# Holy ALMOST Scammed.....

**URL:** https://forums.speedlife.net/t/holy-almost-scammed/53497
**Category:** NYSpeed Off Topic
**Created:** [August 19, 2008, 7:40am UTC](https://forums.speedlife.net/t/holy-almost-scammed/53497 "2008-08-19T07:40:27Z")
**Posts on this page:** 20
**Page:** 1

<div class="post-metadata">

### Author: ![LAFENGAS](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/lafengas/32/7573_2.png) [@LAFENGAS](https://forums.speedlife.net/u/LAFENGAS)
#### Post date: [August 19, 2008, 7:40am UTC](https://forums.speedlife.net/t/holy-almost-scammed/53497/1 "2008-08-19T07:40:27Z")

</div>

I totally almost fell into this scam. I use my online Bank of America account avidly every day for my business and personal.

I entered in my username and my mother’s middle name…then it took me to the login screen. For those who don’t know, BoA has a login screen where you have to verify a picture that you chose for extra security. Anyway, the picture didn’t load, it acted as if it was taking a moment and I started entering my password in, just by force of habit.

that’s when i and happened to look up at the URL and saw a http://… not a https://

i would have been totally fucked if i would have entered my password. So instead, i entered “FUCK YOU” for my password and everything else (as you can see) and of coarse, everything went through just fine as if it was all correct.

JUST A HEADS UP…BE AWARE. I feel i am usually really good at identifying these sort of scams, but was almost had.

the original e-mail:

![http://photos.e46fanatics.com/data/500/scam2.JPG](http://photos.e46fanatics.com/data/500/scam2.JPG)

the log in screen:  
 ![http://photos.e46fanatics.com/data/500/scam3.JPG](http://photos.e46fanatics.com/data/500/scam3.JPG)

and the account info  
 ![http://photos.e46fanatics.com/data/500/scam1.JPG](http://photos.e46fanatics.com/data/500/scam1.JPG)

---

<div class="post-metadata">

### Author: ![ILCisDEAD](https://avatars.discourse-cdn.com/v4/letter/i/a87d85/32.png) [@ILCisDEAD](https://forums.speedlife.net/u/ILCisDEAD)
#### Post date: [August 19, 2008, 7:41am UTC](https://forums.speedlife.net/t/holy-almost-scammed/53497/2 "2008-08-19T07:41:35Z")

</div>

soo. a spoofed email? I see the same picture three times  
whats the reply to?

you do realize http and https are essentially the same thing… https is secure where as http is not… the domain is the important part. [bankofamerica.com](http://bankofamerica.com)

---

<div class="post-metadata">

### Author: ![LAFENGAS](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/lafengas/32/7573_2.png) [@LAFENGAS](https://forums.speedlife.net/u/LAFENGAS)
#### Post date: [August 19, 2008, 7:42am UTC](https://forums.speedlife.net/t/holy-almost-scammed/53497/3 "2008-08-19T07:42:45Z")

</div>

no “reply to” other then what you see in the address bar at the top of the e-mail: [alerts@bankofamerica.com](mailto:alerts@bankofamerica.com)

clicking on the enclosed link is what brought me to the other screens.

---

<div class="post-metadata">

### Author: ![Pass\_McGass](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/pass_mcgass/32/7616_2.png) [@Pass\_McGass](https://forums.speedlife.net/u/Pass_McGass)
#### Post date: [August 19, 2008, 7:42am UTC](https://forums.speedlife.net/t/holy-almost-scammed/53497/4 "2008-08-19T07:42:52Z")

</div>

You uploaded the same 3 images. Fucking dick.

edit- oh, it’s supposed to be like that?

dick.

pps: that’s a really well put together scam email, btw.

---

<div class="post-metadata">

### Author: ![AJC2500](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/ajc2500/32/4965_2.png) [@AJC2500](https://forums.speedlife.net/u/AJC2500)
#### Post date: [August 19, 2008, 7:43am UTC](https://forums.speedlife.net/t/holy-almost-scammed/53497/5 "2008-08-19T07:43:15Z")

</div>

thanks for the heads up. however you just posted three of the same pics…

---

<div class="post-metadata">

### Author: ![Geoff](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/geoff/32/6104_2.png) [@Geoff](https://forums.speedlife.net/u/Geoff)
#### Post date: [August 19, 2008, 7:43am UTC](https://forums.speedlife.net/t/holy-almost-scammed/53497/6 "2008-08-19T07:43:25Z")

</div>

:gotme: I see 3 different images

---

<div class="post-metadata">

### Author: ![Joe](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/joe/32/7219_2.png) [@Joe](https://forums.speedlife.net/u/Joe)
#### Post date: [August 19, 2008, 7:44am UTC](https://forums.speedlife.net/t/holy-almost-scammed/53497/7 "2008-08-19T07:44:30Z")

</div>

> [@Geoff](#):
>
> :gotme: I see 3 different images

as do I.

