New email scam?

[captain queeg]

I got an email today supposedly verifying a $2000+ order had shipped to me. There was an invoice for a couple new galaxy cell phones. The invoice showed a different address and no name. There was a button in the bottom to supposedly call their fraud line. I didn’t click it and checked both of my CCs, no activity. As I write this I’m sure it’s a scam, but a new one for me. Anyone else run into this one?

[Ocelot II]

1. I've seen a couple like that, including one purporting to be from Amazon.

I ignored them.

[slater71]

2. My wife got one from Amazon about a $900 dollar purchase. Fake.

[LetMyPeopleVote]

3. I just got my second call threating to turn off my power in 30 minutes

I called Centerpoint (my power company) and they never do cut offs by phone. I confirmed that my bill is fully paid and was asked to call identity fraud which I did

[left-of-center2012]

4. That has been around a while

I get them almost every day.
If you look at the email of the sender it is not the email of the company they pretend to be.

The email may claim to be from Amazon but the address will be
blah blah blah @gmail.com

[dickthegrouch]

5. Did you have to click on a link or a file to see the invoice?

If so disconnect yourself from the net IMMEDIATELY and run a very comprehensive malware scan.

NEVER open an attachment or a link you can't verify by independent means.

Mouse over any link and read what it says. if the domains don't agree, delete it ASAP.

(A domain is the part just to the left of the last period and the TLD or top-level domain which is usually .com, .ai, .gov and many more) thus in http://ljhjhlkh.example.com "example" is the domain. http://ljhjhlkh.example.rubbish.com "rubbish" is the domain and not to be trusted if the rest of the information purports to be coming from "example".

Another way they hide things is to use a construct similar to http://www.example.com/px/index.html?destination=http://example.rubbish.com which is equally bogus.

[dickthegrouch]

6. I don't even trust bit.ly these days

Which means I don't trust many of the things purporting to come from MoveOn, March for our Lives, or even the DNC to my SMS device.

There is SO much fraud out there you can't begin to guess that your donation is really going where you think it is if you use anything other than a fully spelled out URL with a recognizable and independently confirmed domain.

[bucolic_frolic]

7. I get texts from a bank saying it's ordered, click to cancel

I think they're after my cell phone #. But they don't seem to know my name so not worried.

[TheBlackAdder]

8. View email source, get the source Host/IP and target URL links. Google ICANN WhoIs Lookup.

.

In the lookup will be a registrar reporting email address, like [e-mail] (a common scammer registrar).

If a contact name is not listed, it will be by googling the registrar and phishing.

Forward that email to both registrars.

.

[Demovictory9]

9. not new. I've been getting those for few years. got one last week.

items usually run a few hundred dollars. Ship to an US address that doesn't exist.

[NQAS]

10. Yep

One was allegedly from Amazon telling me about an order - which I didn’t make - and giving me a phone number confirm or cancel.

Yeah, right.

[iemanja]

11. I get those

You can always tell it's a scam by the email address.

[tanyev]

12. I got something like that today, too.

The order amount was different, $500 something. I need to check my credit cards, but I'm pretty sure it's completely bogus.