New email scam.... I hope!

[Jennie@ifish]

Still waiting for official confirmation... I'm going to go do a search on this one, but I just got this in e mail.... two hours later got another one from a different e mail address.

Anyway, when you click on their link, it asks you to fill out your social security number, and credit card info. That pretty much scares me out of thinking it could be legit!

Please, do not panic if you get this. I pretty much believe it is a scam. Don't, I repeat, DO NOT ANSWER IT OR FILL IT OUT!!!

They don't identify which card and it asks for information that should never be given out.

The letter sounds official, and makes people panic into doing the survey. Don't do it!

So, just thought I'd make you aware:

------------------


Dear customer,═
═
Recently we have received an order made by using your personal credit card information.═
This order was made online at our official BestBuy website on 06/17/2003.═
Our Fraud Department has some suspicions regarding this order and we need you to visit a special Fraud Department page at our web store where you can confirm or decline this transaction by providing us with the correct information.═
This e-mail address has been taken from National Credit Bureau.═
═
Click the link below to visit a special Fraud Department page to resolve the cause of the problem.══
http://www.BestBuy.com/fraud_department.html
═
================================================== ===================═
ORDER# 1095619 - STATUS: SUSPENDED═
═
ITEMS PURCHASED═
================================================== ===================═
Item No: 73890═
CDA-9815 In-Dash CD Player/Ai-Changer Controller═
Price: $387.65══ Qty: 2══ Total: $775.3═
----------------------------------------------------------------------------------------------------═
The order listed above has not yet been processed.═
The reason for the delay in processing your order is:═
═
- UNVERIFIED SHIPPING ADDRESS═
═
- Information provided:═
═ Shipping═
═ 41 WINHAM ST═
═ Staten Island, NY═ 10306═
═ United States═
═ phone# 206-337-9843═
═
In our effort to deter fraudulent transactions, we need your help in providing us with the correct information. Your prompt response is needed to avoid any unauthorized charges to your credit card.
═
================================================== ===================═
Click the link below to visit a special Fraud Department page to resolve the cause of the problem.══
http://www.BestBuy.com/fraud_department.html

[ 06-18-2003, 03:49 PM: Message edited by: Jennie@ifish ]

[skein]

The legitimate companies NEVER do it this way. They contact you by phone and verify information you have with them, i.e. mother's maiden name, etc.

This is a SCAM! Don't bite!

Skein

Got it too Jen and nuked it. Rats out there.

[Lepper]

Hey jen, could you post all the junk at the beginning of the email? like what servers it is going through ect.... ?
dave

[Jennie@ifish]

Got two copies, different, each:

Return-Path: <root@user1.seasurf.net>
Delivered-To: jennie@harborside.com
Received: (qmail 85486 invoked from network); 18 Jun 2003 21:37:11 -0000
Received: from unknown (HELO psmtp.com) (12.158.34.243)
by mail.harborside.com with SMTP; 18 Jun 2003 21:37:11 -0000
Received: from source ([204.245.233.19]) by exprod5mx83.postini.com ([12.158.34.245]) with SMTP;
Wed, 18 Jun 2003 14:29:35 PDT
Received: from user1.seasurf.net (user1.seasurf.net [204.245.233.17])
by linus.seasurf.net (8.11.6/8.11.6) with ESMTP id h5ILN7e07609
for <jennie@harborside.com>; Wed, 18 Jun 2003 14:23:08 -0700
Received: from user1.seasurf.net (user1.seasurf.net [204.245.233.17] (may be forged))
by user1.seasurf.net (8.12.8/8.12.8) with ESMTP id h5ILN5Y1013586
for <jennie@harborside.com>; Wed, 18 Jun 2003 14:23:05 -0700
Received: (from root@localhost)
by user1.seasurf.net (8.12.8/8.12.8/Submit) id h5ILN5kI013579
for jennie@harborside.com; Wed, 18 Jun 2003 14:23:05 -0700
Received: from linus.seasurf.net (linus.seasurf.net [204.245.233.19])
by user1.seasurf.net (8.12.8/8.12.8) with ESMTP id h5ILMxYR013479
for <salmon@seasurf.net>; Wed, 18 Jun 2003 14:23:05 -0700
Received: from t-dialin.net (p50893E2E.dip.t-dialin.net [80.137.62.46])
by linus.seasurf.net (8.11.6/8.11.6) with SMTP id h5ILMWe07355
for <salmon@seasurf.net>; Wed, 18 Jun 2003 14:22:33 -0700
Received: from p50893E2E.dip.t-dialin.net (p50893E2E.dip.t-dialin.net [80.137.62.46])
by t-dialin.net (8.12.7/8.12.7) with ESMTP id gugsj65311
for <salmon@seasurf.net>; Wed, 18 Jun 2003 20:36:33 -0400 (EST)
Message-ID: <xtbtz16744@gte.net>
From: "Drusilla Marlaine" <Graciela_Sarath@gte.net>
To: <salmon@seasurf.net>
Subject: BestBuy Order #1095619. Fraud Alert.
Date: Wed, 18 Jun 2003 20:36:31 -0400 (EST)
MIME-Version: 1.0
Content-Type: multipart/related;
type="multipart/alternative";
boundary="----=_NextPart_000_000F_01C33095.9F84B280"
X-Priority: 1
X-MSMail-Priority: High
X-Mailer: Microsoft Outlook Express 6.00.2720.3000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2727.1300
X-MailScanner: Found to be clean, Found to be clean
X-MailScanner-SpamCheck: SpamAssassin (3 hits)
X-pstn-levels: (C:79.6536 M:99.9349 P:95.9108 R:95.9108 S: 2.1689 )
X-pstn-settings: 3 (1.0000:2.0000) pmCr
X-pstn-addresses: from <Graciela_Sarath@gte.net>
------

