dslreports logo
 
    All Forums Hot Topics Gallery
spc
Search similar:


uniqs
1074
VirtualLarry
Premium Member
join:2003-08-01

VirtualLarry

Premium Member

can someone explain this email?

Bonjour clients de visa carte,
Votre carte bancaire est suspendue, parce que nous avons rencontre un probleme sur votre diagramme..
Nous avons determine qu'une personne doit peut-être utiliser votre diagramme sans votre autorisation. Pour votre protection, nous avons suspendu votre compte bancaire a travers votre carte de credit. Pour soulever cette suspension, cliquer ici et suivre le procede indique pour mettre a jour votre compte par la carte de credit. Note : Si ce n'est pas accomplit,nous serons contraints de suspendre votre diagramme indefiniment, parce qu'elle peut etre utilise pour frauduleux. Nous vous remercions de votre cooperation dans le cadre de ce dossier. Merci,
Service à la clientele de soutien.

Copyright 2012-2013 Vérifier by Visa . Tous droits reserves.

Is this a phish? Or a legitimate email by visa, and has my identity been stolen in france?

Can someone translate?

Juggernaut
Irreverent or irrelevant?
Premium Member
join:2006-09-05
Kelowna, BC

Juggernaut

Premium Member

Full email headers are required to verify.

Been to France or Quebec lately?
VirtualLarry
Premium Member
join:2003-08-01

VirtualLarry

Premium Member

Never been to france or brasil.
Return-Path: <igrejaa1@sbr8.hostdime.com.br>
Received: from mx07.dca.untd.com (mx07.dca.untd.com [10.171.44.37])
by maildeliver09.dca.untd.com with SMTP id AABJ3UQGFA6Y2JVA
for <> (sender <igrejaa1@sbr8.hostdime.com.br>);
Sun, 19 May 2013 13:40:37 -0700 (PDT)
Authentication-Results: mx07.dca.untd.com; DKIM=NONE
Received-SPF: None
Received: from sbr8.hostdime.com.br (sbr8.hostdime.com.br [72.29.66.79])
by mx07.dca.untd.com with SMTP id AABJ3UQGFANHTNP2
for <> (sender <igrejaa1@sbr8.hostdime.com.br>);
Sun, 19 May 2013 13:40:37 -0700 (PDT)
Received: from igrejaa1 by sbr8.hostdime.com.br with local (Exim 4.80)
(envelope-from <igrejaa1@sbr8.hostdime.com.br>)
id 1UeAP9-002C4r-1i
for ; Sun, 19 May 2013 17:40:31 -0300
To: 
Subject: avis de suspension de votre compte !
X-PHP-Script: igrejaadpicos.com.br/social/xmlrpc/client.php for 41.137.57.164, 
41.137.57.164
MIME-Version: 1.0
Content-type: text/html; charset=iso-8859-1
From: centre-credit-carte.fr <service@credit-carte.fr>
Message-Id: <E1UeAP9-002C4r-1i@sbr8.hostdime.com.br>
Date: Sun, 19 May 2013 17:40:31 -0300
X-AntiAbuse: This header was added to track abuse, please include it with any abuse 
report
X-AntiAbuse: Primary Hostname - sbr8.hostdime.com.br
X-AntiAbuse: Original Domain - netzero.net
X-AntiAbuse: Originator/Caller UID/GID - [946 32003] / [47 12]
X-AntiAbuse: Sender Address Domain - sbr8.hostdime.com.br
X-Get-Message-Sender-Via: sbr8.hostdime.com.br: authenticated_id: igrejaa1/only user 
confirmed/virtual account not confirmed
X-Source: /usr/bin/php
X-Source-Args: /usr/bin/php /home/igrejaa1/public_html/social/xmlrpc/client.php 
X-Source-Dir: igrejaadpicos.com.br:/public_html/social/xmlrpc
X-UNTD-BodySize: 2711
X-UNTD-SPF: None
X-UNTD-DKIM: NONE
X-ContentStamp: 6:3:2893242031
X-MAIL-INFO:376dd1b4d46ded54d1c421d189213090f5b94194b070d031f1b049b185f9f9b51d5175d16da4ed
6514d18035d41d8509093dd53d64cd3d95cd849040b5794574381514b914606034e4b905346014c14d a54d2929
a1a499b4b4b1f5cd9565e444e0cd109095c0d490f1cdf089ed0050f1f1a4555d395d74b5159dc11174 74258dd1
40ed71dd99ed2da445c4ddc41d056d5d09d13819f4edc4a5c438197d34c1912538012011d9d9012579 0d59f5c1
4d3d09094da14d810564
X-UNTD-Peer-Info: 72.29.66.79|sbr8.hostdime.com.br|sbr8.hostdime.com.br|igrejaa1@sbr8.host
dime.com.br
X-UNTD-UBE:-1
 

Juggernaut
Irreverent or irrelevant?
Premium Member
join:2006-09-05
Kelowna, BC

1 recommendation

Juggernaut

Premium Member

Phishing.

