Wells Fargo phishing

Discussion in 'Phishing' started by dragonfire, Dec 4, 2007.

  1. dragonfire

    dragonfire Member

    Dear Valued Customer,

    Wells Fargo Online Banking Security Team is carrying out a fraud prevention exercise on all accounts to reduce and prevent Fraud on our online Banking system .All Verified Accounts will recieve a Special Anti-Fraud Protection, Which will reduce all risks of Online Fraud.

    Please click on Sign in to Secured Online Banking to continue Update. your account information to the verification process.

    Remember Failure to verify your account details will lead to account suspension for security Reasons.

    Online Banking Security Team,
    Wells Fargo Bank
    © 2007 All Rights Reserved.


    Return-Path: <kjfjvdo123@dongpayoog.com>
    Received: from 193.93.98.203, Israel, ARIAVE SATCOM LTD
    Subject: Wells Fargo Online Statement Notification
    From: Wells Fargo Bank <Customer.alert@wellsfargo.com>
     
  2. The Doctor

    The Doctor Administrator Staff Member

    If they can make phishing mails for B of A I guess it was only a matter of time before they got Wells Fargo.
     
  3. Hua Mulan

    Hua Mulan Administrator Staff Member

    Return-Path: <security@cs.wellsfargo.us.com>
    Received: from User (68.143.141.42.nw.nuvox.net [68.143.141.42]) USA, South Carolina, Greenville, Nuvox Communications
    Reply-To: <noreply@cs.wellsfargo.us.com>
    From: "Wells Fargo"<security@cs.wellsfargo.us.com>
    Subject: Wells Fargo Online Account Limitation
    Date: Wed, 12 Mar 2008



    You have 1 new ALERT message
    Please login to your Wells Fargo Online Account
    and visit the Message Center section in order to read the message.

    To Login, please click the link below:

    Go To Wells Fargo Online

    © 2008 Wells Fargo Online. All rights reserved
     
  4. Quark

    Quark Moderator Staff Member

    Return-Path: <nobody@sus80.suidc.com>
    Received: from 210.127.253.80, South Korea, Pusan, Onsetelecom Pusan IDC
    Date: Thu, 17 Apr 2008
    Subject: Important Message From Wells Fargo Bank Error Pin
    From: Wells Fargo Bank <customers.alert@wellsfargo.com>

    Wells Fargo Bank Online Security Notification

    Dear Wells Fargo Bank Online Account Holder,

    During our regularly scheduled account maintenance and verification procedures, we have detected a slight error in your billing information. This might be due to either of the following reasons:

    1. A recent change in your personal information (i.e.change of address).
    2. Submiting invalid information during the initial sign up process.
    3. The online services look that was changed recently:

    [Online Banking Log-In]

    Security Advisory,
    Wells Fargo Bank Online.

    *Important*

    failure to update your account at least 24hrs of notice might lead to account being locked and online access will be restricted.

    (c) 2008 Wells Fargo Bank Online.
     
  5. kanga

    kanga New Member

    Online Banking Alert

    Due to concerns, for the safety and integrity of the wellsfargo
    account we have issued this warning message.

    It has come to our attention that your wellsfargo account information needs to be updated as part of our continuing commitment to protect your account in this year 2008 and to reduce the instance of fraud on our website. If you could please take 5-10 minutes out of your online experience and update your personal records you will not run into any future problems with the online service.

    Once you have updated your account records your wellsfargo account
    service will not be interrupted and will continue as normal.

    To update your wellsfargo records click on the following link and fill in the necessary requirements :

    http www wellsfargo com signon LOB CONS&screenid=Update_Acct
    Please sign in to Online Banking to continue to the verification process and ensure your account security. It is all about your security.

    Thank you. and visit the customer service section.



    --------------------------------------------------------------------------------
     
    Last edited by a moderator: Apr 26, 2008
  6. Jessica

    Jessica Administrator Staff Member

    Return-Path: <dianag2@apolo.nstotal.net>
    Received: from 193.93.99.199, Nigeria, via Israel, Ariave Satcom
    Subject: Wells Fargo Coming Soon: Security Questions
    From: Wells Fargo online <customers.alert@wellsfargo.com>
    Date: Sun, 04 May 2008


    Dear Customer

    We value your relationship with Wells Fargo Bank Online To serve you better,we are installing the Best Banking software and would require you Update Your Online Banking Records.

