# Different type of Spam Attack? **URL:** \ **Category:** Factual Questions\ **Created:** [November 19, 2015, 9:29pm UTC](https://boards.straightdope.com/t/different-type-of-spam-attack/738020 "2015-11-19T21:29:25Z")\ **Posts on this page:** 11\ **Page:** 1
**Author:** ![Lochdale](https://avatars.discourse-cdn.com/v4/letter/l/edb3f5/32.png) [@Lochdale](https://boards.straightdope.com/u/Lochdale)\ **Post date:** [November 19, 2015, 9:29pm UTC](https://boards.straightdope.com/t/different-type-of-spam-attack/738020/1 "2015-11-19T21:29:25Z")
I didn’t see this in the tech section and while it may not be appropriate for GQ, I was wondering if Dopers ever came across this scenario. I get an email from my bank late in the evening saying that someone has accepted x dollars from me. I never authorized said transaction. I instantly stop it and freeze the accounts. The next morning, my email is spammed with literally hundreds/thousands (many were stopped by my spam blocker) of emails saying that I registered for various sites and message boards (e.g. Toshiba Help Forums, Classic Car aficionados etc. lots and lots of Russian websites) to the point that it basically shuts down my email. So two questions: 1. Has anyone ever experienced the second kind of spam attack before? 2. Is it likely that the two are connected. ---
**Author:** ![control-z](https://avatars.discourse-cdn.com/v4/letter/c/eada6e/32.png) [@control-z](https://boards.straightdope.com/u/control-z)\ **Post date:** [November 19, 2015, 9:45pm UTC](https://boards.straightdope.com/t/different-type-of-spam-attack/738020/2 "2015-11-19T21:45:41Z")
I don’t know but I would be changing any and all your passwords right now. And consider that the computer you normally use may be compromised. ---
**Author:** ![LSLGuy](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/lslguy/32/5813_2.png) [@LSLGuy](https://boards.straightdope.com/u/LSLGuy)\ **Post date:** [November 19, 2015, 9:47pm UTC](https://boards.straightdope.com/t/different-type-of-spam-attack/738020/3 "2015-11-19T21:47:32Z")
Did you click a link in that first bank email to log on to your bank? Because if so you probably went to a fake site and “logged in”, thereby giving them all the credentials they need to impersonate you at your real bank. And to really transfer all your money to someplace in Bulgaria. And to try that email, username, and password at every one of hundreds of thousands of other sites, financial and otherwise. If you did that your are officially pwned. As in all your money now belongs to the Bulgarian Mafia. Time to use old fashioned means like telephones and live humans to freeze everything before too many horses / dollars leave the barn never to return. ---
**Author:** ![Tired\_and\_Cranky](https://avatars.discourse-cdn.com/v4/letter/t/a87d85/32.png) [@Tired\_and\_Cranky](https://boards.straightdope.com/u/Tired_and_Cranky)\ **Post date:** [November 19, 2015, 9:50pm UTC](https://boards.straightdope.com/t/different-type-of-spam-attack/738020/4 "2015-11-19T21:50:40Z")
What makes you think the first email came from your bank? It is very easy to fake the email header to say that it is coming from “Bank of America” or any other bank. I am nearly 100% convinced the email came from a scammer. I presume you clicked on the link in the email which brought you to a website that pretended to be your bank’s. Again, it wasn’t. Either the website’s address was similar to your bank’s but not actually your bank’s, or it was an entirely different address but the website itself looked convincing enough that you chose to interact with it. Anyone can copy the look of your bank’s website so you should try not to be fooled by a website that just looks the same. When you clicked on the link, the website may have installed malware on your computer. That malware could direct additional ads to your computer or spy on all the activity that you use your computer for. Depending on the sophistication of the scam, the scammers may have asked you to log in to your bank account using your bank’s username and password. If you did so, you gave the scammers your banking information and they can exploit it to steal your money. Contact your bank immediately with the phone number on your statement or the back of your ATM card and tell hem what happened. They will start the process of shutting down your old account and opening a new one. They can check if the scammers have already tried to steal money from the account. The scammers may also have asked you for your email login password. Your bank will never need that. It might need your email address to send you information, but it doesn’t need your login password. I assume that the scammers used this to sign up for a million newsletters and things because the scammers get paid for bringing traffic to these websites. This is mostly inconvenient but the websites may host or install additional malware. Don’t go to those websites. Be sure to run a current version of anti-virus software on your computer to safeguard your computer from spyware. ---
**Author:** ![Doctor\_Jackson](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/doctor_jackson/32/32_2.png) [@Doctor\_Jackson](https://boards.straightdope.com/u/Doctor_Jackson)\ **Post date:** [November 19, 2015, 9:54pm UTC](https://boards.straightdope.com/t/different-type-of-spam-attack/738020/5 "2015-11-19T21:54:40Z")
You can sign up for email notifications from your bank, but all the ones I have ever seen say something like “A payment for $Y was generated from your account”. I can think of no situation where a bank would send you a notice saying “X has accepted a payment from your account”. That alone strongly suggests phishing. ---
