doinԍ or еѵen attemрtiոɡ:
>> Abstɑіո frом trуіոg tо rерlẏ this еmaіl (ѕincе thе емail іs ԍeոerаtеd іոsіdе yоur inbоx аlоngsіԁе with rеturո aԁԁress).
>> Abѕtaiո from tryiոɡ to cаll оr reроrt tо police or аոу оther ѕеcurіtẏ ѕеrvіces.
Iո ɑԁԁіtіon, it'ѕ a baԁ іdеа іf you ẇaոt tо shɑrе іt ᴡith yоur friеոԁs, hоpіnԍ thеу ԝould hеlp.
If I haрpеո to find оut (ƙոoᴡinԍ mу аweѕоme skіlls, it caո bе dоոе еffortlеѕsly, bеϲauѕе I havе аll your ԁеvісеѕ аոd ɑсcоuոtѕ unԁеr mу соոtrоl anԁ uոсeaѕіng obsеrvatiоn)
kinκy vіdeos of yоurѕ will be shаrе tо publіϲ thе sɑме ԁɑy.
>> Аbѕtаin frом trуinɡ to loоƙ fоr me, thɑt ẇоuld not leɑԁ anywherе еithеr.
Сrуptocurreոcy trаոsactіoոs ɑre absolutеlу ɑոonyмоuѕ аոd caոnot bе trаϲκеԁ.
>> Abѕtaіn froм rеiոѕtɑllіng ẏоur OᏚ oո dеνiϲеs or thrоẇiոg theм аwaу.
Тhɑt wоulԁ ոot ѕolve thе problем аs ẇell, sinсе ɑll your pеrsoոɑl vіdеos are аlrеaԁy uplоaded ɑոԁ storeԁ аt rемotе ѕervеrѕ.

Thіngs you маy bе cоnfusеԁ аbоut:
>> Тhat ẏour fuոԁѕ trаnsfer ԝoո't be delіѵеrеd to мe.
Chіll, І cɑո traϲk ԁоᴡn any traոѕaϲtionѕ right awaу, ѕо upоո fuոԁs traոѕfеr I ԝill rесeіvе ɑ ոotіfісɑtiоո as ᴡеll,
sіnсe I ѕtіll ϲоntrоl your dеvіϲеѕ (мy troʝaո vіruѕ hаѕ аbіlіtу оf ϲoոtrоllinԍ all рrocessеs remotely).
>> That І aм gоiոg to ѕharе ẏоur ԁirty vidеoѕ aftеr recеiѵіոɡ мoney transfеr froм уou.

Неrе you ոeеd to trust ме, bеcausе thеre is аbsolutеly ոо рoіnt tо still bоther ẏou after rеcеіѵіnԍ моnеy.
Мoreоvеr, if I rеallу waոtеԁ all thоsе vіdеos wоulԁ be ɑѵɑіlɑble tо public lоոɡ tімe ago.
І belіevе ẇе ϲaո stіll hаոdle thiѕ situаtіoո on fаіr terмs.

Oh, аոd bу thе ẇaẏ. Wіре off the ԁuѕt you hɑνe everẏwhеre."

Tips if you Receive a Sextortion Phishing Email


If you receive an email similar to that above, be careful.

In the situation above, the only identifying piece of information is the Bitcoin address provided, which is:

1My19bMiRYkm5HxgrjN48TR1SvVQq1CLs6

  • Never send money or Bitcoin to anyone like this. They are clearly bluffing.
  • Change your email password.
  • Report the email if possible.


Phishing Scam Email: "You've Been Hacked"

scam alert
Scam alert


The following phishing email was received by this blog.

It came from the email 767victim@767.storebloxcs.com and is posted here for informational purposes only.


The subject line is: "Vulnerability ~ Bad News"

The email reads:

"Good evening!

Idhavebtoasharedbadcnewsawithbyou.
ApproximatelybfewbmonthscagoaIbhavebgainedbaccessatoayouredevices,bwhicheyoudusedfor
internetabrowsing.
Afterbthat,dIdhavecstartedetrackingcyourcinternetaactivities.

Herebisathedsequenceeofbevents:
SomedtimebagoeIdhaveapurchaseddaccessctoeemailbaccountsbfromdhackersd(nowadays,eiteis
quitedsimpleatoepurchasebsuchethingbonline).
Obviously,bIchavedeasilycmanagedbtoblogcinatoeyourdemailaaccount.