    This is being done to secure your accounts and to protect your personal informations from being compromised.We at Wells Fargo Bank Online are committed in making sure that your online transactions are secure.

    Click on the link below to Update your Account Records
    ht tps www.Online Banking Log-In rdcLogin ?RXZlbnQzIERlYzA3

    Once your information has been updated and confirmed your online service would continue as usual and would not be interrupted

    Sincerely,
    Wells Fargo Bank Online
    Online Customer Service
     
  7. Dororo

    Dororo Administrator Staff Member

    Return-Path: ~apache@bremen.dotnet.com>
    Received: from 216.127.192.12, Wisconsin, bremen.dotnet.com
    Subject: 1 New Security Message From Wells Fargo Bank
    From: Wells Fargo Online ~customerservice@wellsfargo.com>
    Reply-To: Wells Fargo Online ~customerservice@wellsfargo.com>
    Date: Thu, 29 May 2008

    Dear Customer

    We value your relationship with Wells Fargo Bank to serve you better,we are installing the Best Banking software and would require you Update Your Online Banking Records.

    This is being done to secure your accounts and to protect your personal informations from being compromised.We at Wells Fargo Bank are committed in making sure that your online transactions are secure.

    Click on the link below to Update your Account Records
    tps www Online Banking Log-In rdcLogin ?RXZlbnQzIERlYzA3

    Once your information has been updated and confirmed your online service would continue as usual and would not be interrupted

    Sincerely,
    Wells Fargo Bank
    Online Customer Service
     
  8. Miyuki

    Miyuki Administratrix Staff Member

    This one is cute. The scammer couldn't even send the phishing link. :rolleyes:

    X-Originating-IP: [80.12.242.46], France, Paris, Projet Mail Essentials
    From: "Wells Fargo" <online@wellsfargo.com>
    Subject: Update Your Account Information
    Date: Fri, 30 May 2008


    Dear Wells Fargo Customer :

    Due to concerns for the safety and integrity of your WellsFargo account, we have issued this warning message. It has come to our attention that your WellsFargo account information needs to be updated as part of our continuing commitment to protect your account in this year 2008 and to reduce the instance of fraud on our website. If you could please take 5-10 minutes out of your online experience and update your personal records, this will lead to no future problems with the online service. Once you have updated your account records, yo
     
  9. Ted

    Ted Emeritus

    Wells Fargo Security Advisor

    Not giving much info away on this one...

    Return-Path: <service@wellsfargo.com>
    Received: from unknown (HELO User) (41.211.231.244)
    by firstcreditcorp.com with SMTP;
    From: "Wells Fargo Online"<service@wellsfargo.com>
    Subject: IMPORTANT - Customer Service Message
    Date: Wed, 13 Aug 2008


    Important Notification

    We were unable to verify your account information during our regular database verification process. This might be due to one or more of the following reasons:

    1. A recent change in your personal information (i.e. change of address).
    2. Submitting invalid information during initial enrollment process.
    3. Inability to accurately verify your account information due to an internal error within our database management systems.

    We would require the renewal of your records to forestall a re-occurrence of any future problems with your online service. However, failure to update your records might result in your account being suspended. Please note that your updating of records will not affect nor interrupt your online banking services. Click below to confirm your information.

    <a href="http://estella-jayne.com/20/redirec.php">Click to Proceed</a>

    We apologize for any inconvenience this may cause, and appreciate your assistance in helping us maintaining the integrity of the entire Wells Fargo system.

    Thank you,
    Wells Fargo Security Advisor.
     
  10. The Doctor

    The Doctor Administrator Staff Member

    Wonderful. A phishing mail from Nigeria. 41.211.231.244 = Direct on PC Ltd.
     
