Phishing SCAM claiming to be from Neteller and Moneybookers

**lowrisk** · 27 February 2014, 7:47 pm

Hi Guys

I wanted to take this opportunity to make you all aware, that there's a serious scam running round at the moment, which seems to have the intention of getting hold of your moneybookers or neteller login details!

Yesterday, I got an email claiming to be from neteller, and then another one today, claiming to be from Moneybookers, to my email address which is tied to both of them, in the real world!

Name: neteller.JPG
Views: 2999
Size: 60.8 KB

Name: neteller.JPG
Views: 2999
Size: 60.8 KB

Name: moneybookers.JPG
Views: 3297
Size: 75.7 KB

Now, I ignored the neteller one, I did believe it could well be genuine, as I have a really old Neteller account, and didn't care about it. I thought the chances of the terms changing were very real, but I thought "well, just let it expire"

However the moneybookers one did get my attention, as I receive commission to this account, and use it regular. I also was alerted to the fact that they both are almost identical in terms of layout and content!

As I was using chrome, when I hovered over the click here button in the neteller email, the url was member.1neteller.com
When I hovered over the click here on the Moneybookers email, the url was account.skrillv.com .

I pinged both domains, and they were only registered recently, in Turkey.

The email looks genuine at first, as the from email appears as [email protected] etc, however in Outlook, I viewed source code of both the emails, and it showed several lines of code they have used, to spoof the email address, to thus make it appear more genuine and to look as though it came from a genuine email address.c

The links where it says Check on your browser and "Is this mail really from Moneybookers" etc, funnily enough, neither worked!!

I think the best thing we can all do is report these emails as phishing scams, and spread the word among operators and affiliates.

Also, make sure you clean cookies before logging into the genuine sites, just in case your browser auto generates the real looking one!

**freebetking** · 27 February 2014, 8:36 pm

received the moneybookers one as well - it's the best one i've seen yet in terms of grammar and looking like the real deal, however moneybookers always addresses you by name where as the spammers always use an email address, at least for now, still i bet it suckers a few in.

**universal4** · 27 February 2014, 9:15 pm

I haven't gotten either one as of yet, but will watch for them and if I do get them I will look through my mail server logs to grab the ip address of the real sender.

My first guess is that this is likely the first round of a bunch of these being sent from rented time on bot networks though so the ip may not help much.

It's always good to warn affiliates though since when they involve payment methods such as the above affiliates are partcularly vunerable.

Rick
Universal4

**louie.wilson** · 27 February 2014, 9:33 pm

Thanks mate, def a "nicely" done one. Will have our team aware.

**F-L-C** · 28 February 2014, 2:53 am

I got the Moneybookers one

**-Shay-** · 28 February 2014, 3:18 am

Thanks for the heads up on this.

**thebookiesoffers** · 28 February 2014, 4:25 am

also be aware of a google one which I fell for saying google sent you a doc in google drive

**JackTenSuited** · 28 February 2014, 5:17 am

I wonder where they get the emails from? at least with paypal phishing attempts most people have paypal, can't imagine to many people have neteller/skrill.

**baldidiot** · 28 February 2014, 5:57 am

I got the MB one too. The weird thing is that the email it went to is one I only use to receive moneybookers payments, which to me seems a tad suspicious.

**baileyrofe** · 10 April 2014, 12:18 am

many thanx for making all conscious...

**Casino Online Rating** · 10 April 2014, 1:32 am

Originally Posted by baldidiot

I got the MB one too. The weird thing is that the email it went to is one I only use to receive moneybookers payments, which to me seems a tad suspicious.

Some data leak from Moneybookers?

**grissha** · 19 August 2015, 3:42 am

useful information and makes us aware, thanks

**Fruity_MariaFlorides** · 10 December 2015, 10:24 pm

Thank you for the heads up. I haven't received that email yet.

**universal4** · 11 December 2015, 12:53 am

Maria,

These particular emails were floating around in the beginning of 2014, but we should always be on the lookout for these types f fake emails attempting to get login and banking details.

One of the best practices is that ANY TIME you get an email that says there is an issue with an account, do NOT under any circumstances follow the links in the emails but log on to the site in a normal fashion and if there is an issue you will likely be notified that way.

If fr whatever reason you can not log in, contact customer service or support in the regular channels.

Rick
Universal4

**F-L-C** · 11 December 2015, 1:12 am

I got one today

You recently set primary the email address XXXXXX to your account.
You need to confirm your registered e-mail adress in your account, please click the following link:
Confirm E-Mail Adress The above link is valid for 7 days. You need to verify your e-mail adress as soon as possible.

If you are unable to verify your e-mail adress, please contact the NeteIIer.

**Fruity_MariaFlorides** · 11 December 2015, 1:18 am

Originally Posted by universal4

Maria,

These particular emails were floating around in the beginning of 2014, but we should always be on the lookout for these types f fake emails attempting to get login and banking details.

One of the best practices is that ANY TIME you get an email that says there is an issue with an account, do NOT under any circumstances follow the links in the emails but log on to the site in a normal fashion and if there is an issue you will likely be notified that way.

If fr whatever reason you can not log in, contact customer service or support in the regular channels.

Rick
Universal4

Thank you Rick for your advice!

I am new to Skrill, so this post was very helpful. I normally call Skrill when I have any issues, I don't email them. But still this was a good post for me to read, I thank you to all members for sharing.

**Fruity_MariaFlorides** · 11 December 2015, 1:20 am

Originally Posted by F-L-C

I got one today

You recently set primary the email address XXXXXX to your account.
You need to confirm your registered e-mail adress in your account, please click the following link:
Confirm E-Mail Adress The above link is valid for 7 days. You need to verify your e-mail adress as soon as possible.

If you are unable to verify your e-mail adress, please contact the NeteIIer.

Christmas is coming soon, so scammers need some cash

**F-L-C** · 11 December 2015, 3:22 am

Originally Posted by Fruity_MariaFlorides

Christmas is coming soon, so scammers need some cash

Yes I couldn't post the screenshot for some reason but it did look like Neteller

**alice69** · 2 December 2016, 10:57 pm

wow nice

**Arbman** · 13 April 2020, 11:08 am

Got to be extra careful with these.

Thread: Phishing SCAM claiming to be from Neteller and Moneybookers

LinkBack

Thread Tools

Search Thread

Display

Phishing SCAM claiming to be from Neteller and Moneybookers

The Following 5 Users Say Thank You to lowrisk For This Useful Post:

The Following User Says Thank You to baldidiot For This Useful Post:

The Following User Says Thank You to universal4 For This Useful Post:

The Following User Says Thank You to F-L-C For This Useful Post:

Posting Permissions