Welcome to WebmasterWorld Guest from 54.145.58.37

Forum Moderators: buckworks & eWhisper & skibum

Message Too Old, No Replies

Heads up: Adwords spam "please update your billing info"

     
3:31 pm on Mar 21, 2008 (gmt 0)

Senior Member

WebmasterWorld Senior Member 10+ Year Member

joined:May 6, 2005
posts:863
votes: 0


Similar to the paypal type of spam "update your details" first one I've seen and found no mention on WW, link points to China
5:01 pm on Mar 21, 2008 (gmt 0)

Senior Member

WebmasterWorld Senior Member 10+ Year Member

joined:June 2, 2006
posts:2154
votes: 3


Got two emails today - first time. Pointing to .cn site.
5:42 pm on Mar 21, 2008 (gmt 0)

Senior Member

WebmasterWorld Senior Member adwordsadvisor is a WebmasterWorld Top Contributor of All Time 10+ Year Member

joined:July 9, 2003
posts:4799
votes: 0


In this case - or any other similar case - if you see what you suspect to be phishing email intended to look as if it came from Google AdWords, I hope you will take a few minutes to send all the pertinent details to the AdWords support team.

Thanks in advance!

AWA

6:06 pm on Mar 21, 2008 (gmt 0)

Senior Member

WebmasterWorld Senior Member 10+ Year Member

joined:May 6, 2005
posts:863
votes: 0


AdWordsAdvisor I am not an active adwords user, can you sticky me the email address and I will forward it on
11:35 pm on Mar 21, 2008 (gmt 0)

Senior Member

WebmasterWorld Senior Member adwordsadvisor is a WebmasterWorld Top Contributor of All Time 10+ Year Member

joined:July 9, 2003
posts:4799
votes: 0


AdWordsAdvisor I am not an active adwords user, can you sticky me the email address and I will forward it on

Excellent - thank you, wheelie34.

If you do not have an AdWords account, please use the link below (which may also found at the bottom of each page in the AdWords Help Center in case you ever need it again) and select the 'other' radio button.

[adwords.google.com...]

AWA

12:55 pm on Mar 23, 2008 (gmt 0)

Junior Member

10+ Year Member

joined:Apr 3, 2006
posts: 113
votes: 0


I received one of these and forwarded it to spam@google.com
3:32 pm on Mar 24, 2008 (gmt 0)

Preferred Member

10+ Year Member

joined:June 8, 2006
posts:556
votes: 0


I got the same e-mail last night. Of course, I didn't click on the link, but did go directly to Adwords to see if it was right out of curiosity and it was still right. So, I just deleted it and said to myself...yet another paypal type of phishing attempt. Sigh.
1:27 pm on Mar 26, 2008 (gmt 0)

Preferred Member

10+ Year Member

joined:June 8, 2006
posts:556
votes: 0


I just got ANOTHER one last night. Sheesh, and they can't even spell right in the subject line, LOL. Other than that is looks EXACTLY like a Google mail. But, rollover the link and sure enough it goes to some .cn domain. Be careful, people!
6:28 pm on Mar 26, 2008 (gmt 0)

Senior Member

WebmasterWorld Senior Member 10+ Year Member

joined:Mar 24, 2002
posts:1094
votes: 0


Yes nasty. I got one on a yahoo mail
6:54 pm on Mar 26, 2008 (gmt 0)

Senior Member

WebmasterWorld Senior Member jtara is a WebmasterWorld Top Contributor of All Time 10+ Year Member

joined:Nov 26, 2005
posts:3041
votes: 0


I got one of these the other day. It was obviously a phishing attempt, so I ignored it and forgot about it until just now.

I did wonder, though: where did they get the email addresses?

7:29 pm on Mar 26, 2008 (gmt 0)

Preferred Member

10+ Year Member

joined:Aug 19, 2006
posts:524
votes: 0


I did wonder, though: where did they get the email addresses?

I've received a couple of emails at addresses that are not associated with my AdWords account, and no email to the actual address I use for AdWords. So it's not as if they somehow got a list of AdWords users' email addresses. They probably bought a general list of email addresses from the same source as other spammers and fraudsters.
8:54 pm on Mar 26, 2008 (gmt 0)

Senior Member

WebmasterWorld Senior Member jtara is a WebmasterWorld Top Contributor of All Time 10+ Year Member

joined:Nov 26, 2005
posts:3041
votes: 0


So it's not as if they somehow got a list of AdWords users' email addresses.