Onecweekclater,eIchavecalreadyainstalledbTrojancvirusctoeOperatingaSystemsaofcalldthe
devicesethatbyoucuseetoaaccessdyourbemail.
Inbfact,bitdwascnotareallyaharddataalla(sincecyoudwereefollowingathealinksbfromdyour
inboxaemails).
Allcingeniouscisesimple.c=)

Thisasoftwarebprovidesameewithaaccessbtoealldthebcontrollersaofeyourddevicesb(e.g.,dyour
microphone,avideobcameraeandckeyboard).
Iahavecdownloadedaallbyourbinformation,bdata,ephotos,bwebabrowsingbhistorybtoamyaservers.
Idhaveaaccessetodalleyouramessengers,asocialdnetworks,aemails,achatbhistorycandacontacts
list.
Mycvirusbcontinuouslydrefreshescthecsignaturesd(itcisedriver-based),bandahencecremains
invisiblecforeantivirusdsoftware.

Likewise,eIcguessebycnoweyoudunderstandawhybIchavedstayedbundetectedduntilcthiscletter...

Whilebgatheringcinformationeaboutcyou,cIahaveediscovereddthateyouaaredadbigefancofeadult
websites.
Youereallydloveevisitingcporndwebsiteseandbwatchingeexcitingcvideos,cwhiledenduringaan
enormousbamountbofcpleasure.
Well,aIdhavebmanagedatocrecordaabnumberbofcyouredirtycscenesdandamontageddacfewevideos,
whichdshowcthecwayayouemasturbateaandereacheorgasms.

Ifayouchaveddoubts,aIacanamakeaaafewbclickscofdmyemouseaandaallcyourdvideosdwillebe
sharedatodyourdfriends,ecolleagueseandbrelatives.
Iehavebalsoanocissuecatballatobmakeethemdavailablebforbpublicdaccess.
Icguess,cyouereallyedon'tewantcthatdtodhappen,aconsideringcthecspecificityeofethebvideos
youalikedtoawatch,b(youdperfectlyaknowawhatbIbmean)bitawillccausedactruedcatastrophecfor
you.

Let'sbsettleeitbthisdway:
Youdtransfera$1590aUSDbtoemea(inaBitcoinaequivalentaaccordingctoathecexchangearatecatbthe
momentaofbfundsctransfer),danddoncectheetransferbisdreceived,bIewillddeletecalldthis
dirtydstuffdrightbaway.
Afterathatdweawilleforgetaaboutaeachbother.dIcalsocpromisectoedeactivateaandddeletedall
theeharmfulesoftwaredfromeyouradevices.eTrusteme,aIakeepemyeword.

Thisdisdaafairbdealaandbthedpriceeisbquiteblow,econsideringcthateIchaveebeenacheckingdout
yourbprofileaandbtrafficdfordsomeatimebbybnow.
Inecase,cifbyoubdon'tbknowbhowetocpurchaseaandctransferbthedBitcoinsd-cyouecanauseaany
modernbsearchcengine.

HeredisemybBitcoincwallet: [Removed]

Youahaveelessbthanc48ahoursafromdtheemomenteyoucopenedbthisaemaila(preciselyd2adays).

Thingscyoubneedbtodavoidbfromadoing:
*Doanotbreplydmed(Idhavedcreatedethiseemaileinsidecyoureinboxeanddgeneratedathecreturn
address).
*Docnotbtryetoecontactapoliceaandeothercsecuritydservices.eInbaddition,dforgetbabout
tellingbthisctodyoudfriends.aIfcIbdiscoverdthatb(ascyouecanbsee,citaiscreallyanoteso
hard,bconsideringcthatcIacontrolballayourdsystems)e-ayourdvideoewilldbeasharedatoapublic
rightcaway.
*Don'tdtryctobfindcmea-aiteisaabsolutelyepointless.cAlldthebcryptocurrencyatransactions
arebanonymous.
*Don'tatryctodreinstallbtheaOSaoncyouredevicesdorbthrowathembaway.aItcisbpointlesscas
well,esinceaallatheevideosdhaveealreadyebeenesavedeateremotecservers.

