<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Spam is Bad &#187; Fraud Examples</title>
	<atom:link href="http://spamisbad.com/category/fraud-examples/feed/" rel="self" type="application/rss+xml" />
	<link>http://spamisbad.com</link>
	<description>Articles, news and legislation related to spam prevention</description>
	<lastBuildDate>Thu, 21 May 2009 15:43:10 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.1</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>Phishing</title>
		<link>http://spamisbad.com/2008/12/01/phishing/</link>
		<comments>http://spamisbad.com/2008/12/01/phishing/#comments</comments>
		<pubDate>Mon, 01 Dec 2008 19:10:49 +0000</pubDate>
		<dc:creator>johng</dc:creator>
				<category><![CDATA[Fraud Examples]]></category>

		<guid isPermaLink="false">http://blog.spamisbad.com/?p=15</guid>
		<description><![CDATA[Computer users are being warned about a growing problem with e-mail messages that takes you to counterfeit Web sites.
They are called phisher sites, and they look legitimate. So does the e-mail, which claims to come from a company you do business with and tells you to click on a link to go to the site [...]]]></description>
			<content:encoded><![CDATA[<p>Computer users are being warned about a growing problem with e-mail messages that takes you to counterfeit Web sites.</p>
<p>They are called phisher sites, and they look legitimate. So does the e-mail, which claims to come from a company you do business with and tells you to click on a link to go to the site and update your personal information.</p>
<p>It&#8217;s all a scam, aimed at draining your bank account or stealing your identity.</p>
<p>The Federal Trade Commission said it has just brought a case against the 17-year-old creator of one of the sites, which claimed to be for the AOL Billing Center. Officials said he has agreed to give up ,500 in ill-gotten gains and is now barred from sending e-mail spam for life. </p>
]]></content:encoded>
			<wfw:commentRss>http://spamisbad.com/2008/12/01/phishing/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Threat Advisory: CNN and MSNBC Spam</title>
		<link>http://spamisbad.com/2008/08/18/threat-advisory-cnn-and-msnbc-spam/</link>
		<comments>http://spamisbad.com/2008/08/18/threat-advisory-cnn-and-msnbc-spam/#comments</comments>
		<pubDate>Mon, 18 Aug 2008 15:37:36 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Articles]]></category>
		<category><![CDATA[Fraud Examples]]></category>
		<category><![CDATA[News]]></category>

		<guid isPermaLink="false">http://spamisbad.com/?p=126</guid>
		<description><![CDATA[
Dear Client,
We’d like to provide you with an update on recent spam attacks.
Our message security vendor has advised us on high volumes of bogus CNN and MSNBC messages that contain links to download malware. Spammers have copied the contents of CNN and MSNBC alerts and substituted a link that prompts users to upgrade to a [...]]]></description>
			<content:encoded><![CDATA[<p><!-- by Ellen M Rohr --></p>
<p><span style="font-family: Arial,Helvetica,sans-serif;font-size: x-small">Dear Client,</span></p>
<p><span style="font-family: Arial,Helvetica,sans-serif;font-size: x-small">We’d like to provide you with an update on recent spam attacks.</span></p>
<p><span style="font-family: Arial,Helvetica,sans-serif;font-size: x-small">Our message security vendor has advised us on high volumes of bogus CNN and MSNBC messages that contain links to download malware. Spammers have copied the contents of CNN and MSNBC alerts and substituted a link that prompts users to upgrade to a new version of a fake Adobe Flash player.</span></p>
<p><span style="font-family: Arial,Helvetica,sans-serif;font-size: x-small">The security service has detected and blocked the vast majority of these attacks, and continues to release protections to stop the new mutations. Their capture rate is over 99%; however, the attack volumes are so large (in the hundreds of millions of messages) that a 1% passthrough rate means that a few messages may end up in your inbox.</span></p>
<p><span style="font-family: Arial,Helvetica,sans-serif;font-size: x-small">For best security practices, if you see any CNN, MSNBC, or suspicious news alert messages:</span></p>
<ul>
<li><span style="font-family: Arial,Helvetica,sans-serif;font-size: x-small">Do not deliver these messages from your Message Center or Quarantine Summary.</span></li>
<li><span style="font-family: Arial,Helvetica,sans-serif;font-size: x-small">Delete these messages from your inbox.</span></li>
<li><span style="font-family: Arial,Helvetica,sans-serif;font-size: x-small">Do not click on any links in the messages.</span></li>
</ul>
<p><span style="font-family: Arial,Helvetica,sans-serif;font-size: x-small">If you need to access CNN or MSNBC content, visit the website directly.</span></p>
<p><span style="font-family: Arial,Helvetica,sans-serif;font-size: x-small">Please be assured that our security service considers virus and spam protection as their highest priority, and continues to be on the cutting edge against new spam attacks and tactics.</span></p>
]]></content:encoded>
			<wfw:commentRss>http://spamisbad.com/2008/08/18/threat-advisory-cnn-and-msnbc-spam/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Internet Corporation Listings Service</title>
		<link>http://spamisbad.com/2007/12/01/internet-corporation-listings-service/</link>
		<comments>http://spamisbad.com/2007/12/01/internet-corporation-listings-service/#comments</comments>
		<pubDate>Sat, 01 Dec 2007 20:15:26 +0000</pubDate>
		<dc:creator>johng</dc:creator>
				<category><![CDATA[Fraud Examples]]></category>