The one I got was to my Adwords email address. It's an address that I use only for that purpose.

It wasn't about updating account information though.

I know we're not supposed to post emails here. But maybe the moderators will indulge me with posting an excerpt of an email from an anonymous phisher.

Anybody else get this one?

Special Notification.

Dear Internet User, We are happy to inform you that your email address have emerged winner of
(EUR 750,000) in Europe Lottery Award.

The online cyber draws was conducted from an exclusive list of 500,000 email addresses of
individuals and corporate bodies picked by an advanced

automated random online selection from
the web. No tickets were sold.

It goes on to give contact information - a name, phone number, and email address. And, then, the punch line:

Your prize award has been insured with your email address and will be transferred to you upon meeting the requirement
of the gaming board authority which includes your statutory obligations

Your "statutory obligations" would, presumably, be pre-payment of the "taxes" on your "winnings".

Don't think anybody here would actually fall for this one...

9:04 pm on Mar 26, 2008 (gmt 0)

Full Member

10+ Year Member

joined:June 16, 2004
posts:249
votes: 0


I got 2 of them - both different .cn domains. Forwarded them both to what I thought was Google's security team, but not sure if I forwarded to the correct address(es) - I think I forwarded to abuse, spam and/or security ...

Both were sent to an address I use for very few things - and my Adwords account is not one of them.

[edited by: MamaDawg at 9:08 pm (utc) on Mar. 26, 2008]

10:35 pm on Mar 26, 2008 (gmt 0)

Senior Member

joined:Dec 29, 2003
posts:5428
votes: 0


actually that email was pretty useful. I moved so my address was wrong in their system.
11:02 pm on Mar 26, 2008 (gmt 0)

Junior Member

5+ Year Member

joined:Nov 12, 2007
posts:96
votes: 0


JTara, I got that same message from someone. I announced my good luck to my coworkers and then deleted it. :)
11:59 pm on Mar 26, 2008 (gmt 0)

Senior Member

WebmasterWorld Senior Member g1smd is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month

joined:July 3, 2002
posts:18903
votes: 0


I get those every day.

This thread is about the specific adwords-account-information-targetted mail.

3:40 am on Mar 27, 2008 (gmt 0)

New User

5+ Year Member

joined:Mar 27, 2008
posts: 4
votes: 0


Yes, this sort of mail comes to me almost every two days. Now I delete it without opening it
mktgpro
6:31 am on Mar 27, 2008 (gmt 0)

Senior Member

WebmasterWorld Senior Member 10+ Year Member

joined:Apr 1, 2006
posts:1536
votes: 0


The AdWords spoof site was very well done. Very Realistic..must have caught a few unwary guys.

It is blocked now. Google seems to have been able to get it blocked. It now comes with a notification that it is a 'suspected web forgery'. (on firefox)

9:16 am on Mar 27, 2008 (gmt 0)

Senior Member from GB 

WebmasterWorld Senior Member piatkow is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month

joined:Apr 5, 2006
posts:3335
votes: 24


I investigated adwords and decided not to proceed. From the message titles I assumed it was a genuine contact from G because the account was dormant but just let Mailwasher zap it unopened as I wasn't interested. Maybe i'll have a look at the headers if I get another.
10:40 am on Mar 27, 2008 (gmt 0)

Junior Member

10+ Year Member

joined:Nov 30, 2003
posts: 143
votes: 0


I have received a number of these emails, interestingly sent to an email address *completely unique* to my SnapNames.com account. So someone has picked up my email address from their database (don't suppose everyone else has used snapnames in the past?)

(ps no - Snapnames has never been successful for me, so it's not from the WHOIS etc...)

2:35 pm on Mar 27, 2008 (gmt 0)

Junior Member

10+ Year Member

joined:Nov 30, 2003
posts: 143
votes: 0


Oops - apologies to Snapnames if you read the previous message... I meant Snapfish.com in my post before (the photo service from HP).