Return-Path: <Brier_Jessie@0-0-7.co.uk>
Delivered-To: jennie@harborside.com
Received: (qmail 35048 invoked from network); 18 Jun 2003 21:17:25 -0000
Received: from unknown (HELO psmtp.com) (12.158.34.155)
by mail.harborside.com with SMTP; 18 Jun 2003 21:17:25 -0000
Received: from source ([66.27.89.19]) by exprod5mx15.postini.com ([12.158.34.245]) with SMTP;
Wed, 18 Jun 2003 14:09:49 PDT
Received: from 66.27.89.19 (66.27.89.19 [66.27.89.19])
by 66.27.89.19 (8.12.3/8.12.3) with ESMTP id dtuxsn11848
for <jennie@harborside.com>; Thu, 19 Jun 2003 06:19:37 -0400 (EST)
Message-ID: <yqeix867095@0-0-7.co.uk>
From: "Walliw Thomasa" <Brier_Jessie@0-0-7.co.uk>
To: <jennie@harborside.com>
Subject: BestBuy Order #1095619. Fraud Alert.
Date: Thu, 19 Jun 2003 06:19:35 -0400 (EST)
MIME-Version: 1.0
Content-Type: multipart/related;
type="multipart/alternative";
boundary="----=_NextPart_000_000F_01C33095.9F84B280"
X-Priority: 1
X-MSMail-Priority: High
X-Mailer: Microsoft Outlook Express 6.00.2720.3000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2727.1300
X-pstn-levels: (C:79.6536 M:99.9349 P:95.9108 R:95.9108 S: 2.1689 )
X-pstn-settings: 3 (1.0000:2.0000) pmCr
X-pstn-addresses: from <Brier_Jessie@0-0-7.co.uk>

[roadsend]

Got the same e-mail, same time. Deleted it. How did they get our addresses?

[Spotted Owl]

What the heck does all that stuff mean in the last post.

[Jennie@ifish]

He asked for the complete headers in the e mail. It tracks which computers the e mail has crossed through on it's way to me.
Jen

[24 on/ 48 off]

I got it today. Stupid.

--spud-- :smile:

[Jennie@ifish]

They get our addresses the same way they get any addresses to spam.

Sometimes I have gotten e mail, that in the header is every spelling of my name at Harborside, plus some.

They just pick a domain and put Jennie@ Jenni@ Jeni@ Jeanie@... harborside.com


That is just one way! Of course, they get your e mail when you sign up for things, enter a contest... They also get e mails by buying lists from people who professionally harvest them and sell them.

It's a dirty job but someone has to do it.

If you are concerned about getting your e mail harvested off of ifish, go to PROFILE, and click the option about e mail that you don't want it displayed, yet ifishers only can e mail you.

Jen

[RvW]

IMPORTANT: E-MAIL HOAX NOTIFICATION

Late Wednesday afternoon, June 18, 2003, Best Buy became aware of an unauthorized and deceptive e-mail to consumers titled "Fraud Alert." That e-mail message, which requested personal information (i.e., social security and credit card numbers), claimed to come from the BestBuy.com Fraud Department. That message was NOT from Best Buy or any of our affiliates.

Best Buy is working with the appropriate law enforcement authorities to quickly resolve the situation. We are working to shut down sites affiliated with that unauthorized e-mail and Best Buy will work with law enforcement authorities to prosecute any perpetrators involved in this illegal act to the fullest extent of the law. If you replied to the fraudulent
e-mail in any way, contact your bank and/or credit card companies immediately.

No Best Buy systems have been compromised, and our online business is secure. The privacy of your personal information is of the utmost importance to Best Buy and any information you provide to us is handled according to our Privacy Policy.

As part of the preparation for the relaunch of BestBuy.com, online purchasing will be temporarily unavailable beginning Friday, June 20; however, our product information and helpful resource articles will still be available. Rest assured, the fraudulent e-mail will not affect the launch of our redesigned Web site.

If you have any questions, call Customer Care at 1-888-BEST BUY (237-8289) or visit our Online Pressroom.

To find out more about protecting your information, visit the Federal Trade Commission's Identity Theft Web site at www.consumer.gov/idtheft.

Thank you for being a valued Best Buy customer.

--------------------------------------------------------------------------------

If you've opted out of Best Buy promotional e-mails, don't worry: you haven't been signed up again. We just wanted to make sure you knew about this situation, regardless of whether you receive Best Buy promotional e-mails. You will NOT continue to receive Best Buy promotional e-mails. Thank you.

[RvW]

Jen, you should send that return path as an attachment to best buys tech support.

-Doug