		<guid isPermaLink="false">http://blog.spamisbad.com/?p=26</guid>
		<description><![CDATA[We have received several calls about faxes sent from Internet Corporation Listings Service. The faxes appear to be an invoice for search engine listing services.
These faxes are scams! The invoice format is designed to capture attention from the recipient, who in turn thinks they must submit payment for the service. The fine print on the [...]]]></description>
			<content:encoded><![CDATA[<p>We have received several calls about faxes sent from Internet Corporation Listings Service. The faxes appear to be an invoice for search engine listing services.</p>
<p>These faxes are scams! The invoice format is designed to capture attention from the recipient, who in turn thinks they must submit payment for the service. The fine print on the &#8220;invoice&#8221; reads &#8220;This is not a bill, invoice or statement of account due. You are under no obligation to make a<br />
payment, unless you accept this offer.&#8221;</p>
<p>If you receive a fax from ICLS.net, you SHOULD report it to the FTC. We have reported the scam to the Federal Trade Commission through this website, it is easy, and you should do the same!</p>
]]></content:encoded>
			<wfw:commentRss>http://spamisbad.com/2007/12/01/internet-corporation-listings-service/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>ICLS.net</title>
		<link>http://spamisbad.com/2003/12/01/iclsnet/</link>
		<comments>http://spamisbad.com/2003/12/01/iclsnet/#comments</comments>
		<pubDate>Mon, 01 Dec 2003 20:14:23 +0000</pubDate>
		<dc:creator>johng</dc:creator>
				<category><![CDATA[Fraud Examples]]></category>

		<guid isPermaLink="false">http://blog.spamisbad.com/?p=22</guid>
		<description><![CDATA[Regarding ICLS.net, we have posted a PDF of the scam faxes being sent by this company at http://www.kleininternet.com/newsletters/faxscam.pdf
]]></description>
			<content:encoded><![CDATA[<p>Regarding ICLS.net, we have posted a PDF of the scam faxes being sent by this company at http://www.kleininternet.com/newsletters/faxscam.pdf</p>
]]></content:encoded>
			<wfw:commentRss>http://spamisbad.com/2003/12/01/iclsnet/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>This is worth checking out&#8230; please pass it on.</title>
		<link>http://spamisbad.com/2003/12/01/this-is-worth-checking-out-please-pass-it-on/</link>
		<comments>http://spamisbad.com/2003/12/01/this-is-worth-checking-out-please-pass-it-on/#comments</comments>
		<pubDate>Mon, 01 Dec 2003 20:11:51 +0000</pubDate>
		<dc:creator>johng</dc:creator>
				<category><![CDATA[Fraud Examples]]></category>

