Has my bank account been accessed?

dwhl

Hi everyone,

First, let me apologise if this is the wrong board to ask this question.

I have checked my email today and found the following message:

Thank you for shopping with us.

Your order # 1**** Sony RX-F18 8.0 MP Digital Camera has been accepted for the amount 779.00$

Your card will be charged in that amount.

Thank you for your purchase.

You can check the order in your profile.

Click here to see your order

Thank you.
Apple Online Store.

I clicked on the link and it led me to a website: can't quite remember but was somthing like "ipod deutsch"..looked like quite a dodgy website...I tried clicking on the link within this website where it said check your order but it kept going bak to the same page. The other links didn't appear to work as well.

I am unsure if there is a chance of money being taken from my account or whether this is a possible "bug" that has come with the link. Have used acg to scan comp since but can't find anything.

Any suggestions as to what to do would be gratefully received

David

Browntoa

SCAM...often trying to get you to download an attached "invoice" that contains a virus or Trojan

don't worry

might be worths scanning your PC with Spybot + your Anti virus

dwhl

oh, by the way, the email address from where the msg came from was from ***@applestore.co.uk

Tried typing in the website and it doesn't appear to exist

David

Browntoa

I get them all the time

sometime it says i have subscribed to !!!!!!

no hold on thats a real one lol

codetown

It is an entirely false message.
From the email address (which either does not exist or is of someone who has nothing to do with the email) to the data it contains. Sometimes is just virus or worm-produced. Some orther times (more dangerous) is fishing, i.e. asking you to introduce secret data posing as a respectable organisation (maybe your bank itself) to steal them.

Do NOT reply or enter any data whatsoever, not even if it looks fully legit and has headers etc. The only way to access your bank or other private data is via the direct URLS you know and can type on your own, NEVER via emails.

Toxteth_OGrady

You have fallen foul of a 'phishing' e-mail.

Google for 'phishing' and you will be better prepared to protect yourself next time you get one.

:cool:

TOG

charlieheard

dwhl wrote:

oh, by the way, the email address from where the msg came from was from ***@applestore.co.uk

Tried typing in the website and it doesn't appear to exist

One of the many problems with current basic email standards is that I can put vitually any text I want into the "from" address, and there is no easy way of checking it automatically. Hence spammers, etc can spoof addresses willy-nilly.

Sad to say, but never trust any email address unless you are expecting the mail... :rolleyes:

tigermatt

charlieheard wrote:

One of the many problems with current basic email standards is that I can put vitually any text I want into the "from" address, and there is no easy way of checking it automatically. Hence spammers, etc can spoof addresses willy-nilly.

Sad to say, but never trust any email address unless you are expecting the mail... :rolleyes:

You can run traceroutes etc. on the IP Addresses it was received from but most of the time these say "inconclusive" anyway.

windym_2

I had this email this week, it immediately opened a download window, I closed it down and ran my antivirus. Think I just got to it in time.

tigermatt

I used to always get these but now I have changed to a different email address and different email system I am very cautious about who I give my address to.

I also have a "No Spam" address which is seperate to my main address which I use if I am unsure about giving my address out or for one off times when I have to enter my address.

flaura

I've had loads of these.. they basically aren't linked to sender ID and are false e-mail addresses made to look like a real ones..

found this on hotmail

"Sender ID is an initiative championed by Microsoft and other industry leaders as a technical solution to help counter spoofing, which is the primary deceptive practice used by spammers.

E-mail domain spoofing involves forging a sender's address on e-mail messages. It can be used by malicious individuals to mislead e-mail recipients into reading and responding to deceptive mail. These phony messages can jeopardize the online safety of the user and damage the reputation of the company purported to have sent the message. Spoofed e-mail often contains "phishing" scams. In such ploys, a spammer, posing as a trusted party such as a bank or reputable online vendor, sends millions of e-mail messages directing recipients to websites that appear to be official but are in reality scams. Visitors to these fraudulent websites are asked to disclose personal information, such as credit card numbers, or to purchase counterfeit or pirated products.

Sender ID seeks to verify that every e-mail message originates from the Internet domain from which it claims to have been sent. This is accomplished by checking the address of the server sending the mail against a registered list of servers that the domain owner or e-mail recipient have allowed to send e-mail. This comparison is automatically performed by the Internet service provider (ISP) or recipient's e-mail server before the e-mail message is delivered. If the Sender ID verification passes, the message is delivered as regular mail. If the check fails, the message is further analyzed and may be refused by the receiving server, or flagged to the user as a possible deceptive message. Depending on the recipient's ISP or e-mail server software, messages that fail the Sender ID check may be flagged and sorted differently. For example, a simple icon may be displayed in the message to indicate the failure; the message may be sent to the junk mail folder for the recipient's review, or it may be automatically rejected and deleted.

There is no single solution to stopping all spam and online fraud. Rather, Sender ID is a significant first step that many in the industry are supporting to counter spam and online phishing attacks."