Scam emails?

Fiver29

Is there anyway to tell if an email is a scam email?

I've just received one regarding an order I have supposedly placed with my credit card. Obviously I haven't placed any order, but I'm worried that my card might have been used fraudulently somehow.

Dear My Actual Name,

Thank you for shopping with YesAsia.com, the No.1 Online Asian Entertainment Store. Your order has been successfully placed. We will process and dispatch your order to you as soon as possible.

To view details of your order go to : {link removed by Fiver29}
order=141014122011BED

Username : My Actual Name
Order Number : 447043121
Payment Method : Credit Card
Shipping Method : Express
Number of Suggested Shipment(s) : 1
Item Description Catalog No. Quantity Unit Price (USD) Total (USD)
Logitech QuickCam Ultra Vision 304715754 1 208.99 208.99
Freecom Hard Drive 3.5" External Hard Drive 500GB 304777221 1 228.99 228.99
Sub-total : USD 437.98
Tax : USD 0.00
Shipping (Express) : USD 45.49
Order Total : USD 483.47

Once your payment has been received and verified your payment, your order will be processed. The estimated availability information shown during checkout will only apply after your payment has been verified.
This order confirmation has been automatically generated by our order tracking system.
Should you have any questions about your order, please visit the following website for updated order information details at "My Account".
Thank you for shopping at YesAsia.com, and please come again!
Yours sincerely,
Customer Service Department
YesAsia.com

This is the email with the links removed. I've hovered over the links and they start with a host name which isn't just Yesasia.com, but when I just type that part into my browser it reverts to Yesasia.com. But the path of the url leads to a .zip, preceded by invoice-and the order number above.

The email looks more professional than it does above, because it's all formatted properly.

Should I be worried?

waddler_8

Delete it - Definately don't click on any links or open any files. The .zip file will contain a trojan.

If you're worried about your card contact your Bank/card supplier but I doubt it has been used fraudulently.

Browntoa

http://nakedsecurity.sophos.com/2011/10/11/malware-laden-fake-yesasia-invoices-spammed-out/

Enterprise_1701C

Can you check your credit card account online? The fact it has your name on it would certainly concern me and I owuld be contacting my CC provider ASAP to check it has not been processed and to tell them not to process any payment for YesAsia.

If it had Dear Customer or suchlike I would not be so concerned.

Fiver29

I'm definitely not going to click any of the links, even before Browntoa's very useful link. That example also seems to have a name blanked out, which is strange. I wonder how they are getting people's names.

I will contact the CC when they open on Monday (they close at 6 on Friday for the weekend), just to be sure.

texranger

i got exactly the same one, so with the headers reported this to spamcop

spamcop come up with

[EMAIL="abuse@asianetcom.com"]abuse@asianetcom.com[/EMAIL]
[EMAIL="abuse@rackspace.com"]abuse@rackspace.com[/EMAIL]

so the report was forwarded to these

strange thing i dont have a credit card