Bitcoin Payment Recieved scam

[Stinky_Pete]

I've just received an e-mail from no-reply@blokchains.info titled "Bitcoin Payment Recieved" claiming that I've received $2,031.88

Of course it's asking my to log on to my blockchain account.

I'm treating it as a scam because a) mispelling in title b) e-mail is NOT from blockchain address, and c) I don't have a blockchain account.


TREAT AS SUSPECT!

[copychicken]

thanks... happened to me too...

[hilariousandco]

c) I don't have a blockchain account.


TREAT AS SUSPECT!

I think merely treating it as a scam/suspect is an understatement. I think you're safe in guaranteeing it's a scam based on C alone   (though all three reasons combined should seal the deal). If anyone gets these types of emails they should just load up a bookmark and check their balance on the blockchain instead rather than clicking on links. The beauty of the blockchain is you don't even need to log in to see your balance as it's all there for anyone to see.

[Eisenhower34]

c) I don't have a blockchain account.


TREAT AS SUSPECT!

I think merely treating it as a scam/suspect is an understatement. I think you're safe in guaranteeing it's a scam based on C alone   (though all three reasons combined should seal the deal). If anyone gets these types of emails they should just load up a bookmark and check their balance on the blockchain instead rather than clicking on links. The beauty of the blockchain is you don't even need to log in to see your balance as it's all there for anyone to see.

The attacker is likely betting that the OP does not know what his addresses are outside of his wallet so he would be forced to log into blockchain.info to check his balance/see the received funds.

I would guess that the cost of sending such spam would be somewhat cheap and would be more then paid for if only one or two people were to leak their identifier/password to the phishing site and do not have a 2nd password enabled.

[onemorebtc]

i got the same mail...

[mkc]

Yeah, me too. Almost fall for it. Until my browser blocked me ...

[TinaK]

do you sure the mail send by "blokchains.info"?

[onemorebtc]

do you sure the mail send by "blokchains.info"?

text version of the mail...
this email address is not from mtgox or bct.. curious where they got it from...

Subject:    Bitcoin Payment Recieved
Date:    Thu, 20 Nov 2014 12:49:49 -0500
From:    no-reply@blockchain.info <no-reply@blokchan.info>
To:    free@k1024.de



   transaction summary!

**Amount Recieved :** $2,031.88 <http://blogcham.info/wallet/login>
**Transaction Fee :** $34.56 <http://blogcham.info/wallet/login>
**Sent Time : *20/11/14

*Confirm Login Link :*

https://blockchain.info/wallet/login <http://blogcham.info/wallet/login>

Transaction Containing outputs from which we were unable to decode a
bitcoin address

*Top Tip*
If within 48 hours we do not receive your confirmation, your wallet will
be erased and all their bitcoins will be reset.

*
*
*

[TinaK]

do you sure the mail send by "blokchains.info"?

text version of the mail...
this email address is not from mtgox or bct.. curious where they got it from...

Subject:    Bitcoin Payment Recieved
Date:    Thu, 20 Nov 2014 12:49:49 -0500
From:    no-reply@blockchain.info <no-reply@blokchan.info>
To:    free@k1024.de



   transaction summary!

**Amount Recieved :** $2,031.88 <http://blogcham.info/wallet/login>
**Transaction Fee :** $34.56 <http://blogcham.info/wallet/login>
**Sent Time : *20/11/14

*Confirm Login Link :*

https://blockchain.info/wallet/login <http://blogcham.info/wallet/login>

Transaction Containing outputs from which we were unable to decode a
bitcoin address

*Top Tip*
If within 48 hours we do not receive your confirmation, your wallet will
be erased and all their bitcoins will be reset.

*
*
*

aha, I‘m careless  

it's blokchains.info miss the letter c

Official site should be bloCkchains.info

[hua_hui]

I have blockchain. Info wallet. I have a habbit when I receives bitcoin payment email, I will click the tx and see how much I have received then click my bitcoin address on that page. I remember all my address in blockchain.info. If I found the strange bitcoin receiving address, I will be suspicious. I never sign  in my blockchain account unless I need to make a payment.

[bitkilo]

Sure is a scam, $34.56 transaction fee for sending $2031.88
This scammer obviously doesn't know bitcoin very well, he must be thinking of bank fees.

[Aswan]

c) I don't have a blockchain account.

This is the only thing that can save you from future scams and hacks. You might have dodged this one even if you had a blockchain account, but scams get better and blockchain.info can get hacked too.

Not having a blockchain account or not storing any BTC there is the only viable option imo.

[greatwolf_]

I wonder how they got your email to start with.

[twister]

I received one email just like this cpl of days back and as soon as I read it my inner voice goes "yeah right!"

so I tagged it as spam and then like half an hour later, went to blockchain wallet with my original identifier and my inner voice was right.  

[turvarya]

I recently activated my yubikey for blockchain.info.
So, I am wondering, if I would have fallen for that, would I have a problem?

[Biitcoin]

Thanks for the warning mate , It would be very helpful also if you can screenshot the email

[Bitbuy]

Yes, it's a total scam, but creatively done nonetheless....
for one, they recreated a fake site, but when you look at the certificate you should see a certificate error stating that the issued certificate does not match the ip address of the domain. It looks to be some kind of Webinjection exploit. It only servers as a fishing attempt to get your blockchain wallet credentials.

[Rampton]

I wonder how they got your email to start with.

It's very likely that they got it from another service you signed up and used your email address. If that service gets hacked or is compromised then they could have access to your email address. I believe the Feathercoin forum was hacked a while back and peoples emails may have been compromised, but this could happen to any forum especially if they're not careful.

[Bitcoins101]

You would think that if someone is going to send thousands of spam emails they'll at least check their spelling.

The biggest issue with this scam is that anyone stupid enough to fall for it likely doesn't have very much BTC. Kind of a waste of time to send thousands of emails just to phish a few guys with .05 BTC in their wallets.

[Remember remember the 5th of November]

Official site should be bloCkchains.info

This post shows that you yourself will be scammed, and get others scammed in the process too. it is blockchain.info, not blockchainS.