Overpayment Refund Scam Email Warning
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Plusnet Community
- :
- Forum
- :
- Help with my Plusnet services
- :
- My Account/Billing
- :
- Re: Overpayment Refund
Re: Overpayment Refund
22-11-2022 12:30 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Had this email today. It's an obvious scam to get your banking details, but it is very well designed to fool people that it is genuine.
Re: Overpayment Refund
22-11-2022 2:18 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
@willcutforth I did try to send the whole thing ( view source ) to abuse@plus.net... BUT GMAIL BLOCKED IT.. said it was spam/scam HUH !.
So... I then cut off the bottom half... the bit with the link in , and sent you ( abuse@plus.net ) the header and the main part of the text.
For all other information see my screenshot at the top of this thread.
Thank you.
Ex PN customer.
Re: Overpayment Refund
22-11-2022 3:24 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
I've had this too. I noted the reply address was incorrect and surmised it was a scam. I think it might be a good idea if Plusnet issued a general warning.
Re: Overpayment Refund
22-11-2022 4:35 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Question to those who have received the email.
Was the mail address and the account name yours?
It begs the question where were all of these mail@youraccount.plus.com email addresses harvested from?
In another browser tab, login into the Plusnet user portal BEFORE clicking the fault & ticket links
Superusers are not staff, but they do have a direct line of communication into the business in order to raise issues, concerns and feedback from the community.
If this post helped, please click the Thumbs Up and if it fixed your issue, please click the This fixed my problem green button below.
Re: Overpayment Refund
22-11-2022 4:39 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Yes, it was my Plusnet e-mail address.
Re: Overpayment Refund
22-11-2022 6:43 PM - edited 22-11-2022 6:44 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
I've had it too. No, there isn't necessarily a Plusnet security issue. It's addressed to myname@surname.plus.com i.e. my email address, not my name, although my name could be guessed from the address. So they only need to have got hold of my email address and, whilst I don't publish that, it's probably in a fair few places. Also any compromised email account that had received emails including my address could be a source - no need for that to be a Plusnet account of course.
Re: Overpayment Refund
23-11-2022 9:40 AM - edited 23-11-2022 9:41 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Has anyone checked https://haveibeenpwned.com/ to see where the security breach might have occurred and when?
This was no doubt an attempt to harvest your bank account details.
Re: Overpayment Refund
23-11-2022 11:53 AM - edited 23-11-2022 3:30 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
@dplusr wrote:
I've had it too. No, there isn't necessarily a Plusnet security issue. It's addressed to myname@surname.plus.com i.e. my email address, not my name, although my name could be guessed from the address.
That email address was compromised by a hack into Dropbox in 2012 along with 10's of millions of people who also had their emails and passwords harvested.
@shutter your email and password have been found in a spam list sent by a massive spambot called Onliner Spambot with a Netherlands IP address (711m unique email addresses)
Sadly, one of the downsides of ISP email addresses is that it makes it much easier to target our customers, of those 711m unique email addresses for example there will be a good number of plusnet email addresses. If there's enough it's worth creating a good piece of tailored phishing. I'm really glad that nobody has fallen for this yet.
Re: Overpayment Refund
23-11-2022 12:39 PM - edited 23-11-2022 12:40 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Pardon me for being slightly sceptical of that explanation ... but I've never used Dropbox in my life, so I would suspect another source.
And why from 2012 .... that's a long time ago ...
I wonder how many of the recipient email addresses did not even exist in 2012 ...
Re: Overpayment Refund
23-11-2022 12:46 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
@irritablegit Because these spam-artists keep 'going back' to these lists - especially the really big ones.
Good final point though, although that information will not be released, for obvious security reasons.
Seems to have gone quiet on this subject, so maybe the offending sender/server has been shut down?
Re: Overpayment Refund
23-11-2022 12:59 PM - edited 23-11-2022 1:03 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
@irritablegit wrote:
Pardon me for being slightly sceptical of that explanation ... but I've never used Dropbox in my life, so I would suspect another source.
all I did was pop your email address in here this is a central hub for all known hacks and distribution lists that have been found in the wild.
@jab1 it doesn't matter that this specific one was harvested in 2012 or indeed how many email addresses that received this weren't created then. As I'm sure you're aware lists get created from a number of different hacks from different periods of time and then sold on to groups looking to create scams.
Re: Overpayment Refund
23-11-2022 1:16 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
It wasn't MY email address ...
Re: Overpayment Refund
23-11-2022 1:20 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
@JonoH Yup, sorry, my reply was possibly not well-presented. As I'm sure you're aware, I've been around the WWW for almost as long as it has existed, and nearly been caught in the early days, but common sense - and good advice received back in those days, means I've never actually fallen for an email scam in all that time,
Re: Overpayment Refund
23-11-2022 1:26 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
@irritablegit wrote:
It wasn't MY email address ...
My apologies, I simply entered the email address that you use here on the forum. That email address has been compromised.
Check out the link it's really eye-opening to see just how many lists exists and how many places have been hacked.
Re: Overpayment Refund
23-11-2022 1:28 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
@JonoH Not sure about the password... but yes, I do know that my pn email address has been passed around... I`m not that worried.... as you can see, I am reasonably well awere of these scams. This particular one did not mention me by name, it only used the email address in the three blacked out areas. so I suspect it was, as you say, just passed around for the spammers to take advantage of.
Just thought I would pass the message on to PN via the forum, and for the benefit of others, who may well have been "taken in" by it.
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Plusnet Community
- :
- Forum
- :
- Help with my Plusnet services
- :
- My Account/Billing
- :
- Re: Overpayment Refund