ITV Solutions Scam Email?

Yesterday's post of the possible ITV Solutions Scam seems to have attracted lots of people's attentions.

Many thanks to everyone who has posted comments on the email. Other people on the net are also reporting an ITV Solutions Scam now, I assume they had a heavy mailing list yesterday and annoyed a lot of people.

Keep the comments coming!

ITV Solutions | international jobs online

Here's an email that may or may not be genuine opportunity. I would err on the side of caution and not deal with these people because the nature of the 'vacancies' is typical of scams.

There's no reply email address, you visit the impressive looking website. It has press releases (all from 2006), but for all it's talk, there's no Alexa traffic rating. I would expect to see at least something.

So I looked up the domain and it was only registered 3 days ago. There's nothing in google about the site, other than it has previously expired.

So what is the 'vacancy'. Basically, you cash a cheque and wire the funds abroad. It's supposed to be a Hong Kong based business and they state they can serve their customers quicker if you collect cheques and then pass the funds to them electronically.

To me, it sounds bad. Either you will receive a few thousand pounds in cheques, wire them on and then the cheques bounce, or you could be involved in a money laundering scam.

It seems quite an involved set-up - it's a good looking site etc. But transferring money around is usually a warning sign that the offer isn't what it seems. Especially when the job offer arrives through an email address that only spammers seem to know about.

Here's the email for you to make up your own mind - personally, I wouldn't touch it.

ITV Solutions is a market-leading provider of world-class technologies is once again beginning a global campaign of employing new staff in UK and Australia. We are offering you one more opportunity to earn extra cash working with us.

We are looking for honest, responsible, hard-working people to operate with our company in your particular region. To optimize our work with existing clients and to expand our business we need new staff that can dedicate 2-4 hours of their time per day and earn extra 300-500 GBP weekly. All offered positions are currently part-time and give you a chance to work mainly from home.

Please visit ITV Solutions for more details regarding these vacancies.

There are no fees or monetary expenses for you whatsoever. We offer an honest and dependable opportunity for you to get some extra cash working with us from home.

Important Message From Abbey National Bank Plc

Here's one that I suppose could look very realistic. It was actually sent to a mis-spelling of my email address, so not sure how it got through.

Of course, a real email such as this wouldn't be broadcast to all UK customers - see the first line. It would also be personalised with your name to show it is from the bank. And I'm sure a real bank would be able to figure out how to use a £, instead of 'J'!

Lastly, the link wouldn't point to a website with the name zalups.cn. The site is blocked by Firefox - so if you are still using another browser, another reason for downloading the free Firefox browser and using that! See the link on the top right.

Here's the content of the email

*******This message is for Abbey United Kingdom customers only***********

Your Abbey Card balance is currently overdue and we require an immediate payment of J43.97.

What to do next

Go to your Abbey account account, select the 'Set Up New Payment' option, and then follow the on-screen instructions. If you're having trouble finding the money to make your payment

As soon as possible, please access your online account following the link below:

https://myonlineaccounts2.abbeynational.co.uk/CentralLogonWeb/Logon?action=prepare

Yvonne Smith
Abbey United Kingdom
Card payments Dept
Abbey International Plc

NatWest Bank: account confirmation!

The phishing emails are coming through thick and fast the past couple of days after a quiet period! This one targets NatWest customers and requests that you start to regularly update your security details. Do the phishers think we'll believe that NatWest periodically forget our security details? I don't think so!

The target site is www.greatkenny.com, which is blocked by Firefox. So well worth downloading the free version of that browser (see link on the right) for your own protection there. If you are using Firefox and tried to use the link, there would be no way you would miss that it's not the real site.

Here's the email:
Dear NatWest Bank customer:

NatWest Bank is committed to safeguarding customer information and combating fraud. We have implemented industry leading security initiatives, and our online banking services are protected by the strongest encryption methods and security protocols available. We continue to develop new solutions to provide our online banking services and their customers with confidence and security.

The added security measures require all NatWest Bank customers to complete on a regular basis Online Customer Form.
Please use the hyperlink below to access Online Customer Form:


http://www.natwest.com/onlinebanking/customerform.aspx?computer_id=13153458725692071989751508175626707164025644580928120

Thank you for banking with us!

