Results 1 to 20 of 20
  1. #1
    lowrisk is offline Private Member
    Join Date
    June 2011
    Posts
    801
    Thanks
    80
    Thanked 180 Times in 132 Posts

    Exclamation Phishing SCAM claiming to be from Neteller and Moneybookers

    Hi Guys

    I wanted to take this opportunity to make you all aware, that there's a serious scam running round at the moment, which seems to have the intention of getting hold of your moneybookers or neteller login details!

    Yesterday, I got an email claiming to be from neteller, and then another one today, claiming to be from Moneybookers, to my email address which is tied to both of them, in the real world!

    Name:  neteller.JPG
Views: 2320
Size:  60.8 KB

    Name:  moneybookers.JPG
Views: 2447
Size:  75.7 KB

    Now, I ignored the neteller one, I did believe it could well be genuine, as I have a really old Neteller account, and didn't care about it. I thought the chances of the terms changing were very real, but I thought "well, just let it expire"

    However the moneybookers one did get my attention, as I receive commission to this account, and use it regular. I also was alerted to the fact that they both are almost identical in terms of layout and content!

    As I was using chrome, when I hovered over the click here button in the neteller email, the url was member.1neteller.com
    When I hovered over the click here on the Moneybookers email, the url was account.skrillv.com .

    I pinged both domains, and they were only registered recently, in Turkey.

    The email looks genuine at first, as the from email appears as customerservice@neteller.com etc, however in Outlook, I viewed source code of both the emails, and it showed several lines of code they have used, to spoof the email address, to thus make it appear more genuine and to look as though it came from a genuine email address.c

    The links where it says Check on your browser and "Is this mail really from Moneybookers" etc, funnily enough, neither worked!!

    I think the best thing we can all do is report these emails as phishing scams, and spread the word among operators and affiliates.

    Also, make sure you clean cookies before logging into the genuine sites, just in case your browser auto generates the real looking one!
    Last edited by lowrisk; 27 February 2014 at 7:52 pm.

  2. The Following 5 Users Say Thank You to lowrisk For This Useful Post:

    -Shay- (28 February 2014), Anthony-Coral (28 February 2014), Moonlight Cat (28 February 2014), PromoteCasino (28 February 2014)

  3. #2
    freebetking is offline Private Member
    Join Date
    August 2010
    Location
    United Kingdom
    Posts
    288
    Thanks
    16
    Thanked 163 Times in 76 Posts

    Default

    received the moneybookers one as well - it's the best one i've seen yet in terms of grammar and looking like the real deal, however moneybookers always addresses you by name where as the spammers always use an email address, at least for now, still i bet it suckers a few in.
    Enter a fantasy realm of Wizarding wins and giant jackpots at WizardSpins.com, an online casino portal filled with the latest casino bonuses and free spins.

  4. #3
    universal4's Avatar
    universal4 is offline Forum Administrator
    Join Date
    July 2003
    Location
    Courage is being scared to death...and saddling up anyway. John Wayne
    Posts
    28,119
    Thanks
    2,255
    Thanked 7,948 Times in 5,015 Posts

    Default

    I haven't gotten either one as of yet, but will watch for them and if I do get them I will look through my mail server logs to grab the ip address of the real sender.

    My first guess is that this is likely the first round of a bunch of these being sent from rented time on bot networks though so the ip may not help much.

    It's always good to warn affiliates though since when they involve payment methods such as the above affiliates are partcularly vunerable.

    Rick
    Universal4

  5. #4
    louie.wilson's Avatar
    louie.wilson is offline Former AM
    Join Date
    February 2013
    Posts
    310
    Thanks
    87
    Thanked 139 Times in 86 Posts

    Default

    Thanks mate, def a "nicely" done one. Will have our team aware.

  6. #5
    F-L-C is offline Private Member
    Join Date
    August 2010
    Posts
    1,048
    Thanks
    141
    Thanked 332 Times in 254 Posts

  7. #6
    -Shay- is offline Public Member
    Join Date
    November 2012
    Posts
    3,062
    Thanks
    12,211
    Thanked 3,133 Times in 1,686 Posts

    Default

    Thanks for the heads up on this.

  8. #7
    thebookiesoffers is offline Former Member
    Join Date
    November 2009
    Location
    Leicester, UK
    Posts
    3,225
    Thanks
    414
    Thanked 1,764 Times in 1,009 Posts

    Default

    also be aware of a google one which I fell for saying google sent you a doc in google drive

  9. #8
    JackTenSuited is offline Private Member
    Join Date
    March 2004
    Posts
    1,014
    Thanks
    23
    Thanked 335 Times in 208 Posts

    Default

    I wonder where they get the emails from? at least with paypal phishing attempts most people have paypal, can't imagine to many people have neteller/skrill.

  10. #9
    baldidiot is online now Private Member
    Join Date
    January 2010
    Posts
    4,440
    Thanks
    409
    Thanked 2,013 Times in 1,327 Posts

    Default

    I got the MB one too. The weird thing is that the email it went to is one I only use to receive moneybookers payments, which to me seems a tad suspicious.
    onlinegamblingwebsites.com - Formally known as goodbonusguide.

