Fake AmEx emails

Fake AmEx emails: a reader asks…

Hi Coach, I’m getting more suspicious all the time, thanks to you! Can you please verify that the email I’ve forwarded to you is a fake? It’s from American Express and warns me about a problem with my account. I don’t want to go someplace and find that my AmEx card won’t work, but I’m afraid to click on anything in the message.

You are right to be wary, the email is a stone-cold fake. What makes this worse than the usual fake emails I’ve been warning about (see this article for example), is that they’ve managed to get some domain names that look possibly legit. Notice the From line, which shows a domain name of aexp.com – not anywhere near the legit americanexpress.com domain name, but close enough that someone might overlook it. And when you hover over the internal links in the email, they all point to a domain americaexpressglobal.com which also looks sorta legit – but isn’t.

Fortunately, I use Spam Experts to pre-screen all my incoming email, and it caught the email. So I viewed it in their quarantine view and quickly saw that it was fake. Unfortunately, consumers can’t purchase Spam Experts services on their own, it has to be part of your email service provider (Web Host, Internet Service Provider, a Reseller, or via your Company (enterprise services).

Advertisement

What you can do is examine incoming emails closely. Look at the From line and make sure the domain name (everything after the @ sign) matches the company or sender’s official domain name exactly. Also hover your cursor over each link in the email (look at the bottom of your screen for where that link points) and make sure the links point to a legit domain name. Also look for signs that the email is fake – these days no financial institution should be sending you an email with a hyperlink to log into your account. If you use Outlook, you can send email to the Junk email folder – examine it there since that folder disables all hyperlinks. For webmail users (like the popular Gmail), you can easily report spam by using the button (stop sign with Exclamation point icon).

And keep doing what you’re doing – being suspicious of every email that makes it to your inbox. Feel free to send me a copy (or a screenshot) for verification, or forward this email to spoof@americanexpress.com (check with the official sender for what address to send suspect emails from other organizations). But whatever you do, don’t click on hyperlinks in unfamiliar emails!

This website runs on a patronage model. If you find my answers of value, please consider supporting me by sending any dollar amount via or . Thank you!

Go to Top of Page
{"cc_re__cc_re__cc_by_sa_3_0_en": ["mply endorsement, unless explicitly stated.</p><p align=\"justify\">Any elements on this website that may be linked to or displayed, including trademarks and product/service images, are for educational purposes only under fair use copyright law. PosiTek.net LLC purchases licensing for commercial imagery used on this website via <a href=\"https://www.shutterstock.com\" target=\"_blank\" rel=\"noopener\">Shutterstock.com</a> and any other imagery is licensed for our use via:</p></font><div align=\"center\"><a rel=\"license\" href=\"https://creativecommons.org/licenses/by-sa/3.0/deed.en_US\"><img class=\"lazy lazy-hidden\" alt=\"Creative Commons License\" style=\"border-width:0\" src=\"https://enpfvioj5m4.exactdn.com/wp-content/plugins/a3-lazy-load/assets/images/lazy_placeholder.gif\" data-lazy-type=\"image\" data-src=\"https://licensebuttons.net/l/by-sa/3.0/88x31.png\" /><noscript><img alt=\"Creative Commons License\" style=\"border-width:0\" src=\"https://licensebuttons.net/l/by-sa/3.0/88x31.png\" /></noscript></a><br /><font size=\"1\">Such work is licensed under a <a rel=\"license\" href=\"https://cre", "rg/licenses/by-sa/3.0/deed.en_US\"><img class=\"lazy lazy-hidden\" alt=\"Creative Commons License\" style=\"border-width:0\" src=\"https://enpfvioj5m4.exactdn.com/wp-content/plugins/a3-lazy-load/assets/images/lazy_placeholder.gif\" data-lazy-type=\"image\" data-src=\"https://licensebuttons.net/l/by-sa/3.0/88x31.png\" /><noscript><img alt=\"Creative Commons License\" style=\"border-width:0\" src=\"https://licensebuttons.net/l/by-sa/3.0/88x31.png\" /></noscript></a><br /><font size=\"1\">Such work is licensed under a <a rel=\"license\" href=\"https://creativecommons.org/licenses/by-sa/3.0/deed.en_US\">Creative Commons Attribution-ShareAlike 3.0 Unported License</a>.</font></div>\r\n\t\t</div>\r\n\r\n\t\t</div>\r\n<div align=\"left\"><font size=\"1\">Further information can be found in our copious small print: <a href=\"https://positek.net/terms-of-service/\" target=\"_blank\" rel=\"noopener\">Terms of Service</a> and <a href=\"https://positek.net/privacy-notice/\" target=\"_blank\" rel=\"noopener\">Privacy Notice</a> policies.</font></div></div>\n\t\t<div class=\"clear\"></div></div><div class=\"widget widget_text\" id=\"text-2"], "copyright__copyright__copyright": ["s of every email that makes it to your inbox. Feel free to send me a copy (or a screenshot) for verification, or forward this email to spoof@americanexpress.com\u00a0(check with the official sender for what address to send suspect emails from other organizations).\u00a0But whatever you do, don\u2019t click on hyperlinks in unfamiliar emails!\n\nThis website runs on a patronage model. If you find my answers of value, please consider supporting me by sending any dollar amount via or . Thank you!\n\nGo to Top of Page", "s of every email that makes it to your inbox. Feel free to send me a copy (or a screenshot) for verification, or forward this email to spoof@americanexpress.com\u00a0(check with the official sender for what address to send suspect emails from other organizations).\u00a0But whatever you do, don\u2019t click on hyperlinks in unfamiliar emails!\n\nThis website runs on a patronage model. If you find my answers of value, please consider supporting me by sending any dollar amount via or . Thank you!\n\nGo to Top of Page", "s of every email that makes it to your inbox. Feel free to send me a copy (or a screenshot) for verification, or forward this email to spoof@americanexpress.com\u00a0(check with the official sender for what address to send suspect emails from other organizations).\u00a0But whatever you do, don\u2019t click on hyperlinks in unfamiliar emails!\n\nThis website runs on a patronage model. If you find my answers of value, please consider supporting me by sending any dollar amount via or . Thank you!\n\nGo to Top of Page", "s of every email that makes it to your inbox. Feel free to send me a copy (or a screenshot) for verification, or forward this email to spoof@americanexpress.com\u00a0(check with the official sender for what address to send suspect emails from other organizations).\u00a0But whatever you do, don\u2019t click on hyperlinks in unfamiliar emails!\n\nThis website runs on a patronage model. If you find my answers of value, please consider supporting me by sending any dollar amount via or . Thank you!\n\nGo to Top of Page", "s of every email that makes it to your inbox. Feel free to send me a copy (or a screenshot) for verification, or forward this email to spoof@americanexpress.com\u00a0(check with the official sender for what address to send suspect emails from other organizations).\u00a0But whatever you do, don\u2019t click on hyperlinks in unfamiliar emails!\n\nThis website runs on a patronage model. If you find my answers of value, please consider supporting me by sending any dollar amount via or . Thank you!\n\nGo to Top of Page"]}