Nectar Amex card, possible mailing scam

Nikko5

I received a mailshot in the post this week purporting to be from Amex Nectar card which asked you to go to a web-link and enter your name and a PIN number from the mailing (to get extra Nectar points).

However, when I clicked to confirm the entry of my details on-line, I got directed to an extremely dodgy looking URL of: http://surv.cheetahmail.com/s so I think this may well be a well-designed scam. :sad:

I am so wary of phishing e-mails, but because this one came through the post I am angry with myself for being caught out. Will phone and cancel the card first thing tomorrow morning......

Has anyone else received this dodgy mailing?

Richard019

Using a couple of domain name/ip tracking sites:

Cheetahmail.com was registered by Network Solutions (responsible for 7.6M domain names).

When you go to the site it comes up as Experian Cheetahmail. (Check with Experian?)

The IP address for the site is in America and belongs to Qwest Communications Corporation which through various mergers is the same company that owns the Bell telephone companies in the US.

If it's an Amex card it would seem reasonable for them to do a lot of their IT side over in the US. It looks genuine enough, if it's a scam then it's certainly a relatively well researched one, most can't even manage to spell basic words correctly never mind use feasible and reputable companies for all of their sites and their ownership.

Paul_Herring

Being used in at least one other scam:

http://answers.yahoo.com/question/index?qid=20070720110946AA2NNml

Nikko5

Thanks for the replies. I reported my card lost today to be on the safe side, nothing dodgy had been taken from it.

If this was a genuine marketing mailing from Amex then it was a shockingly ill-thought-out one using a dodgy web-site address like that!

King_Of_Fools

Was this the mailing that directed you to http://nectarpointsfaster.co.uk/MAY

Given that nectarpointsfaster.co.uk belongs to Amex, it looks genuine enough to me.

molar

I signed up for it. It certainly didn't ask me for my PIN number.

billion25

I got the same mailing. It's safe. It's unheard of for 'scammers' to send out targeted direct mail to encourage you to go to a phishing website. They'd never incur the expense of doing that -- they'd just send out spam e-mails. How would they know that you have a Nectar credit card?

Nikko5

King_Of_Fools wrote: »

Was this the mailing that directed you to http://nectarpointsfaster.co.uk/MAY

Given that nectarpointsfaster.co.uk belongs to Amex, it looks genuine enough to me.

Yeh, that was the one.

I do still think it's pretty irresponsible of Amex to use web-sites with dodgy looking URLs in the current climate 'tho..... :-(

marshall2k

Spam reported