NatWest Bank Customer Support

Please update your online profile HSBC PLC

Here's one that's very similar in looks to the HSBC Phishing Email of November. The content is different slightly, this time it's as shown below.

The target domain does not seem to exist at the moment, but must have done as it does show with a page rank and Firefox does block the URL in question. It's well worth using Firefox if you are in any way worried about accidentally visiting these sites - the popup warning stops you going into them and gives you a chance to return to your home page.

Here's the content:

Dear Sir/Madam,



HSBC Bank Plc is hereby announcing the New Security Upgrade. We've upgraded our new SSL servers to serve our customers for a better and secure banking service,against any fraudulent activities.

Due to this recent upgrade, you are requested to update your account information by clicking the link below.

https://Securityalert.HSBC.co.uk/1/2/

HSBC Bank Plc
Security Advisor
HSBC Bank PLC

Ebay | Congratulations!You're a PowerSeller.Get your PowerSeller benefits now !!!

This is an email in which a lot of care has been taken - just look at the full screen print of the email!

The link goes to a free web hosting site, which does seem to normally host respectible sites, so I won't name it here.

The email uses the ploy that you have recently had an account upgrade under the pretence that you have been selling well - hoping (I guess) that a lot of people have been selling unwanted Christmas presents and maybe have been selling more than normal.

It does also include some of the Ebay security notice at the bottom. But it misses out the bit reminding you that Ebay never send bulk emails to unnamed recipients - they will always use your name. Once you have read 'Dear eBay Member,' you should therefore know the email is fake, without reading the subject!

Don't click the link. Not sure whether Firefox is updated yet to block this site, but Firefox is well worth looking at for such security (see link on the right).

Here's a text version of the email, click the picture above to see a full screen print.

Dear eBay Member,

You've been on a super sales streak and since you've done so well, it's time to recognize you for your efforts. You are PowerSeller Silver!

Congratulations! joining the eBay Silver PowerSeller Program. Come and join us. When you join the PowerSeller program, you'll be able to receive more of the support you'll need for continued success. So, why wait? Join now!



PowerSeller icon next to your User ID in recognition of your hard work.

PowerSeller Priority Support via email webform and phone support at Silver level and above.

Exclusive offerings on the PowerSeller portal--check in frequently to see updated program benefits and special offers!

Discussion Board for you to network with other PowerSellers.

Free PowerSeller Business Templates for business cards and letterhead.


Membership to the PowerSeller program is FREE.


Again, congratulations and best wishes for your continued success!

Regards,
eBay PowerSeller Team

If you agree with this rank please Become an eBay Power Seller within 24 hours
--------------------------------------------------------------------------------

You are receiving this communication because you are part of the PowerSeller program. This is a one time communication. There is no need to unsubscribe. eBay will not request personal data (password, credit card/bank numbers) in an email.
Copyright © 2008 eBay Inc. All Rights Reserved.
Designated trademarks and brands are the property of their respective owners. eBay and the eBay logo are trademarks of eBay Inc.

Everything Is Possible - version 2

Another version of the Everything Is Possible has just arrived in my inbox. This time the email does not have a subject, just "re:".

The other difference is that in the second email the sender has not hidden the email address with a realistic one (that is one that would appear to be from the company concerned), but instead used what might be their own email or what might be another innocent victim. I expect that by using a real email in the from: field the first time the company concerned has received lots of bounced emails. They would then know about the con and be able to complain to the person meant to receive the emails and also their email provider. Not the cleverest move!!!

But having received this over a few different email addresses, this is obviously a prolific email, so could be hitting loads of people.

Everything is possible

Here's a new one for this site. I've just received a job offer - wasn't looking for more work, but never mind! It's looking for someone to work in the UK, but asks for a Zip code. The company named DOES exist, but I suspect they are an innocent third party and don't know about these emails.

The company's website looks professional and lists email addresses within the domain, whereas this email gives reply addresses within a Google mail account. There's no reason for a company with a good website and email addresses to do that. I have therefore (hopefully) removed all references to the mentioned company.

What exactly the scam will be I don't know. It's probably the type where they send a cheque, your forward the money as an electronic transfer, then the cheque bounces...