		<guid isPermaLink="false">http://blog.spamisbad.com/?p=17</guid>
		<description><![CDATA[THIS EMAIL AND REMOVE.ORG IS VERY SUSPECT! DO NOT PAY .95 MEMBERSHIP FEE. EMAIL WAS SPAM. THERE IS NO WAY THEY CAN STOP SPAM WITH THE TECHNIQUE THEY ARE USING. ACTUAL EMAIL FOLLOWS HERE:
&#8212;&#8211; Original Message &#8212;&#8211;
From: Lori Butler
To: Sharron Kelly
Cc: Karla Anderson; Megan_Jim_Davis@hotmail.com; EdWaldon@lycos.com;
Andrea Manning; Bill Barnes; Mark and Karen Whyte-Iowa; danrogers3@alaska.net;
alex.urban@gci.net; stephens_03@attbi.net; Laura [...]]]></description>
			<content:encoded><![CDATA[<p>THIS EMAIL AND REMOVE.ORG IS VERY SUSPECT! DO NOT PAY .95 MEMBERSHIP FEE. EMAIL WAS SPAM. THERE IS NO WAY THEY CAN STOP SPAM WITH THE TECHNIQUE THEY ARE USING. ACTUAL EMAIL FOLLOWS HERE:</p>
<p>&#8212;&#8211; Original Message &#8212;&#8211;<br />
From: Lori Butler<br />
To: Sharron Kelly<br />
Cc: Karla Anderson; Megan_Jim_Davis@hotmail.com; EdWaldon@lycos.com;<br />
Andrea Manning; Bill Barnes; Mark and Karen Whyte-Iowa; danrogers3@alaska.net;<br />
alex.urban@gci.net; stephens_03@attbi.net; Laura Clark-Glacial<br />
Sent: Wednesday, July 02, 2003 10:19 AM<br />
Subject: Concerned Parent<br />
Hello,</p>
<p>I am very concerned about all the spam and adult related material that I have been receiving in my email box. Since my children also use the same email, it is even more of a problem. I have tried to get my name and the kids off these lists, but it seems as if that has just made the problem worse.</p>
<p>I complained to my Internet provider, but they said that there was nothing they could do because there is no law against sending spam. They recommended several software programs for filtering out the spam and pornography, which I did try. Unfortunately, it didn&#8217;t stop the majority of the inappropriate material that we were being exposed to.</p>
<p>I brought up this subject at a recent PTA meeting and was informed by a fellow parent of a non-profit organization called Remove.org. They are dedicated to stopping spam and pornography in email. They actually shut down irresponsible marketers who send adult related material and spam.</p>
<p>I have registered my email address with Remove.org and have been very pleased with the results. I would encourage you to do so as well, especially if your child has his own email account.</p>
<p>You can find their website at www.remove.org</p>
<p>Please forward this letter to everyone you know so that we can stop this problem.</p>
<p>Sincerely,</p>
<p>Lori Butler</p>
<p>&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8211;<br />
&gt;<br />
&gt;<br />
&gt;To have your email address added to the national opt-out directory<br />
&gt;please click on the following link: http://www.remove.org.<br />
&gt;<br />
&gt;<br />
&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8211;</p>
<p>unsubscribe from this mailing list: click here<br />
or send a blank to: r.ngm.0-1c3efbb-39a5.kleininternet.com.-tom@s.ew01.com<br />
pkwl5</p>
]]></content:encoded>
			<wfw:commentRss>http://spamisbad.com/2003/12/01/this-is-worth-checking-out-please-pass-it-on/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>From seattlepi.com</title>
		<link>http://spamisbad.com/2003/12/01/from-seattlepicom/</link>
		<comments>http://spamisbad.com/2003/12/01/from-seattlepicom/#comments</comments>
		<pubDate>Mon, 01 Dec 2003 20:10:21 +0000</pubDate>
		<dc:creator>johng</dc:creator>
				<category><![CDATA[Fraud Examples]]></category>

		<guid isPermaLink="false">http://blog.spamisbad.com/?p=13</guid>
		<description><![CDATA[Some of the more interesting spam scams of recent months trick PayPal customers into divulging personal or financial information by asking them to log into Web site that looks very much like PayPal&#8217;s own.
They&#8217;ve been around for a while but appear to be growing more sophisticated and more convincing of late, Vancouver&#8217;s Derek K. Miller [...]]]></description>
			<content:encoded><![CDATA[<p>Some of the more interesting spam scams of recent months trick PayPal customers into divulging personal or financial information by asking them to log into Web site that looks very much like PayPal&#8217;s own.</p>
<p>They&#8217;ve been around for a while but appear to be growing more sophisticated and more convincing of late, Vancouver&#8217;s Derek K. Miller writes in TidBITS. But you can still spot them easily, he says, if you know what you&#8217;re looking for. Among the handy giveaways:</p>
<p>Every one I have seen has errors in design or language that are unlikely in correspondence from a legitimate company. The writers might misspell words or use them sloppily (such as writing &#8220;e-mail&#8221; in one place and &#8220;email&#8221; in another), use slightly inconsistent font sizes, or have spaces missing between words. Often the phrasing that isn&#8217;t stolen directly from PayPal&#8217;s own pages is off-kilter and strange, obviously not written by professionals. Another giveaway is URLs that point at IP numbers or other domains rather than the paypal.com domain.</p>
<p>We received a couple of these messages at the office a few weeks back. Frankly, we were impressed by how convincing the scam site looked at first. But two things gave it away: 1) the scam site used an IP address instead of a recognizable domain name; 2) the recipients didn&#8217;t have PayPal accounts.</p>
]]></content:encoded>
			<wfw:commentRss>http://spamisbad.com/2003/12/01/from-seattlepicom/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>SILICON.COM &#8212; July 7, 2003</title>
		<link>http://spamisbad.com/2003/07/07/siliconcom-july-7-2003/</link>
		<comments>http://spamisbad.com/2003/07/07/siliconcom-july-7-2003/#comments</comments>
		<pubDate>Mon, 07 Jul 2003 20:13:06 +0000</pubDate>
		<dc:creator>johng</dc:creator>
				<category><![CDATA[Fraud Examples]]></category>