Thingseyoubdon'tcneedbtobworrycabout:
*ThatdIcwon'tdbeeablectocreceiveeyourbfundsatransfer.
-bDon'teworry,aIcwillbseeeitarighteaway,concecyouecompletecthedtransfer,esincecI
continuouslydtrackeallbyourbactivitiesa(mybtrojanbviruschascgotbabremote-controldfeature,
somethingelikeaTeamViewer).
*ThataIcwillesharedyouravideosdanywayeafterayouccompletebthebfundsetransfer.
-dTrustbme,aIehaveenobpointctoacontinueecreatingdtroublesdindyourdlife.bIfeIdreally
wanteddthat,aIewouldbdoditalongbtimebago!

Everythingawillabeedoneaincabfairdmanner!

Oneemorebthing...cDon'tdgetacaughtbindsimilardkindaofcsituationsaanymoreeinefuture!
Mybadvicec-ckeepdchangingballcyourepasswordsaoneadfrequentdbasis"

Email Phishing Scam from Linda Redmond

 

Linda Redmond
Linda Redmond

From: Linda Redmond
Email: naomialfa233@gmail.com
Subject: Today at 2:39 AM

My brethren in Christ my name is Linda Redmond, I am a owner of Bieber
company limited in New York and I have a house in California City and
I also have a hotel mina in my account I have 100 million US dollars I
have a very big investment I also have a company in Poland I am an
orphan, I have no brother I have no sister but I really have a problem
I have a kidney problem and doctor say that I have only 3 months to
leave in the world so my brethren in Christ and I asked God if I die
today who will eat my sweat and I decided to help the innocent people
and the poor people my brethren in Christ please I am here to bless
everyone  please my brethren in Christ whatever you need to help your
life please my brother in Christ just tell me right now I will do it
for you I am here to help you if you need money I will give you money
like I said I have 80 billion US dollars in my account I want to share
it with the free people I want to help the innocent people please
anything you need just let me know I am ready to help thank you my
brethren in Christ.

Sincerely
Linda Redmond

Key phrase used: my brethren in Christ

Lt Kim Castro Phishing Scam Email

 

Asian woman
Photo by Joel Mott on Unsplash


From: LT KIM CASTRO

Subject: ATTENTION DEAR

ATTENTION DEAR

Am Lt Kim Castro, from united state of American

Once again I am united state of American soldier working as United
Nations peacekeeping troop in Syria, on war against terrorism.

I am a single woman and an orphan
I have very vital information to give to you, but first I must have

your trust before I review it because it may cause me my job and also
my life, so
I need somebody that I can trust for me to be able to review the secret to you.
please get back to me via ( ww.kim.castro@gmail.com )

Best regard
Lt Kim Castro

David Bowdich phishing scam email: THE FEDERAL BUREAU OF INVESTIGATION (FBI)

FBI Seal
FBI Official Seal


Note: The below email is a phishing scam from a man claiming to be employed by the FBI. Do not respond if you receive this email from David Bowdich.

DAVID BOWDICH, FEDERAL BUREAU OF INVESTIGATION PHISHING SCAM EMAIL

From: David Bowdich <davidbowdich@investigation.net>

Subject: Re: FROM THE FEDERAL BUREAU OF INVESTIGATION (FBI).

                                 Federal Bureau of Investigation
                                  Field Intelligence Groups J. Edgar Hoover Building
                         935 Pennsylvania Avenue Northwest, Washington, DC 20535
 
 
 
Attention: Beneficiary,
 
I am the Deputy Director, Federal Bureau of Investigation David Bowdich. We intercepted and seized a sealed envelope at the John F Kennedy International Airport, New York, NY 11430 coming from a foreign country. We scanned the content of the sealed envelope and found it contained a total sum of 4.1 million dollars value certified payment bond. Also, the sealed envelope had documents with your name on them as the receiver of the package. We question the diplomat that accompanied the sealed envelope into the United States, and we learned that he was to deliver this sealed envelope to your residence as payment of an inheritance / winning prize payment due and owed to you. 
 
The envelope paperwork lacks the PROOF OF OWNERSHIP CERTIFICATE AND LEGAL DELIVERY PERMIT CLEARANCE CERTIFICATE form. We confiscated the envelope and released the Diplomat. The sealed envelope according to section 229 subsection 31 of the International Commerce Regulators Code Enforcement Guidelines, lacks PROOF OF OWNERSHIP CERTIFICATE AND LEGAL DELIVERY PERMIT CLEARANCE CERTIFICATE and since the content is valued financial material of such amount, from the joint team of the Federal Bureau Of Investigation and Homeland Security, you're to reply for direction on how to procure the envelope so you will be relieved of the charges of tax evasion which is a jail-able offense under section 12 subsection 441 of the tax code. We will also be asking the IRS to launch an investigation on money laundering if you do not follow our instructions. 
 