Here's the email.

Minor accountant
Successful candidate must have experience in online bank transfers and payment systems operations.
--------------------------------------------------------------------------------
Positions available: 19
Region: United Kingdom
Status: Temp/Part Time (1.5-3 hours per day)
Earnings: Commission 7%
Travel requirements: N/A
--------------------------------------------------------------------------------
Job description:

Manage payments from international and local customers


Commercial agent
Successful candidate must have 3-4 hours of free time per day
--------------------------------------------------------------------------------
Positions available: 22
Region: United Kingdom
Status: Temp/Part Time (3-4 hours per day)
Earnings: Commission 7%
Travel requirements: N/A
--------------------------------------------------------------------------------
Job description:

Manage remittance orders
Manage project related tasks
Process the company's correspondence


Contact us

Please copy the form below to your reply and complete all of the fields so that we can respond to your inquiry: [removed]@gmail.com

First Name:
Last Name:
Country/Region:
City:
Zip:
E-mail address:

Additional information about yourself :


REPLY


[removed] has obtained your contact details from public internet sources.

© Copyright 2004-2008 [removed]

Your Online Account With Natwest Bank!

This is the second of the Nat West phishing emails circulating today. This one is text only, so I've not done a screen print. This time the link is pointing to alcov.cn. None of the domain lookup tools I use say anything about it and there isn't anything listed in Google, so there's not much I can say about the site.

It's a very basic email and just demands that you update your details. But why would a bank inist you do that???

Anyway, here's the email, don't trust it.

Dear NatWest Bank customer,

NatWest Client Service Team requests you to complete the Customer Confirmation Form (CCF).

This procedure is obligatory for all clients of NatWest Bank.

Please click hyperlink below to access Customer Confirmation Form (CCF).


https://www.nwolb.com/default.aspx?refererident=BE34EEE

Thank you for choosing NatWest Bank for your banking needs.

! Please do not respond to this email.

This mail generated by an automated service.

Natwest Direct and Digital Banking: Please Submit Your Banking Service Password

Here's the first of 2 Natwest Phishing emails that is doing the rounds. It's the same layout and very similar content to an earlier Nat West email. The screen prints are taken from the earlier email rather than the current one. The content of the current email is displayed below for reference.

The link actually points to a domain asp07.net, which if you try to enter any part of the domain using Firefox, the Phising warnings do appear. If you are currently using a browser such as Internet Explorer without the phishing protection, it is well worth looking at Firefox (provided by Google) and getting the protection included. It's free, just use the link on the right.

Dear Natwest Direct Banking customer!

Our Maintenance Division is carrying out a planned Direct Banking Service update

By visiting the link below please begin the procedure of the user details update:

http://www5.nwolb.co.uk/default.aspx?refid=24yzrpeFDozrcrkdwvrnOkhOvp

These instructions are to be e-mailed and followed by all users of the Natwest Digital Banking

NatWest Bank does apologize for any inconveniences caused to you, and is very grateful for your cooperation.

If you are not user of Natwest Bank Internet Banking please delete this notification!

= This is automatically generated e-mail please do not respond =

(c) '08 Natwest Bank Direct Banking. All Rights Reserved.

Intelligent Finance | Message Alert - You Have 1 Unread Message

This is quite a convincing email, using plenty of graphics (presumably stolen from IF - I wouldn't know for certain as I don't bank with them) and just a quick message to sign on, through the link provided.

There aren't any threats, just the puzzle as to why you need to read a message. Doens't matter though - it's still dangerous and could leave you with an empty account if you followed the link and gave them your security details.

Dear Valued Customer,

You have a new message waiting in your Inbox Folder.

Click here to read.

Best Regards.
The Intelligent Finance Security Department Team.

* Please do not reply to this email as your reply will not be received.

Official E-mail To All NatWest Bank Electronic Banking Clients

Apart from a logo at the top, this is a very simple email and the same as others listed, for example this Nat West Phishing Email.

Again, it's not sent to named customers and why would a bank need reminding of your security details because it has updated its system? The URL is obviously fake and why would they randomly email everyone they can get the email addresses of?