		<guid isPermaLink="false">http://blog.spamisbad.com/?p=19</guid>
		<description><![CDATA[SILICON.COM &#8212; July 7, 2003 &#8211;Fake domain name renewal spam warning &#8212; Firms told to be wary of unsolicited requests for .biz and .info registration fees
Businesses are being warned about a spate of rogue firms spamming domain name holders with fake renewal notices asking for money.
The spammers are targeting owners of .biz and .info names [...]]]></description>
			<content:encoded><![CDATA[<p>SILICON.COM &#8212; July 7, 2003 &#8211;Fake domain name renewal spam warning &#8212; Firms told to be wary of unsolicited requests for .biz and .info registration fees</p>
<p>Businesses are being warned about a spate of rogue firms spamming domain name holders with fake renewal notices asking for money.</p>
<p>The spammers are targeting owners of .biz and .info names with emails warning that their domain name is about to expire and asking for a fee to renew it.</p>
<p>Cambridgeshire Trading Standards and Cambridgeshire Police are now investigating a company calling itself Dot Biz Domain Renewal that was spamming thousands of .biz registrants asking for renewal fees.</p>
<p>Ken Sorrie, director of domain name reseller Internetters, is calling for a crackdown on the spammers and said they are taking advantage of the first .biz and .info renewal dates in October and November to try and cash in on people&#8217;s uncertainty about the process.</p>
<p>He said: &#8220;This kind of foul play is bringing the industry into disrepute. Because some companies are unable to get business through respected methods, they resort to spamming. There is now enormous pressure for ICANN to introduce a code of practice and enforce registrar contracts.”</p>
<p>Internetters is also warning that some domain name registrars are withholding or making it difficult for people to get hold of authorisation codes needed to move the registration of their web address to another company.</p>
<p>He said: &#8220;What also concerns us is that some registrants are not aware that if they want to move away from their registration company they need to obtain their authorisation code from that company to pass onto to the new registration company. Many unscrupulous resellers are either not giving the authorisation codes to their customers, or are imposing ‘release fees’ to move away.&#8221;</p>
]]></content:encoded>
			<wfw:commentRss>http://spamisbad.com/2003/07/07/siliconcom-july-7-2003/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>MINNEAPOLIS&#8211;(BUSINESS WIRE)&#8211;June 18, 2003</title>
		<link>http://spamisbad.com/2003/06/18/minneapolis-business-wire-june-18-2003/</link>
		<comments>http://spamisbad.com/2003/06/18/minneapolis-business-wire-june-18-2003/#comments</comments>
		<pubDate>Wed, 18 Jun 2003 20:15:04 +0000</pubDate>
		<dc:creator>johng</dc:creator>
				<category><![CDATA[Fraud Examples]]></category>

		<guid isPermaLink="false">http://blog.spamisbad.com/?p=24</guid>
		<description><![CDATA[MINNEAPOLIS&#8211;(BUSINESS WIRE)&#8211;June 18, 2003&#8211;Best Buy Co., Inc. (NYSE:BBY) reported today that as of late afternoon, it became aware of an unauthorized and deceptive spam e-mail to consumers titled &#8220;Fraud Alert.&#8221; This email, which requests personal information (i.e. social security number and credit card information), claims to come from the BestBuy.com Fraud Department. This message is [...]]]></description>
			<content:encoded><![CDATA[<p>MINNEAPOLIS&#8211;(BUSINESS WIRE)&#8211;June 18, 2003&#8211;Best Buy Co., Inc. (NYSE:BBY) reported today that as of late afternoon, it became aware of an unauthorized and deceptive spam e-mail to consumers titled &#8220;Fraud Alert.&#8221; This email, which requests personal information (i.e. social security number and credit card information), claims to come from the BestBuy.com Fraud Department. This message is NOT from Best Buy. Best Buy is working with appropriate authorities to quickly contain and resolve the situation.<br />
The privacy of personal consumer information is of the utmost importance to Best Buy. The company is alerting consumers to contact their banks or credit card companies immediately if they have replied to the fraudulent e-mail in any way.<br />
The company stated it is actively monitoring the situation and doing everything in its power to alert consumers of this fraudulent act.<br />
Best Buy added that to its knowledge, no systems have been compromised, and its online business is secure. If BestBuy.com customers want to check status of their online orders, they may contact Best Buy Customer Care at 1-888-BESTBUY.</p>
]]></content:encoded>
			<wfw:commentRss>http://spamisbad.com/2003/06/18/minneapolis-business-wire-june-18-2003/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