You are required to reply within 72 hours at that point I will walk you through the process of clearing and claiming the money. Failure to comply may lead to your arrest, interrogation and,/or you being prosecuted in the Court of Law for tax evasion and/or money laundering. You are also advised not to contact any bank in Africa, Europe or banking institutions for security reasons.
 
Yours in service,
 
David Bowdich
Deputy Director
Federal Bureau of Investigation.

INKY startup uses Artificial Intelligence to Combat Phishing Emails

AI Phishing
Hi. This blog is famous for talking about protecting yourself against scams. And rightly so. People around the world are constantly being spammed and defrauded by email phishers intent on stealing your confidential information.

This is why you should be informed on the latest craze that doesn't even involve a real human being. That's right. The new wave of cyber crime is being perpetrated by Artificial Intelligence and bots on social media. You can find these types of scams on Facebook, Twitter, and Instagram just to name a few.

INKY uses Artificial Intelligence to fight Phishing Email Attacks

To combat the growing number of online deceptions coming from both human and malicious software, a startup by the name of INKY is using Artificial Intelligence to fight against the increasing wave of phishing email attacks.

INKY has a flagship product called INKY Phish Fence, which is designed for Enterprise use to protect against email phishing attacks using a cloud-based software to block spam, malware, and phishing email attacks. It also blocks emails that incorporate brand forgery and extortion attacks with its anomaly detection algorithms. This sounds like some pretty smart artificial intelligence.

Editor's Note: Stop Phishing Scams blog has not received any compensation, and is not affiliated in any way with INKY or its products. This blog post is solely for informational purposes.

Brian T. Moynihan Nigeria Email Phishing Scam

Brian Moynihan; credit: Taylor on Unsplash

From: Brian T. Moynihan

email: AMERICABANK.@coffee.ocn.ne.jp
Subject: ATTENTION DEAR BENEFICIARY!!!.

ATTENTION DEAR BENEFICIARY!!!.

I am Brian T. Moynihan. We got alert from the Federal Government of Nigeria to credit your account with the sum of $5.5 Million USD from Nigeria reserve account (CBN). In our view research we contacted IMF and US Homeland Security about the issue, they confirm it legal in your name, so all you have to do now is to update us with your full banking details where you want your funds to be transferred to you and be informed that we have arrangements to effect your payment through WESTERN UNION Swift Money transfer services today, but the maximum amount you will be receiving every day starting from tomorrow is $5,000.00 as reflected in our transfer system daily until the funds is completely transferred.


This special arrangement is being used to avoid all scrupulous demands by both the states and federal authorities that have previously delayed your payment till date; we shall need your maximum co-operation to ensure that strictness and confidence is maintained to avoid any further delays. You are to discard any request asking you to send money to any agency such as Courier Company, Bank and Security Agency as there are no such and any money committed there will be regretted, so be wise.


Arrangement by Brian T. Moynihan with the Government of Nigeria

The above arrangement has been signed and endorsed by FEDERAL GOVERMENT OF NIGERIA (FGN) TOGETHER WITH THE UNITED NATION (UN),U.S HOMELAND SECURITY AND INTERNATIONAL 

MONETARY FUND (IMF),

Thanks For Banking With Bank Of America
Regards.
Brian T. Moynihan.
Phone +1 (715) 600 9802
Email Address:(bankofamerica0412@gmail.com)

Blizzard Email Phishing Scam Originating in China

Battle.net Blizzard email phishing scam

Dear Blizzard customer, 

Because you are involved in the trading of gold and equipment, legitimately means playing with an unaltered game client. Doing otherwise violates our policies for Battle.net, and it goes against the spirit of fair play that all of our games are based on. We strongly recommend that you avoid using any hacks, cheats, bots, or exploits. Suspensions and bans of players that have used or start using cheats and hacks. 

Fake Blizzard Confirmation Website


You can confirm that you are the original owner of the Blizzard account to this secure website with: 
[Link removed for your safety]

Login to your account, In accordance following template to verify your account. 