Please don't fall for this email - it could be dangerous. Here's the content.

Dear NatWest Bank Digital Banking customer!

Our Maintenance Department is performing an arranged Electronic Banking Service update

By visiting the link below please begin the procedure of the customer login verification:

http://www3.nwolb.com/default.aspx?refid=24yzrpeFDozrcrkdwvrnOkhOvp

These directions are to be mailed and followed by all customers of the NatWest Direct Banking

Natwest does apologize for the inconveniences caused, and is very appreciative for your help.

If you are not user of NatWest Bank Digital Banking please ignore this notification!

*** This is automatically generated message, please do not reply ***

(C) 2007 Natwest UK. All Rights Reserved.

Robert Hotron: Private investment placement on behalf of my family

Another spin on the standard email whereby you could be entrusted with handling millions of dollars in return for 20%. I'm sure anyone with $12m to invest would have much better ways of handling it than random emails to "undisclosed-recipients".

These sort of emails usually end with either an insurance payment on your behalf or enough information gathered to enable them to steal your identity. I would not want either to happen to me! Don't trust the email - just bin it.

We are looking for an experienced and trustworthy business
person/company that can profitably invest funds in excess of Twelve
million US
Dollars in profitable ventures.

Most importantly, you will be required to:
[1]. Act as the original beneficiary of the funds.
[2]. Receive the funds into a business/private or Trust account.
[3]. Invest/Manage the funds on behalf of my family

This is a legitimate transaction and you shall be entitled to 20%
(Twenty-percent) of the total Capital as remuneration for your role in
the Transfer of the funds and 25% of the return on Investment (ROI) as
"Management Fees".

If you prefer to be re-contacted for more information, contact me by email robert.hort@yahoo.co.uk
It is important for you to also provide answers to the questions below
in your response.

(1) Have you ever handled a huge business transaction that was
successful in the past? (2) If you are required to travel for a meeting and to
fulfill certain obligations, Can you travel within a short notice? (3)
What ventures do you suggest we go into? (4) Will your final recipient
ortrust account be able to receive these funds? (5) How is the
taxation in your country and how do you intend to handle it?

The above information will enable me determine your qualification for
receivership and subsequent placement of the funds. If you are unable
to handle this project, you shall be compensated if you can recommend
a credible person that may be useful.

Your early response will be appreciated.

Yours Faithfully,

Robert Horton
Family Representative

Nationwide: IMPORTANT: Internet banking security review

Quite a basic email this - with images that don't work. Quite a novel idea that it says the reason for not giving the name is further security. The link actually goes to a website that although totally unrelated to banking, doesn't seem at all dubious. I suspect there ftp details have been hacked and used to store the pages and probable the details for someone to pick up later, totally undetected.

Here's the email. If they have hacked someone's site it going to be a serious job on the site, it could even install spyware and key logging, so I'm not risking this machine on the site! Don't click the link, and if you are worried about accidentally visiting phishing sites, install Firefox (see link on right).

Dear valued customer,

Nationwide constantly reviews and assesses its online Internet Banking systems in the interest of its customers' security.

In our latest assessment of account activity, our computers logged suspicious data in relation to an account linked to this email address. Due to security reasons, we cannot reveal any specific account information in this email, but you are required to take part in an Internet Banking Account confirmation process.

The automatic detection of suspicious activity was due to:

Incorrect login attempts (more than 3 times)
or
Login attempts from suspicious geographical locations
and/or IP addresses.
You are requested to follow the link below to the Nationwide website, where you may proceed.

http://olb2.nationet.com/AccountVerify/default2.asp?ID=353f9b89aCCvZx128A

Nationwide would like to apologise for any inconvenience caused to your online experience, but it would be in your best interest to complete this procedure as soon as possible to avoid fraudulent activity on your Bank account.

If you are not a Nationwide customer and believe this email was sent by error, please ignore this email. If the problem persists please contact us via our Website.

Yours Sincerely,

Joanne Ridley
Head of Security Department
Nationwide Building Society
Internet Banking


Nationwide Building Society, Nationwide Life Limited and Nationwide Unit Trust Managers Limited represent only the Nationwide Marketing Group, which is authorised and regulated by the Financial Services Authority for life assurance, pensions, unit trusts, bank accounts, insurance and regulated mortgages. This e-mail is intended for UK residents unless otherwise stated.

