Amex, Chase Fraud Protection Emails Used as Clever Phishing Lure

A phishing campaign is underway that pretends to be fraud protection emails from American Express and Chase that ask you to confirm if the listed credit card transactions are legitimate.

Customers of these banks should be wary of emails asking you to confirm a particular ‘fake’ credit card transaction from Best Buy, TOP UP B.V., and SQC*CASH APP. The emails can steal payment card information from the victim. Since the charges are fraudulent, victims often click no when asked if they are legitimate charges. The email then prompts the recipient to complete a long and arduous process that includes harvesting their password, address, birth date, SSN, bank card info, and credit card info.

If you receive an email and it looks legitimate, always be sure to check the URL of the page the email links to. If it does not look like a legitimate URL for the company, then do not visit it and junk the email.

Reference:

https://www.bleepingcomputer.com/news/security/amex-chase-fraud-protection-emails-used-as-clever-phishing-lure/