Brazil is Portuguese language.

deke40
deke40
Premium Member
join:2003-01-23
Texas

deke40 to VirtualLarry

Premium Member

to VirtualLarry

Hello Guest Visa Card
Your credit card is suspended because we encounter a problem on your chart ..
We determined that a person may need to use your diagram without your permission. For your protection, we've suspended your bank account through your credit card. To lift the suspension, click here and follow the process indicated to update your account by credit card. Note: If this is not fulfilled, we will be forced to suspend your diagram indefinitely, because it can be used for fraud. Thank you for your cooperation in this matter. thank you,
Customer service support.

Ian1
Premium Member
join:2002-06-18
ON

Ian1 to VirtualLarry

Premium Member

to VirtualLarry
said by VirtualLarry:

...has my identity been stolen in france?

Probably not. But it will be stolen somewhere if you follow the link and enter the information.

Yeah, it's a phishing scam.

Anav
Sarcastic Llama? Naw, Just Acerbic
Premium Member
join:2001-07-16
Dartmouth, NS

1 recommendation

Anav to VirtualLarry

Premium Member

to VirtualLarry
Anything without your name is a scam. Anything that directs you to a link is a scam. Always use the proper login direct from the browser as all updates or information should be found at the regular site you login to.

Juggernaut
Irreverent or irrelevant?
Premium Member
join:2006-09-05
Kelowna, BC

Juggernaut

Premium Member

Indeed. And, when in doubt, just call the institution's number on the back of your card.
VirtualLarry
Premium Member
join:2003-08-01

VirtualLarry

Premium Member

I don't even have a regular CC.

DrStrange
Technically feasible
Premium Member
join:2001-07-23
Bristol, CT

DrStrange to VirtualLarry

Premium Member

to VirtualLarry
FWIW:

Good day, Visa Customers [incorrect use of plural].

Your bank card is suspended because we found a problem with your drawing [not sure what this means; maybe this is a new colloquial expression for 'account', or is it a two-step authentication?]. We've determined that maybe an unauthorized person should [compound verb misused here] use your drawing. For your protection, we've suspended your bank account through your credit card. To lift this suspension, click here and follow the instructions to update your account by your credit card. Note [wrong word used here]: If this is not done [misspelled or used wrong tense here], we will be forced to suspend your account indefinitely because it could be used fraudulently [not sure the word used here is a real French word]. We thank you for your cooperation in this matter. Thank you, customer support.

If I'd continued in my previous incarnation [one of several, many moons ago] as a foreign language teacher, this would be covered in red ink.

D-... Honte!
DrStrange

DrStrange to VirtualLarry

Premium Member

to VirtualLarry
Source IP is apparently 41.137.57.164.

Smartphone user in Rabat, Morocco.

Si vous venez vraiment du Maroc, votre français doit être meilleur que ça!!

deke40
deke40
Premium Member
join:2003-01-23
Texas

deke40 to VirtualLarry

Premium Member

to VirtualLarry
I wish Visa and Mastercard would come up with an Anti-Phishing option like my local credit union(170,000 members and growing).

A popup is over the login boxes with a phrase I made up so I know I am on the real credit union site.
TheMG
Premium Member
join:2007-09-04
Canada
MikroTik RB450G
Cisco DPC3008
Cisco SPA112

TheMG to VirtualLarry

Premium Member

to VirtualLarry
Definitely a phish, no doubt about it.

It is chock-full of errors. Very very badly written French.

Also, no legitimate bank would have you click a link like that. In fact, I've had cards cancelled by my bank twice and they have NEVER sent an email about it. They phoned and left a message on my home answering machine, and asked that I call them back. They did not even leave a number, they simply said in the message to call them at the number shown on the back of the card, or to visit them in person at the local branch.