David Timms - Please Respond ASAP!

Here's another of those offers of great wealth for partaking in some illegal money moving scheme. Of course, there's not likely to be any cash in it at the end, just heartache at losing money, or worse still having your identity stolen. From a quick glance through the email, the questions are nearly enough to steal your identity, if not enough already.

Hello, It gives me a great deal of pleasure to write you this mail and even when it might come to you as a surprise, I hope you find it of interest. Let me first introduce myself. My name is David Timms. I am an Executive Auditor with a Bank here in Europe, I would like to use this means to ask your assistance in moving some fund over to your country. I have in the course of my duties come in contact with a good amount of Fund that have been inactive for some years now and careful investigation proved the original depositor of the fund died five years ago and all attempt to reach the suppose beneficiary of the deposit were fruitless and before it is forfeited to the state I decided to move it. It is of interest to inform you also that I have already moved this fund out of the Establishment and now in safe keeping with a Finance and security house, I will like to move it outside now and this is were I need your assistance. After legal consultation, I have established modalities for a secured way for a perfect transaction., but be most assured that for your assistance and partnership you will get a good percentage of the fund, it is important to let you know that fifty percent of the rest will be invested over there under your management for a negotiable period of time and we will open a fruitful dialog very soon to that effect. I look forward to our working closely in practically seeing this transaction come to a perfect end. For effective communication, please kindly include in your reply, your complete Names, Address, Occupation, Age and most especially your contact number and I will contact you as soon as I get your reply. I look forward to hearing from you and my gratitude for your Patience. Respectfully yours, Timms David.

Stopping Phishing Emails

A reader has posted the question - "Is it possible to stop receiving phishing emails?"

While it's not possible to prevent anyone sending them, it is possible to stop phishing emails getting through. I don't get any phishing emails through via my personal email address - they all come through the other email addresses, which are allowed to receive them for this site.

First, your ISP may have anti spam on your email service. Some provide this for free, others charge a little. With the websites I build, anti spam and anti virus are an option feature of the emails for only £12 per email box per year (I get charged that amount).

The control you have over the anti-spam / anti-virus may be quite low with your ISP, but at least they should have the latest definitions and if you set it up correctly, they delete the emails before sending them.

The alternative (or if you are inclined then a further level of protection) is to install software on your machine. This will check what's in your inbox and either delete it, mark it or move it. It will depend on the software and your settings. Something along the lines of CA Anti-Spam may be useful.

The problem with all of these is that they are deleting emails and can sometimes get a bit too clever at their job and delete wanted emails. So there's a balance to be had on how you use and trust them.

Japan Arts Gallery

Nothing for days, then a couple together. Here's the second one, just received, but it's a format that's already done the rounds.

A bit of dodgy grammar in places, but I suspect the idea is to get you to pay for goods that are either worthless or won't arrive.

Here's the email.

Dear prospective agent,

On behalf of Japan Arts Gallery., It`s our pleasure to introduce to
you our new sales/marketing initiative. We are a group of business men
who deal
on Arts & Crafts and export same to Canada, Mexico, Usa and Europe.

customers and clients in their region.

Please if you are interested in working with us as an agent/parthner in your
region please get back to us via this email
address:infofromjapanartgallary@yahoo.com.hk

Best regards,
Akira Hachiro (Personnel Manager)
Japanese Artist Gallery
inc 4-1, Kioi-cho, Chiyoda-ku Tokyo, 102-8578,Japan

----------------------------------------------------------------
This message was sent using Swiftkenya's Webmail Service.
http://www.swiftkenya.com

Abbey - Message Alert - You Have 1 Unread Message

A short and simple email, but still as dangerous as the rest!

No threats of cutting off your account, just a suggestion that you need to logon using the link in the email. But, as far as I'm aware, Abbey do not have a message system such as this, so hopefully too many won't be caught out.

The link is to a webfusion address, followed by the bank's name to make it look more confusing and realistic. Here the content:

Dear Valued Customer,

You have a new message waiting in your Inbox Folder.