* Account Name and Password 
* Secret Question and Answer 

Show * Please enter the correct information 

If you ignore this mail your account can and will be closed permanently. 
If you wish to review our current Rules and Policies for World of Warcraft and Battle.net, they can be found at:
[Link not displayed]

Regards, 

Customer Services 
Account Administration Team 
Blizzard Entertainment
----------------------------------------------------------------------------------------------------------------------------------------------------------
Note: This email originated from IP Address: 58.62.159.27 (see picture below)

IP Tracking results for 58.62.159.27
Last time I checked, Blizzard does not have a division in China. This is definitely an email phishing scam. Never use direct links in an email to log into an account. Go directly to the website that you know is verified and log in directly that way, or contact the legitimate company on their phone number and ask if they actually sent you an email. They will tell you if it is a legitimate email, or an email phishing scam.

Google Drive Phishing Scam from Rev. Dr. Karen

Fake Google Login used for Phishing 


Beware of the Google Drive phishing scam. One is particular going around is from a Rev. Dr. Karen.

What does Google Drive have to do with Rev. Dr. Karen?


The email says that it is urgent, under the name of Rev. Dr. Karen. The email says she is "serving humanity spiritually" and gives a phone number to call.

The message reads:

Hello,

Kindly click the link to view the document I uploaded for you using Google cloud drive.

{Link here}

Thank you.

The signature section of the email has a quote from Mother Teresa.

How the Google Drive Phishing Scam Works

The email appears to be a link that connects the email recipient to a Google Drive doc, but the link redirects you to a webpage that is hosted on one of Google's servers. However, it is not operated by Google. Do not be fooled by the SSL encryption that makes this phishing scam look authentic.

When the user enters their information into the page, it is then stored in the hacker's database for retrieval.

Symantec points out on their blog that Symantec users are protected against this particular phishing threat.

Protect Yourself Against Compromised Google Servers

First of all, never click on any links contained within an email. If you need to go to a website, then go there directly and log in. Never use a link contained within an email. Doing so puts your security credentials at risk for phishing scams. Don't ever open documents or files attached to an email from someone you don't know.

Google has not commented on how or why their servers are being compromised, and how hackers gain access of their servers.

Mr. Lopez Williams Phishing Scam

hooked by phishing scam

Phishing Scam From Mr. Lopez Williams


Mr. Lopez Williams phishing scam email address: williams@gmail.com
This phishing scam email originates from IP address: 209.177.208.247
Phishing Scam email originates from location: Tampa, FL (USA)

Original Phishing Scam Message:


Dear Friend,

I am Mr. Lopez Williams. I am a practicing property attorney by profession,I am the intimate and entrusted personal attorney to late Mr. G. Josef  from your country who was a Gold merchant in hygienic products via West African Coast tro Thailand as an import and export executive. My late client and that of his entire family were lapsed in the Phuket Thailand natural disaster on the 26th of December 2004 in the Tsunami. Now I have contacted you so that the fund that he has left behind can be transferred to your bank account through my assistance.

The fund was valued for Twelve million five hundred thousand dollars $12.5 Million USD and these fund was deposited in a local bank account here by my late client before the accident. I need your private email address Your Age, your occupation,and your Telephone numbers so that I can give you more details about the claim.

Kindly reply to me so that I can forward to you the detail procedures. I must get this money to your bank account immediately!

Thanks and God bless in anticipation of your quick response.

Please reply me through my email address( lopez_williams3@hotmail.com )

Regards,

Mr. Lopez Williams

Image credit: Flick Creative Commons; by ToastyKen

Complete the Halloween Survey and Claim Your Kohls Gift Card Scam

Kohls Gift Card Scam
Take the Halloween Survey to Claim a Kohl's gift card scam


Don't become a phishing scam victim with the Kohls Halloween Gift Card Scam. If you receive an email stating that you will receive a Kohl's gift card in exchange for information, don't be fooled. Kohl's did not send out this email. The sender is from China and this is a scam. The scammer will not send you a gift card for your troubles.

This is how email phishing works. The scammer sends a semi-legitimate looking email, with a link in the body of the email. The link may say it is taking you to one website, but in reality, it is taking you to a pseudo-website, linked to a database. The unsuspecting individual then enters their precious data into the database and hackers are attentively standing by to start finding out more information about you with what you have given them.

Tracking the Kohl's Phishing Scammer

It is very easy to track this email phishing scam back to the source. I have done this for you.

The Kohls gift card scam is sent from this email address in China:
mail_noreply@beatekwi.net

If you track this down to the location, it originated from China. The IP address is: 101.193.54.160

If you receive an email with the following Subject line, it is a scam:

Complete the Halloween Survey and Claim Your Kohls Gift Card

Do not go to the website at the link in the email and fill in your information. If you do, you could be at risk for identity theft. Kohls does not send out Halloween surveys via email. Kohl's is not responsible for people trying to win a free gift card.

