Billions of Gmail and Outlook users told to search inboxes for ‘Amazon’ right now – your bank could be emptied | The US Sun
AN email scam has been revealed that affects users of all email services, including Gmail and Outlook.
The email may look convincing, but it is fake – and could see your bank account emptied if you fall for it.
1
Watch out for a scam email that’s spreading right now and could steal you bank account details
Credit: Getty
Scammers have been caught using a shortened Linkedin URLs trick, also known as Slinks (smart links).
The Slinks trick users into thinking they’re going to a legitimate website when they’re actually going to a fraudulent site.
A Slink can be legitimate when used correctly.
They create a clean Linkedin URL that sends people who click on it to another site and are popular for senders who want to avoid messy-looking URLs.
LinkedIn provides this feature to certain customers.
Malware Bytes revealed that this Slinks trick is being used as part of an Amazon Prime membership scam to make malicious links look convincing.
If you search “Amazon” in your email account you may spot the scam popup.
Scammers make the email appear to have been sent from Prime.
The subject states: “New Membership Statement : Renewal Prime Membership statement was ended – Your renewal scheduled on February 21, 2023.”
It claims that there’s been a problem with your card and that your Amazon membership benefits are now on hold.
It then threatens readers that they must take action within the next 24 hours.
Scammers often add time pressure into phishing emails so victims act without thinking.
The scam email then asks recipients to update their payment information.
This is where the “Slinks” come in so they can make links in the email look convincing.
If you hover over the URL link that you’re being directed to it will appear just like a short standard link but it will mention LinkedIn.
Some people may think this is odd but experts fear that a lot of people won’t notice.
The link will then take victims to a fake Amazon page that’s convincing enough to steal bank information once it’s entered.
How to avoid a phishing scam
Firstly, you should be thorough when checking who the email is from.
Even if it looks official you should double-check the email and look for any spelling mistakes or slight abnormalities in the sender’s email address.
Never feel pressurised into opening an attachment and avoid clicking the phrase “enable content.”
You should also be wary of links in emails.
If you’re certain an email you have received is a scam then delete it.
If you’re unsure about an email about a membership email, contact the brand in question directly from the details provided on its legitimate website.