**Author:** ![74westy](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/74westy/32/3950_2.png) [@74westy](https://boards.straightdope.com/u/74westy)\ **Post date:** [November 19, 2015, 10:41pm UTC](https://boards.straightdope.com/t/different-type-of-spam-attack/738020/6 "2015-11-19T22:41:58Z")
> [@Doctor\_Jackson](#): > > You can sign up for email notifications from your bank, but all the ones I have ever seen say something like “A payment for $Y was generated from your account”. I can think of no situation where a bank would send you a notice saying “X has accepted a payment from your account”. That alone strongly suggests phishing. Interac e-transfers generate emails like > [@](#): > > 74westy, > > The INTERAC e-Transfer for $100.00 (CAD) you sent to Mrs. 74westy was accepted. The transfer is now complete. > > Recipient’s message: A message was not provided > > Thank you for using My Bank’s INTERAC e-Transfer Service. This was completely legit and I’ve received many of these emails. What’s worse is > [@](#): > > 74westy, > > Some Guy did not deposit the INTERAC e-Transfer for $25.00 (CAD) you sent on 05 Dec 2014 prior to the expiry date. As a result, your money was not paid to Some Guy. > > Action Required: > Deposit your money back into your account at My Bank by clicking here [https://mybank.com/legit/looking/address](https://mybank.com/legit/looking/address). This is also legit but looks so much like a phishing attack that I wouldn’t have clicked the link for any reason. ---
**Author:** ![Defensive\_Indifference](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/defensive_indifference/32/6502_2.png) [@Defensive\_Indifference](https://boards.straightdope.com/u/Defensive_Indifference)\ **Post date:** [November 19, 2015, 10:50pm UTC](https://boards.straightdope.com/t/different-type-of-spam-attack/738020/7 "2015-11-19T22:50:36Z")
> [@LSLGuy](#): > > Did you click a link in that first bank email to log on to your bank? > > Because if so you probably went to a fake site and “logged in”, thereby giving them all the credentials they need to impersonate you at your real bank. And to really transfer all your money to someplace in Bulgaria. > [@Tired\_and\_Cranky](#): > > What makes you think the first email came from your bank? It is very easy to fake the email header to say that it is coming from “Bank of America” or any other bank. I am nearly 100% convinced the email came from a scammer. > > \ > > **Contact your bank immediately with the phone number on your statement or the back of your ATM card and tell hem what happened. They will start the process of shutting down your old account and opening a new one. They can check if the scammers have already tried to steal money from the account**. I agree with both of these, especially the bolded part above. Stop reading the Dope and do that now. After that, file a police report. The bombardment of signup emails might be a distraction. They may be trying to divert your attention to deal with all the spam while they empty your account. Also by flooding your account they bury the legitimate emails form your bank so you are less likely to see them and take corrective action. Good luck. (I am a computer forensic examiner and incident responder. After you call your bank and the police, PM me if I can assist.) ---
**Author:** ![Lochdale](https://avatars.discourse-cdn.com/v4/letter/l/edb3f5/32.png) [@Lochdale](https://boards.straightdope.com/u/Lochdale)\ **Post date:** [November 19, 2015, 11:34pm UTC](https://boards.straightdope.com/t/different-type-of-spam-attack/738020/8 "2015-11-19T23:34:29Z")
Thank you for all of your responses. The email was from my bank (though I did not click on any link). I called the bank last night and closed all of my accounts. I transferred all of the funds to new accounts this morning. So I don’t think I was “phised” directly. No money was actually taken despite two efforts to do so. Unfortunately the spam was so great that I had to change my work email address which was frustrating. I have never heard of a spam attack like this but as Bayard points out it might have been used as a distraction. Thank you very much for your offer Bayard, I will send you a PM. ---
**Author:** ![Doctor\_Jackson](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/doctor_jackson/32/32_2.png) [@Doctor\_Jackson](https://boards.straightdope.com/u/Doctor_Jackson)\ **Post date:** [November 20, 2015, 2:41pm UTC](https://boards.straightdope.com/t/different-type-of-spam-attack/738020/9 "2015-11-20T14:41:30Z")
> [@74westy](#): > > Interac e-transfers generate emails like > > This was completely legit and I’ve received many of these emails. What’s worse is > This is also legit but looks so much like a phishing attack that I wouldn’t have clicked the link for any reason. Well, I’ll be darned. Ignorance fought. Stupid technology changes… ---
**Author:** ![aruvqan](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/aruvqan/32/2891_2.png) [@aruvqan](https://boards.straightdope.com/u/aruvqan)\ **Post date:** [November 20, 2015, 4:48pm UTC](https://boards.straightdope.com/t/different-type-of-spam-attack/738020/10 "2015-11-20T16:48:08Z")
Ye gods! Makes me very thankful that we have only military credit union ‘bank’ accounts! I automatically know anything that doesn’t come from one of 2 military name credit unions is bogus. I have long taken the advice from some thread or another here to never click on an email link but to go to my own saved bookmarks and to mistrust anything requesting me to log in to do something. I have actually called the credit union on an email about the government leak of personal information recently to double check the information about the leak and impact on mrAru and myself. Hope your spam attack resolves quickly! ---
**Author:** ![Jackmannii](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/jackmannii/32/311_2.png) [@Jackmannii](https://boards.straightdope.com/u/Jackmannii)\ **Post date:** [November 20, 2015, 5:28pm UTC](https://boards.straightdope.com/t/different-type-of-spam-attack/738020/11 "2015-11-20T17:28:31Z")
Coincidentally :dubious: I just received an e-mail from “[service@paypal.com](mailto:service@paypal.com)” with a header telling me my “financial institution” contacted PayPal about unauthorized activity on my account. I didn’t open the e-mail but am checking with PayPal about what looks to be a sleazy phishing attempt.