Broadband Tech > Security > Scam and Phishbusters > Information of your Transactions /Phishing+Malware attack

reply to Doctor Four

Re: Information of your Transactions /Phishing+Malware attack

This is new from AmEx

 
     Account Servicing: Notification
 
 
 
 
 
 
 
 
 
    Unusual Charge Activity
 
 
 
 
 
Your Account Number Ending: -x1xxx
 
 
 
 
 
 
 
 
 
 
 
 
Dear Axxxxxxxxxxxx,
 
At American Express, the security of your account is of the utmost importance.  In an effort to protect and serve our Cardmembers, we consistently monitor accounts for possible fraudulent activity.  Occasionally, we find it necessary to contact our customers to verify certain charges.
 
 
 
 
 
 
06/26/09
 
 
$342
 
 
Nextel Communications
 
 
 
 
In order to verify that these charges are legitimate, we ask that you please have your American ExpressÒ Card available and call the American Express Account Security Group as soon as possible at 1-800-824-9289.  Representatives are available 24 hours per day, 7 days a week to assist you.
 
You may also call the number on the back of your card and when prompted by our system, please enter your 15 digit American Express Card number.  This will automatically transfer you to our Account Security Group.
 
Please note that some transactions at gas stations, hotels and car rental merchants are pre-authorized at the time a reservation is made, and the amount shown above may not reflect the exact amount of your final transaction.
 
If we have already reached you, please disregard this letter.
 
Thank you for using your American Express Card.
 
 
 
 
Sincerely,
American Express
 
P.S.  To learn how to protect yourself on the internet and for information about Identity Theft, Phishing and Internet Security, please visit our Fraud Protection Center at www.americanexpress.com/fraudprotection.
 
 
 
 
 
Privacy Statement                 Contact Customer Service                  Add Us to Your Address Book
 

Asking people to sign into a "secure" web page is, IMHO, asking for trouble. Too easy to send a phish email that looks like that and includes a "helpful" link to their spoof site.

I guess that, to me, sending the last few digits of the CC number is better than sending a likely bad web link. At least the CC number gives legitimacy as to who sent it.