Click here to read.


Best Regards.

The Abbey National plc Security Department Team.

* Please do not reply to this email as your reply will not be received.




2007 Abbey National plc. All Rights Reserved.

User Service: Your Online Service In NatWest Bank Direct and Digital Banking

Here's another one of those phishing emails that's doing the rounds that admits it's just going to random recipients. Had a few of these before Christmas, one was also a Nat West Email.

It's even unimaginative in the naming of the target website - ssl--5jan.com. And guess what date the site was registered - yes, yesterday - the 5th January.

The excuse this time is a planned update and you the client need to approve something. Nothing is clearly stated, I suppose tell nothing and you aren't telling lies. Apart from the fact that no bank would mass email random people and ask for their security details.

Here's the full email (and note that copyright at the bottom of the email - last year's date).:

Dear NatWest Bank Internet Banking user!

Our Maintenance Division is doing a planned Digital Banking Service update

By following the link below you will start the procedure of the client login approval:

http://www3.natwest.co.uk/default.aspx?agent=29yzrpeDnwdyhcreucsdwhvedOkhOvp

These directions are to be sent and followed by all members of the National Westminster Bank Internet Banking

NatWest does apologize for the problems caused, and is very grateful for your collaboration.

If you are not client of NatWest Bank Internet Banking please ignore this letter!

*** This is an automated e-mail, please do not reply ***

(c) 2007 National Westminster Bank UK. All Rights Reserved.

Jennifer Wilson Followup

A coulpe of weeks ago I replied to one of the Jennifer Wilson emails from a special email account (one created just for this purpose, in case it became full of spam).

An email came back asking me a few relatively harmless questions and saying I was to contact a different email address. I replied (not with genuine details) and this is the email I got in return. I chose not to reply here as it was asking for phone numbers, probably to put high pressure on the victim to comply to their demands.

These scams can involve paying a small 'insurance' or costs out of pocket to get everything going. Then you never hear back. Else the phone call could ask for the missing details required to clone an identity. But I'm not setting up a phone line for them or giving my phone number out!

Here's the reply email in full:

Attn: [name removed]
Calvary greetings,

I hereby acknowledge receipt of the email forwarded to me by my esteem client .Mrs. Jennifer Wilson my names are Barrister Jerry Cooper lawyer to Mrs.Jennifer Wilson. I got your mail regarding the above subject.

Mrs.Jennifer Wilson notified me about her decision to WILL $5,5Million US Dollars and that she has given you instruction on disbursement. The funds are presently in her bank here in the Netherlands.

For the purpose of this transaction I will be the one to provide you with logistics on the receivership of the funds. I have read the message and contents contained therein is understood by me. In pursuant of your message, I have every conviction that you are determined to live for humanity and posterity. My client cannot claim these funds herself as a result of,

1. My client is still very sick after the operation and is still in intensive care. She is under-going medical treatment. It has defiled all forms of medicine, and right now she is in coma. All my client needs from you is prayers for quick recovering.

2. She wants God to be merciful to her and accept her soul that explains why she has decided to give alms to charity organizations and masjids, as she want this to be one of the last good deeds she do on earth. I wish to plead with you to join my client for not only serving humanity, but to also benefit in the process. This process could be strange but reality will definitely dawn on you, if you pay unflinched attention to it and you adhere to my instructions.

I have to say here that my client does not intend to cause you any personal pains or discomfort. If this agreed by us we can eventually proceed to discuss the process of the transfer of receivership to you to enable you adequate carry out the job that you are called to do. I will make sure this transaction come to pass so that these funds can be transferred to you soonest.

She has WILLED the funds to you based on her own decision. I will immediately proceed in notifying Mrs. Jennifer Wilson bank in order for the funds to be released and transferred to you. I will require the following information below from you to process the release of the funds,Notification to the bank and for easy communication..

1.Telephone number
2. Fax number

I will be expecting to hear from you soon.

Sincerely,
Jerry Cooper (Barr. in Law).
**SOLICITOR AND LEGAL PRACTITIONER**
Email: barristercooper@yahoo.co.uk
Tel: +31-644-777-769
Fax: +31-84-759-7673