Careful Of This Scam

Status
Not open for further replies.
G

g33ks

New member
Dec 31, 2007
156
9
0
I know you guys are pretty good at detecting this kind of stuff on wickedfire but thought I'd throw this out there since it is pretty damn sneaky and almost tricked me (into clicking the link at least). Got 2 of these recently 1 for enom and 1 for adwords. Always look at the url...these guys are getting good.

This was the link: hxxp://adwords.google.com.session-52187992889625999725.12537906733689627804.sys56.ru/

--------------------------------------
Our system was unable to process a payment for your outstanding Google AdWords account balance using your primary credit card. For the time being, your account is still open, and your ads are still running. However, we require you to update the payment information in your AdWords account very soon in order to ensure continued ad serving.

Please update your credit card information in order to trigger our billing system to try processing your payment again. If you plan to use the same credit card(s), please use the 'Retry Card' button on the Billing Preferences page of your account. Otherwise, please follow the steps below to update the information in your AdWords account.

1. Log in to your AdWords account at: http://adwords.google.com
2. Click the 'My Account' tab.
3. Click 'Billing Preferences' link.
4. Click Edit next to the appropriate 'Payment Details' section.
5. Enter your new or updated payment information.
6. Click 'Save Changes' when you have finished.

In the future, you may wish to use a back up credit card in order to help ensure continuous delivery of your ads. You can add a back up credit card by visiting your Billing Preferences page or visit the AdWords Help Centre for more.

Tip: You can review the status of your billing on the Billing Summary page, under the 'My Account' tab. If a payment has been declined, click 'Payment Declined' beside the line item to review information for that particular payment. Once your payment has been processed successfully, you can view and print an invoice from your Billing Summary page.

------------------------------------------------------------------ This message was sent from a notification-only email address that does not accept incoming email. Please do not reply to this message. If you have any questions, please visit the Google AdWords Help Centre at https://adwords.google.com/support/?hl=en_GB to find answers to frequently asked questions and a 'contact us' link near the bottom of the page. ----------------------------------------------------------------

Thank you for advertising with Google AdWords. We look forward to providing you with the most effective advertising available.

Sincerely,

The Google AdWords Team
 


My FireFox seems to detect it as a forgery website. So I would have been protected.
 
dUDE I GOT THIS LETTER! i DIDNT DO ANYTHING! Thanks for warning though. Yes this is an active scam, I have been targetted
 
ya .ru...but they make a crazy ass long subdomain so you don't see it. they make it look like a legit google url unless you look at like the actual domain at the end.
 
I got something similar and reported it to google.
probably wasn't the only one but here was their response.
Thank you for your email, and thank you for bringing this issue to our
attention. The email and website you have discovered is not owned by
Google and is characterized as phishing. Our security specialists are now
working on disabling the site and email address.

Please note Google will never send unsolicited mass messages asking you to
re-enter your password or re-confirm your personal information. If you
need to change your account information, such as your billing details or
your password, always sign in to your AdWords account directly.

Keeping our users safe from phishing is something we take very seriously.
To help us keep yourself and others safe, we ask that you continue to
report any suspicious Google messages or websites to us at
phishing@google.com

We appreciate your assistance in keeping Google users safe from identity
theft.
Click to expand...
Be sure to report it.
 
Yep, I get similar ones from godaddy with a long ass subdomain that looks authentic. They never mention the domain is specific, just that the whois info was flagged as fake and I need to verify it through them.

Never clicked because I'm a very untrusting soul of emails I received but I'm sure that many people have fallen victim of this.
 
"Our security specialists are now
working on disabling the site and email address."

That almost sounds like they are just personally going to destroy the whole site mafiosa styles. Google is gangster.
 
I never click an email link to an account. Don't be lazy and open the browser yourself and go to your account to verify the email.
 
Status
Not open for further replies.
Top Bottom