Spam & Phishing Watch

Warning: An email titled "Payment Declined - Your Cloud Storage Will Be Paused" claims that your cloud storage files are scheduled for permanent deletion. The message urges recipients to click "Keep My Files" to prevent data loss. This is highly likely to be a scam email. Its wording closely matches a previously documented cloud storage deletion scam. What Does the Scam Email Say? The email uses the sender name "Cloud Storage" and was received from: support@ages.at It displays several alarming messages: "Scheduled for Deletion" "Permanent Data Loss" "Photos & Videos — At Risk" "Documents — At Risk" "Cloud Backups — Stopped" The message claims that an inactive, over-limit cloud account will have its files permanently deleted unless the storage plan is renewed. However, it does not identify a specific cloud storage provider or give a valid deadline. Why Is This Email Suspicious? ...

Warning: I received an unsolicited email with the subject “Here's what's coming up next” that appeared to be an AMP-RI mailing-list confirmation sent through Mailchimp. What made the message suspicious was not the normal newsletter content. Near the bottom, the email reproduced information supposedly submitted through a signup form, and the Last Name field contained a Bitcoin-related scam message and an external link. The external destination is omitted from this article for safety. Details of the email Subject: Here's what's coming up next Displayed sender: AMP-RI <info＠amp-ri.com> Received: September 16, 2026 The email included the following text: For your records, here is a copy of the information you submitted to us... Email Address: [recipient address omitted] First Name: Tricobis Last Name: 1.1542 BITCOIN TRANSFER ON HOLD. CONFIRM HERE [external URL omitted] Why this looks like signup-form abuse This case is unusual because AMP...

Warning: I received an unsolicited email claiming to be from Ace Hardware and saying that I had been selected to receive a “YETI® PATRIOTIC BUNDLE.” The email asks the recipient to complete a short survey and then click “CLAIM YOUR REWARD.” This is a scam email. Do not click the reward button, complete the survey, or provide personal or payment information. Email subject and sender Subject: - You have won a YETI PATRIOTIC Bundle 🎁 ID#136703 Sender: Ace Hardware® info@hn7dm50x.shedutypubli.br.com I received this email on September 14, 2026. The sender address is not from Ace Hardware's official acehardware.com domain. What the email claims The message says: Today's winner is YOU HAVE BEEN SELECTED! It claims that the recipient has been chosen to receive a: YETI® PATRIOTIC BUNDLE It then says the reward is part of an “exclusive customer loyalty program” and asks the recipient to answer a survey that supposedly takes only 60 seconds. The main...

I received a suspicious email impersonating MetaMask with the subject: Please set up your new sign option and link your email The visible sender was: TheMetamaskTeamTMS Phrase <system@phrase.com> This email is particularly worth documenting because Gmail reported that its authentication checks passed: SPF: PASS DKIM: PASS for phrase.com DMARC: PASS However, passing SPF, DKIM and DMARC does not mean that MetaMask sent or authorized the message. What the email says The message asks the recipient to set up a “new sign option” and link an email address. It says the action applies to all users and creates urgency by stating that the link will expire after 24 hours. The main button says: Set Up New Sign Option & Link Email The email also states: This link will expire after 24 hours. I have intentionally not reproduced the destination URL in this article. Why this email should not be trusted as a MetaMask message MetaMask's own Help Center ...