Scary scam email

greyfox

I also got one of these. I've never had any dealings with TalkTalk so suspect it may be linked to the E-bay breach some years ago.

SouthUKMan

It's 100% fraudulent activity - these emails are written in such a way as to worry you into taking some form of action. Some versions of this scam also try and reassure you (like this one does by saying I am a law abiding citizen - yeah right), while others simply try to scare you into action. The DOT file extension is a Microsoft Word file format that can harbour viruses. Best advice is to delete the entire email - and do not attempt to open it. If you really, really feel like you are compelled to open it - then use both an online and local virus checker to scan for viruses. But this is still not 100% guaranteed safe.

In terms of how scummy fraudsters get hold of your details, sadly it is all too easy. The most likely reason is that your details were stolen as park of a mass attack on a data holding organisation (for example, think the mass TalkTalk attack from a couple of years ago when thousands and thousands of customers had their info stolen). The stolen data is then sold onto even more lowlife fraudsters who write the emails you have received. Or, you could have fallen victim to a phishing attack - where you mistakenly enter your information on a website that looks like the real deal but isn't.

I know these emails can appear targeted at you and make you feel like you have reason to be concerned, but you will be one of 10s of thousands or more people to receive exactly the same scam. Don't respond - as this simply confirms to the scammers that you really do exist and are willing to engage with them.

EdwardB

I was caught up in eBay breach, luckily I use a dedicated email for each company I deal with (on my own domain), so pretty easy to spot. I changed the eBay email to another unique one, I have not have anything to old or new.

Jivesinger

Some more info on this scam (and the bad things which happen if you open the document) here:
https://nakedsecurity.sophos.com/2017/03/30/the-scam-that-knows-your-name-and-home-address-heres-what-to-do/

Obviously, as many people have stated above, you should not open the attachment.