  11. Nanook

    Nanook Administrator Staff Member

    Return-Path: <alert.verify@wellsfargo.com>
    Received: from 62.173.57.21, Nigeria, Lagos, IPNX Nigeria Limited, ipnxmediahosting.com
    From: "Wells Fargo Bank" <alert.verify@wellsfargo.com>
    Subject: Security Alert :- Verify Your Online Information!
    Reply-To: [alert.verify@wellsfargo.com]
    Date: Thu, 14 Aug 2008


    http www mattshowroom com images wells-fargo-logo gif


    ACCOUNT INTRUSION ALERT !

    It has come to the notice of the security team of Wells Fargo bank that your online account has been accessed from certain blacklisted IP's. Therefore we have reason to believe that someone other than you is accessing your account. We therefore implore you to verify this by logging into secure online service now.

    Click below to go to the online service.

    Sign on to Wells Fargo Online Service

    It's All About Your Security ...


    Customer Service Department
    Wells Fargo Bank - Online Banking
     
  12. Ted

    Ted Emeritus

    Wells Fargo...Your Online Banking is Blocked

    Hey, but I don't got no account, man!?

    Return-Path: <Security-Service@WellsFargo.com>
    Received: from User (unknown [84.36.155.147]) Egypt, EgyNet Network
    Reply-To: <"Wells Fargo"@orange.fr>
    From: "Wells Fargo" <Security-Service@WellsFargo.com>
    Subject: Wells Fargo Security Service Notification (IMPORTANT)
    Date: Wed, 3 Sep 2008


    Your Online Banking is Blocked

    --------------------------------------------------------------------------------

    Because of unusual number of invalid login attempts on you account, we had to believe that, their might be some security problem on you account.

    So we have decided to put an extra verification process to ensure your identity and your account security.

    Please click on continue to the verification process and ensure your account security. It is all about your security.

    Thank you.

    Continue To Online Banking

    --------------------------------------------------------------------------------

    Deposit and loan products offered by Wells Fargo Bank, N.A., Member FDIC
    © 1999 - 2008 Wells Fargo. All rights reserved. , Equal Housing Lender
     
  13. Ted

    Ted Emeritus

    Wells FArgo, Your account will be suspended

    Not a customer so....anyone know if that is the type of account number set up is correct?...Ted.

    Return-Path: <alert@wellsfargo.com>
    Received: from User (unknown [202.64.67.242]) (HongKong)
    by mwinf2104.orange.fr (SMTP Server) with ESMTP id 538621C00159;
    From: "Wells Fargo" <alert@wellsfargo.com>
    Subject: *Alert* Account Suspension Notice
    Date: Fri, 26 Sep 2008

    Customer ID : 000-5432-6543A386-PSI

    This e-mail is to inform you that your account will be suspended within 48 hours due to account inactivity.

    You will have to verify your Account Information in order to re-activate your account. Failure to do so would permanently suspend your Online Banking subscription.

    Verify My Account Information

    You can help us provide you with the most relevant information by taking a moment to tell us your e-mail preferences.

    Remember, Wells Fargo is committed to your security and protection. To find out more, take a look at our Information Security section under Privacy and Security on the Web site.

    This is an auto-generated e-mail. Please do not reply to it.
     
  14. Ted

    Ted Emeritus

    Wells Fargo Web site...

    Gosh, the phish must be really biting lately, with all these hooks in the water recently?...

    Return-Path: <alert.service@wellsfargo.com>
    Received: from User (unknown [65.49.2.98]) (California,USA)
    by mwinf2018.orange.fr (SMTP Server) with ESMTP id 11BDD1C0004A;
    From: "Wells Fargo Online Banking" <alert.service@wellsfargo.com>
    Subject: Impotant Notice:Update Your Online Banking
    Date: Mon, 29 Sep 2008

    Security Precaution
    For optimal viewing of the Wells Fargo Web site, we recommend that you enable CSS.

    For your security, we have temporarily prevented access to your account. Wells Fargo safeguards your account when there is a possibility that someone other than you is signing on. You may be getting this message because you are signing on from a different location or device. If this is the case, your access may be restored when you return to your normal sign on method. For immediate access, you are required to follow the link below to secure your personal account informations?

    http://www.wellsfargo.online/security.precaution/updat e.logon
    Thank you for helping us protect your account.

    Home | Locations | Contact Us
    © 1999 – 2008 Wells Fargo. All rights reserved.
     
  15. Ted

    Ted Emeritus

    Wells Fargo Online Banking

    211.29.132.189 Sydney, Australia


    Dear Customer:

    We've noticed that you experienced trouble logging into Wells Fargo Online Banking.

    After three unsuccessful attempts to access your account, your Wells Fargo Online Profile has been locked. This has been done to secure your accounts and to protect your private information. Wells Fargo is committed to making sure that your online transactions are secure.

    To unlock your account, and verify your identity please follow this link and sign in:

    http www wellsfargo com webscr login_submit

    Sincerely,
    Wells Fargo
    Online Customer Service

    --------------------------------------------------------------------------------
    Protect yourself from fraud and identity theft. To learn more, go to http://wellsfargo.com/privacy_security/ fraud_prevention/

    If you have a question about your account, please sign on to your secure online banking session at wellsfargo.com , click the Sign On button and then select "Contact Us."
     
  16. phfobric

    phfobric Member

    Wells Fargo Bank/update your personal records

    Zee phish are still biting in 2009. Funny, my bank is merging with W/F, so if I wasn't with AFI, you might have been able to paint a big red "L" on my forehead, FOR L-OSER!!

    Thanks, to the AFI dojo, for it's humble protection. We are INFORMED.

    Official Message From Wells Fargo .
    Wednesday, January 28, 2009 12 04 PM
    From Wells Fargo Wed Jan 28 09 04 16 2009
    Return-Path: <alerts.services@wellsfargo.com>
    Authentication-Results: mta113.mail.re1.yahoo.com from=wellsfargo.com domainkeys=neutral (no sig) from=wellsfargo.com; dkim=neutral (no sig)
    Received: from 202.103.67.150 (HELO warrant.com.cn) (202.103.67.150) by mta113.mail.re1.yahoo.com with SMTP Thu, 29 Jan 2009 12 59 14 -0800
    Received: from User ([82.128.35.76]) (envelope-sender <alerts.services@wellsfargo.com>) by 202.103.67.150 with ESMTP for <phess@us.ibm.com>; Thu, 29 Jan 2009 01 04 44 +0800
    From:
    "Wells Fargo"<alerts.services@wellsfargo.com>
    Add sender to Contacts
    Subject: Official Message From Wells Fargo .
    Date: Wed, 28 Jan 2009 18 04 16 +0100
    MIME-Version: 1.0
    Content-Type: text/html charset="Windows-1251"
    Content-Transfer-Encoding 7bit
    Content-Length: 2195

    Dear valued Wells Fargo Bank member:

    Due to concerns, for the safety and integrity of the Wells Fargo Bank
    account we have issued this warning message.

    It has come to our attention that your Wells Fargo Bank account information needs to be
    updated as part of our continuing commitment to protect your account and to
    reduce the instance of fraud on our website. If you could please take 5-10 minutes
    out of your online experience and update your personal records you will not run into
    any future problems with the online service.

    Once you have updated your account records your Wells Fargo Bank account
    service will not be interrupted and will continue as normal.

    To update your Wells Fargo Bank records click on the following link
    http //www.wellsfargo.com/detail.do?BV_UseBVCookie=yes&BS_Id=BankingOverview

    Thank You.

    Accounts Management As outlined in our User Agreement, Wells Fargo Bank will
    periodically send you information about site changes and enhancements.

    Visit our Privacy Policy and User Agreement if you have any questions.
    http www wellsfargo com/inside/0,,,00.html
     
    Last edited by a moderator: Jan 29, 2009
  17. Sphinx

    Sphinx Administrator Staff Member

    From Wells Fargo Online
    Return-Path: <ofsrep.alert_acc@wellsfargo.com>
    Received: from US server, Louisiana, Kaplan telephone company
    From: "Wells Fargo Online" <ofsrep.alert_acc@wellsfargo.com>
    Subject: Alert: Issue On Your Account Update
    Date: Thu, 29 Jan 2009

    Dear Customer,

    During our regular upgrade and verification of Online Banking Service, we could not verify your current information. It's either your information has been changed, incomplete or not been updated for over 90days. as a result your access to our Online services has been limited.