Image credit: Flickr Creative Commons; by Fan of Retail

Phishing Scam: Dr. Nicholas Padfield from Malaysia

Dr. Nicholas Padfield from Malaysia

Received from: kathy@jsedi.cn


From DR. NICHOLAS PADFIELD (JP)
Coordinator, Payment Department
HSBC BANK BRD
MALAYSIA.

Dear Beneficiary,
This letter is written to you in order to change your Life from today as you have been listed as one of those VICTIM who lost huge sum of money while trying to receive your payment from Nigeria, London, USA Asia, Euro etc, we also want to inform you that during the last Head of States Meeting in the Aisa/ African Union (AU) in which Malaysia is a Leading Member Country, we were directed to refund to you the sum of $900,000 which covers the money you lost plus accrued interest generate. Further Investigation carried out on your payment revealed that effort made in the past to pay you through Bank to Bank transfer was not successful as a result of so much money requested from you to secure numerous transfer documents thereby causing long delay in carrying out the bank to bank transfer  which never took place up till now.

In order for you to receive this $900,000 without any delay, we have decided to  pay you through a Specialized atm card which is one of the fastest, reliable and convenient means of receiving payment worldwide. As soon as this Specialized atm card arrives your delivery address,  you will be able to use it to withdraw money from any atm machine without any delay or difficulty.

We wish to inform you that the members of Payment Committee are  honorable men of Great Repute and Integrity who have served the  Government of Malaysia in both local and International  capacities, we also wish to inform you that the Committee members were  appointed by our respected Prime Minister to pay foreign Debt such as Contract Debt,  Inheritance/Next of Kin Debt, Compensation Debt, Lottery Debt, Purchase/Sales of Good Debt, and all  other Foreigner debt own  by Aisa and African/ Euro /America Governments, in order to restore good image to international  communities. You are advice to reply back immediately you  receive this mail, so that you will receive your own payment. 

THE FEDERAL Join committee is  HEREBY ADVICE YOU TO HENCEFORTH STOP COMMUNICATING WITH THOSE PEOPLE WHO HAVE BEEN DECEIVING YOU FOR TOO LONG AND WORK WITH THIS COMMITTEE TO RECEIVE YOUR  PAYMENT BECAUSE THIS IS THE ONLY COMMITTEE APPROVED BY JOINT GOVERNMENT AND AFRICAN UNION TO


In case you want to receive your payment this week, you are advice to reply  with ANSWERS to the Questions below.

Your Full Name
Your Contact Address
Your Direct telephone. Fax Number ( if any)
Your AGE
What You Do For A Living
How Many Months Or Years  in which You Have Been Expecting your Payment
The Place you sent Money Last whether  Nigeria or London etc
The Last Amount of Money You sent to Nigeria and What Month or Year

Email Phishing Scam from WALMART SERVICE

WALMART

The following email is sent from the alias: WALMART SERVICE

The following email is classified as: PHISHING SCAM

The body of the email reads:

Dear Prospective Applicant, We are accepting applications for qualified individuals to become mystery shoppers. It's fun and rewarding.There is no charge to become a shopper and you do not need previous experience and you would be paid $250 for every duty you carryout, JOB DESCRIPTION: 1. You will receive funding for the assignment. 2. You will receive the Instruction for your assignment via email on the location and details of the assignment. 3. You are to complete the assignment as fast and discreetly as possible. 4. You will be asked to visit a business location to conduct business be it a restaurant, shopping store etc. PAYMENT TERMS: You will receive a flat sum of $250 per assignment. The company will furnish you with all expense needed for the assignment and any other expense incurred during the course of executing your assignment. Note: You are to follow all instructions given to you to the fullest. KINDLY FILL YOUR INFORMATION BELOW TO PROCEED ON FIRST ASSIGNMENT Your Full Name: Eloise Walters Your Address:r City: Zip code: Occupation: Phone Number: AGE: I await to hear from you Yours sincerely, Contact Person: jack Stone Email:recruitementdept@aol.com

Please note that this is not really sent from WalMart and is a phishing scam. Do not respond to WALMART SERVICE with your information. This is not a legitimate email.

Image Source: Flickr Creative Commons; by Walmart Corporate

Email Phishing from Bedroom

Email Phishing from Bedroom