Home ScamsPhishing Scams ‘Your Mail Box Will Expire Soon’ Phishing Scam Email

‘Your Mail Box Will Expire Soon’ Phishing Scam Email

by Brett M. Christensen

Outline:
Message purporting to be from the eMail Security Team claims that your Mail Box will expire soon and you will therefore be blocked from sending and receiving emails if you do not click an update link within 24 hours.

Brief Analysis:
The email is not from any legitimate security team. It is a phishing scam designed to steal your email account password so that the account can be hijacked and used to launch spam and scam campaigns

Example:
Email Security team Scam email



Detailed Analysis:
According to this email, which purports to be from an entity that identifies itself as the ‘eMail Security team’, your Mail Box will expire soon. The message warns that, if you do not confirm by clicking an update link within 24 hours, your account will be deactivated and you will be blocked from sending and receiving emails. The email includes a ‘Powered by’ line that features a row of icons belonging to several well known email service providers.

However, the email is not from any ‘security team’ and the claim that your email account is about to be deactivated is untrue. In fact, the email is a phishing scam designed to steal your email account password.

If you click the link, you will be taken to a fraudulent website that asks you to supply your email password, supposedly to allow your account to be verified (see screenshot below). The link in the scam email is configured so that your own email address will appear on the fake update site, apparently in an attempt to add a degree of authenticity.

If you enter your password and click the ‘sign in to continue’ button, a ‘Page Not Found’ error will be displayed.

Meanwhile, however, the scammers can collect your email password and email address and use the data to hijack your real email account.  Once they have gained access to your account, they can use it to blast out further spam and scam emails in your name.

Phishing scams like this one are very common. Keep in mind that legitimate email providers will never send you a message demanding that you click a link to provide account login details.  It is always safest to login to your webmail account by entering the address into your browser’s address bar or via a legitimate email app.

Email password phishing website


Last updated: July 20, 2016
First published: July 20, 2016
By Brett M. Christensen
About Hoax-Slayer

References
Phishing Scams – Anti-Phishing Information
Phishing Scam List

 

Importance Notice

After considerable thought and with an ache in my heart, I have decided that the time has come to close down the Hoax-Slayer website.

These days, the site does not generate enough revenue to cover expenses, and I do not have the financial resources to sustain it going forward.

Moreover, I now work long hours in a full-time and physically taxing job, so maintaining and managing the website and publishing new material has become difficult for me.

And finally, after 18 years of writing about scams and hoaxes, I feel that it is time for me to take my fingers off the keyboard and focus on other projects and pastimes.

When I first started Hoax-Slayer, I never dreamed that I would still be working on the project all these years later or that it would become such an important part of my life. It's been a fantastic and engaging experience and one that I will always treasure.

I hope that my work over the years has helped to make the Internet a little safer and thwarted the activities of at least a few scammers and malicious pranksters.

A Big Thank You

I would also like to thank all of those wonderful people who have supported the project by sharing information from the site, contributing examples of scams and hoaxes, offering suggestions, donating funds, or helping behind the scenes.

I would especially like to thank David White for his tireless contribution to the Hoax-Slayer Facebook Page over many years. David's support has been invaluable, and I can not thank him enough.

Closing Date

Hoax-Slayer will still be around for a few weeks while I wind things down. The site will go offline on May 31, 2021. While I will not be publishing any new posts, you can still access existing material on the site until the date of closure.

Thank you, one and all!

Brett Christensen,
Hoax-Slayer