    To restore your Banking access, kindly update your information by
    following the link below.

    <http://satupintu.com/authetications> Click here to update your account [Website hosted in Indonesia?
    Please do not reply to this message.

    Sincerely,
    Wells Fargo Online Customer Service
     
  18. Phoenix

    Phoenix Ninja

    Wells Fargo, Safety Concern

    X-Message-Delivery: Wells Fargo Online Banking [customerservice@wellsfargo.com> Sun, 29 Mar 2009 10:11:37[customerservice@wellsfargo.com>
    Return-Path: [anonymous@adventure.dns-hosting.com]
    <customerservice@wellsfargo.com>
    Received: from adventure.dns-hosting.com 207.44.168.54 [abuse@theplanet.com]
    Subject: Online Notification
    From: Wells Fargo Online Banking <customerservice@wellsfargo.com>

    Dear Customer,

    Due to concerns for safety. Your account has been randomly flagged in our system as part of our latest security measures against Fraud and ID Theft. This happens to ensure that only you have access to your Wellsfargo account and to ensure a safe Banking experience against online fraud. We require all flagged accounts as yours, to verify their information on file with us. To Speed up the Verification Process,We urge you verify your account now to avoid your online access disabled.

    To Begin the verification process of your Wellsfargo records, Please click on the reference link below:


    Reference*
    <http://www.wellsfargo.com>
     
  19. Garreg Ddu

    Garreg Ddu Gweinyddwr Staff Member

    X-SID-PRA: security center <service@orange.fr>
    Received: from User (LSt-Amand-152-33-51-81.w217-128.abo.wanadoo.fr [217.128.234.81]) by mwinf2101.orange.fr (SMTP Server) with SMTP id DD1291C00085; Tue, 7 Apr 2009 23:48:20 +0200 (CEST)

    Origin IP Address = 217.128.234.81 Wanadoo France Technical Role, FRANCE TELECOM/SCR, 48 rue Camille Desmoulins, 92791 ISSY LES MOULINEAUX CEDEX 9, FRANCE

    Reply-To: <service@orange.fr>
    From: "security center"<service@orange.fr>
    Subject: Confirm Your Online Banking Access
    Date: Tue, 7 Apr 2009 23:45:31 +0200
    To: undisclosed-recipients:;
    Return-Path: service@orange.fr



    Security Precaution
    For optimal viewing of the Wells Fargo Web site, we recommend that you enable CSS.

    For your security, we have temporarily prevented access to your account. Wells Fargo safeguards your account when there is a possibility that someone other than you is signing on. You may be getting this message because you are signing on from a different location or device. If this is the case, your access may be restored when you return to your normal sign on method.
    For immediate access, you are required to follow the link below to secure your personal account informations?

    https://online.wellsfargo.com/signon?LOB=CONS Link is a hidden re-direct to a site on a server in Italy. It is in NetCraft, MS Phishing Filter and McAfee SiteAdvisor already.
    Thank you for helping us protect your account.


    Home | Locations | Contact Us
    © 1999 – 2009 Wells Fargo. All rights reserved.
     
  20. Phoenix

    Phoenix Ninja

    Wells Fargo !

    X-SID-PRA: WellsFargo © <alerts@secure.wellsfargo.com> Sun, 19 Apr 2009 09:42:37 -0700
    Received: from host.sulaiman.cc 69.73.158.167 [abuse@jaguarpc.com]
    Received: from nobody by host.sulaiman.cc with local (Exim 4.69) (envelope-from <nobody@host.sulaiman.cc>) id 1Lva5y-0005js-IM

    Online Banking Alert
    Reactive Your Online Account access Information.
    X-PHP-Script: <www.adamcall.com</10.php for 41.232.164.77 [abusepoc@afrinic.net]

    From: WellsFargo © <alerts@secure.wellsfargo.com>

    Dear Valued Client

    WellsFrago Bank is sending you this notification message because we seem to be having errors in the proper verificatin of your account. This might be due to one of the following Reasons:

    *A recent Change in your access codes.
    *A recent Change in Your Information.
    *An Internal error within our servers.

    Please Click here to verify your account .

    Regards

    WellsFrago Bank
     

Share This Page