  11. The Following User Says Thank You to baldidiot For This Useful Post:

    -Shay- (28 February 2014)

  12. #10
    baileyrofe's Avatar
    baileyrofe is offline Public Member
    Join Date
    March 2014
    Location
    CAMBEWARRA NSW
    Posts
    11
    Thanks
    0
    Thanked 2 Times in 2 Posts

    Default

    many thanx for making all conscious...

  13. #11
    Casino Online Rating's Avatar
    Casino Online Rating is offline Private Member
    Join Date
    March 2014
    Posts
    322
    Thanks
    85
    Thanked 115 Times in 86 Posts

    Default

    Quote Originally Posted by baldidiot View Post
    I got the MB one too. The weird thing is that the email it went to is one I only use to receive moneybookers payments, which to me seems a tad suspicious.
    Some data leak from Moneybookers?

  14. #12
    grissha is offline New Member
    Join Date
    August 2015
    Posts
    6
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Default

    useful information and makes us aware, thanks

  15. #13
    Fruity_MariaFlorides is offline No longer with Fruity Affiliates
    Join Date
    October 2015
    Location
    Cyprus
    Posts
    56
    Thanks
    47
    Thanked 44 Times in 26 Posts

    Default

    Thank you for the heads up. I haven't received that email yet.

  16. #14
    universal4's Avatar
    universal4 is offline Forum Administrator
    Join Date
    July 2003
    Location
    Courage is being scared to death...and saddling up anyway. John Wayne
    Posts
    28,119
    Thanks
    2,255
    Thanked 7,948 Times in 5,015 Posts

    Default

    Maria,

    These particular emails were floating around in the beginning of 2014, but we should always be on the lookout for these types f fake emails attempting to get login and banking details.

    One of the best practices is that ANY TIME you get an email that says there is an issue with an account, do NOT under any circumstances follow the links in the emails but log on to the site in a normal fashion and if there is an issue you will likely be notified that way.

    If fr whatever reason you can not log in, contact customer service or support in the regular channels.

    Rick
    Universal4

  17. The Following User Says Thank You to universal4 For This Useful Post:

    -Shay- (11 December 2015)

  18. #15
    F-L-C is offline Private Member
    Join Date
    August 2010
    Posts
    1,048
    Thanks
    141
    Thanked 332 Times in 254 Posts

    Default

    I got one today



    You recently set primary the email address XXXXXX to your account.
    You need to confirm your registered e-mail adress in your account, please click the following link:
    Confirm E-Mail Adress The above link is valid for 7 days. You need to verify your e-mail adress as soon as possible.


    If you are unable to verify your e-mail adress, please contact the NeteIIer.

  19. The Following User Says Thank You to F-L-C For This Useful Post:

    Fruity_MariaFlorides (11 December 2015)

  20. #16
    Fruity_MariaFlorides is offline No longer with Fruity Affiliates
    Join Date
    October 2015
    Location
    Cyprus
    Posts
    56
    Thanks
    47
    Thanked 44 Times in 26 Posts

    Default

    Quote Originally Posted by universal4 View Post
    Maria,

    These particular emails were floating around in the beginning of 2014, but we should always be on the lookout for these types f fake emails attempting to get login and banking details.

    One of the best practices is that ANY TIME you get an email that says there is an issue with an account, do NOT under any circumstances follow the links in the emails but log on to the site in a normal fashion and if there is an issue you will likely be notified that way.

    If fr whatever reason you can not log in, contact customer service or support in the regular channels.

    Rick
    Universal4
    Thank you Rick for your advice!

    I am new to Skrill, so this post was very helpful. I normally call Skrill when I have any issues, I don't email them. But still this was a good post for me to read, I thank you to all members for sharing.

  21. #17
    Fruity_MariaFlorides is offline No longer with Fruity Affiliates
    Join Date
    October 2015
    Location
    Cyprus
    Posts
    56
    Thanks
    47
    Thanked 44 Times in 26 Posts

    Default

    Quote Originally Posted by F-L-C View Post
    I got one today



    You recently set primary the email address XXXXXX to your account.
    You need to confirm your registered e-mail adress in your account, please click the following link:
    Confirm E-Mail Adress The above link is valid for 7 days. You need to verify your e-mail adress as soon as possible.


    If you are unable to verify your e-mail adress, please contact the NeteIIer.
    Christmas is coming soon, so scammers need some cash

  22. #18
    F-L-C is offline Private Member
    Join Date
    August 2010
    Posts
    1,048
    Thanks
    141
    Thanked 332 Times in 254 Posts

    Default

    Quote Originally Posted by Fruity_MariaFlorides View Post
    Christmas is coming soon, so scammers need some cash
    Yes I couldn't post the screenshot for some reason but it did look like Neteller

  23. #19
    alice69's Avatar
    alice69 is offline New Member
    Join Date
    December 2016
    Posts
    2
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Default

    wow nice

  24. #20
    Arbman is offline Brand New Member
    Join Date
    March 2020
    Posts
    2
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Default

    Got to be extra careful with these.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •