AMP-RI “Here’s What’s Coming Up Next” Email With Bitcoin Transfer Link: Likely Mailchimp Signup Form Abuse
Warning: I received an unsolicited email with the subject “Here's what's coming up next” that appeared to be an AMP-RI mailing-list confirmation sent through Mailchimp. What made the message suspicious was not the normal newsletter content. Near the bottom, the email reproduced information supposedly submitted through a signup form, and the Last Name field contained a Bitcoin-related scam message and an external link. The external destination is omitted from this article for safety. Details of the email Subject: Here's what's coming up next Displayed sender: AMP-RI <info＠amp-ri.com> Received: September 16, 2026 The email included the following text: For your records, here is a copy of the information you submitted to us... Email Address: [recipient address omitted] First Name: Tricobis Last Name: 1.1542 BITCOIN TRANSFER ON HOLD. CONFIRM HERE [external URL omitted] Why this looks like signup-form abuse This case is unusual because AMP...