(can't edit post above, but hopefully this clears things up)

6:22 pm on Mar 27, 2008 (gmt 0)

Junior Member

10+ Year Member

joined:Apr 3, 2006
posts: 113
votes: 0


I am reassured that I am not the only one to receive this phish.(I have now had 5 of these). I had a much cleverer attempt a few months ago and when I posted on this forum, no-one else seemed to have received it. It did not ask for billing deatils, which is fairly obvious, but told me that an ad had been disapproved - which if you think about it is much more likely to get a response. I guess they were after login details and planned to attack the site another time. Anyone else had one of those? Anyone know what was planned by obtaining login info?
9:57 am on Mar 28, 2008 (gmt 0)

Moderator from AU 

WebmasterWorld Administrator anallawalla is a WebmasterWorld Top Contributor of All Time 10+ Year Member

joined:Mar 3, 2003
posts:3729
votes: 9


While not a phishing email, I got sucked in yesterday by a very convincing googleclassifiedsonline.com - the domain is registered to someone in Malaysia. It only asks for an email address, so I should expect more spam.
10:32 am on Mar 28, 2008 (gmt 0)

Junior Member

10+ Year Member

joined:Apr 3, 2006
posts: 113
votes: 0


And my unused hotmail address has just had one in Spanish entitled "Verificacao de e-mail do google"
12:11 pm on Mar 28, 2008 (gmt 0)

Junior Member from DE 

10+ Year Member

joined:Sept 27, 2002
posts: 199
votes: 0


Today I got a phishing-email from .cn Domain.
Subject-Line: Your AdWords Google Account is stoped

I passed it on to the Support-Form of Google AdWords with full details.

2:17 pm on Mar 28, 2008 (gmt 0)

Preferred Member

10+ Year Member

joined:June 8, 2006
posts:556
votes: 0


Got ANOTHER one last night. It's getting ridiculous. Same thing except they fixed the spelling in the subject line, LOL. Maybe they are reading this? Phew, the rage I have for spammers...if I caught one in person I hope someone would hold me back because road rage has nothing on spammer/scammer rage, LOL.
10:48 am on Mar 29, 2008 (gmt 0)

Junior Member

10+ Year Member

joined:Apr 3, 2006
posts: 113
votes: 0


AWA- URGENT please

My UK credit card statement usually says "Google Ltd adwordscc@google.com when money is taken off. Now it is saying "PTI Europe Region GBP cc@google.com" Has the UK/European ofice changed its billing info this way or is someone else taking money off my card? With all this phishing right now, it is a strange time to be changing billing details on credit card statements. The adwords account looks fine.

11:22 pm on Mar 29, 2008 (gmt 0)

Senior Member

WebmasterWorld Senior Member g1smd is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month

joined:July 3, 2002
posts:18903
votes: 0


Search this: [google.com...]

Various people are saying these payments are variously: AOL Amazon Napster Google(Adwords) Yahoo WeightWatchers Vistaprint Ancestry and it started on 19th March.

PTI Europe are based in Twickenham, England and are nothing to do with this.

It's happening all over the UK. Initially thought to be just Abbey (bank) customers but actually hitting lots of other banks.

Have also seen suggestions you do a search for Infostealer.Bancos which is high risk too.

11:43 pm on Mar 29, 2008 (gmt 0)

Senior Member

WebmasterWorld Senior Member g1smd is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month

joined:July 3, 2002
posts:18903
votes: 0


Several sites report that this is to do with companies that use J P Morgan as payment processor. Others are saying the problem seems to be with a company called 2Checkout.com in Columbus, Ohio.

Also:

During the period of March 19 – March 25, European customers’ credit card statements may have indicated a transaction from an unknown merchant, “PTI Europe” or “PTI Europe Region”. This notation is a technical coding error from the credit card payment processor for our company. This error will be reversed and corrected with the proper Merchant information on their statements on or before April 1.

8:30 am on Mar 30, 2008 (gmt 0)

Junior Member

10+ Year Member

joined:Apr 3, 2006
posts: 113
votes: 0


Thanks all this make sense- bad timing though. I have had a credit now from PTI Europe, but no new debit.
This 36 message thread spans 2 pages: 36
 

Join The Conversation

Moderators and Top Contributors

Hot Threads This Week

Featured Threads

Free SEO Tools

Hire Expert Members