ABSA Excess Charges Refund Banking Phishing Scam

[Previous Example] [Share This Page] [Back To The Main SHPAMEE Index] [Next Example]

VERY IMPORTANT INFORMATION, READ THIS FIRST: The example and associated information published on this page are subject to the SHPAMEE Terms Of Use. Please familiarise yourself with these terms before viewing or using any information on this page.

Header:

From - Fri Sep 14 16:59:31 2012
X-Account-Key: account2
X-UIDL: x
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
X-Apparently-To: x via 212.82.111.162; Fri, 14 Sep 2012 12:39:39 +0000
X-YahooFilteredBulk: 69.175.67.10
Received-SPF: none (domain of server.lebanonpost.com does not designate permitted sender hosts)
X-YMailISG: x
X-Originating-IP: [69.175.67.10]
Authentication-Results: mta1050.mail.ird.yahoo.com from=633secure-absa.co.za; domainkeys=neutral (no sig);
from=633secure-absa.co.za; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO server.lebanonpost.com) (69.175.67.10)
by mta1050.mail.ird.yahoo.com with SMTP; Fri, 14 Sep 2012 12:39:39 +0000
Received: from lebanon by server.lebanonpost.com with local (Exim 4.77)
        (envelope-from <lebanon@server.lebanonpost.com>)
        id 1TCV8c-0004C1-36
        for x; Fri, 14 Sep 2012 07:36:50 -0500
To: x
Subject: Your Refunds
From: ABSA <34435@633secure-absa.co.za>
Reply-To:
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 8bit
Message-Id: <x@server.lebanonpost.com>
Date: Fri, 14 Sep 2012 07:36:50 -0500
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server.lebanonpost.com
X-AntiAbuse: Original Domain - yahoo.co.uk
X-AntiAbuse: Originator/Caller UID/GID - [503 501] / [47 12]
X-AntiAbuse: Sender Address Domain - server.lebanonpost.com

Body:


Dear Customer,



We have been instructed by SARS to refund to you all excess charges on your income over a 
period of one year 



Kindly click here now and follow the subsequent instructions to ensure the full amount is 
remitted into your account.



© Copyright 2012 ABSA Bank.


This email was sent automatically please do not respond.

Comments:

This e-mail has the same formatting and style as the 2012 SARS PAYMENTS scam.

This one is even more ridiculous. To refund all excess charges on your income? What excess charges? SARS may be a powerful organisation, but they can't go around instructing banks to make all kinds of refunds, so this is obviously a load of hogwash.

Be wide awake when you deal with e-mails like this and leave the day dreaming to the phishing scammers.

Related Cyber Criminal Profiles:

No related profiles found.

Similar Spam Examples:

SARS Efiling / ABSA Payment Notification Phishing Scam
Banking Phishing Scam - Your Pending EFT Payment!!!
ABSA Banking Phishing Scam - 2012 - SARS PAYMENTS
Banking Phishing Scam - ABSA Global business customers certificate update
ABSA Bank Phishing Scam - Authorized EFT Payment Received

Related Malware Samples:

No related malware samples found.

[Previous Example] [Share This Page] [Back To The Main SHPAMEE Index] [Next Example]