---

<div class="post-metadata">

### Author: ![Pass\_McGass](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/pass_mcgass/32/7616_2.png) [@Pass\_McGass](https://forums.speedlife.net/u/Pass_McGass)
#### Post date: [August 19, 2008, 7:45am UTC](https://forums.speedlife.net/t/holy-almost-scammed/53497/8 "2008-08-19T07:45:52Z")

</div>

Would be hilarious if it was legit.

---

<div class="post-metadata">

### Author: ![ILCisDEAD](https://avatars.discourse-cdn.com/v4/letter/i/a87d85/32.png) [@ILCisDEAD](https://forums.speedlife.net/u/ILCisDEAD)
#### Post date: [August 19, 2008, 7:46am UTC](https://forums.speedlife.net/t/holy-almost-scammed/53497/9 "2008-08-19T07:46:11Z")

</div>

in the second two images (which finally showed up) the domain is [samsells4u.co.uk](http://samsells4u.co.uk) hence the spoof.

Well good work not getting fucked

---

<div class="post-metadata">

### Author: ![Pass\_McGass](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/pass_mcgass/32/7616_2.png) [@Pass\_McGass](https://forums.speedlife.net/u/Pass_McGass)
#### Post date: [August 19, 2008, 7:46am UTC](https://forums.speedlife.net/t/holy-almost-scammed/53497/10 "2008-08-19T07:46:15Z")

</div>

> [@Joe](#):
>
> as do I.

Uhh durrrr. He obviously edited it by now.

---

<div class="post-metadata">

### Author: ![Joe](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/joe/32/7219_2.png) [@Joe](https://forums.speedlife.net/u/Joe)
#### Post date: [August 19, 2008, 7:47am UTC](https://forums.speedlife.net/t/holy-almost-scammed/53497/11 "2008-08-19T07:47:10Z")

</div>

3 minute ninja edit…not bad

---

<div class="post-metadata">

### Author: ![Nikuk](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/nikuk/32/7254_2.png) [@Nikuk](https://forums.speedlife.net/u/Nikuk)
#### Post date: [August 19, 2008, 7:47am UTC](https://forums.speedlife.net/t/holy-almost-scammed/53497/12 "2008-08-19T07:47:16Z")

</div>

nice catch.

EVERYTIME i get any email from banks, cards, ebay, etc… and they have a “new alert” or “message” with a link to login, i pop open a new browser & type in the url.

Or, “mouse over” the login link.

---

<div class="post-metadata">

### Author: ![JayS](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/jays/32/15375_2.png) [@JayS](https://forums.speedlife.net/u/JayS)
#### Post date: [August 19, 2008, 7:48am UTC](https://forums.speedlife.net/t/holy-almost-scammed/53497/13 "2008-08-19T07:48:20Z")

</div>

lol… look at the link. “[samsells4u.co.uk](http://samsells4u.co.uk)”?

Some good rules to follow when it comes to banking emails.

1. Your bank will never email you asking to update your information.

2. Never click on a link sent to you in an email claiming to be your bank. Open your browser window and go to the address yourself.

I’ve seen much better scammer emails than the one you got. One of them even managed to overlay an image in the address bar with the real https address so it look 100% legit. The only way you could see it was an overlay was to drag the browser window around the screen and the overlay couldn’t quite keep up, revealing the bogus address under it. As soon as you stopped moving the window the overlay would snap right back into perfect position. We spent half a day trying to figure how the hell the scammer did it because we were impressed. Impressed in that, “wow, that’s evil as hell but I have to give you credit for the effort you put in” kind of way.

---

<div class="post-metadata">

### Author: ![9c1](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/9c1/32/7392_2.png) [@9c1](https://forums.speedlife.net/u/9c1)
#### Post date: [August 19, 2008, 7:55am UTC](https://forums.speedlife.net/t/holy-almost-scammed/53497/14 "2008-08-19T07:55:53Z")

</div>

> [@JayS](#):
>
> lol… look at the link. “[samsells4u.co.uk](http://samsells4u.co.uk)”?

That’s the very first thing I noticed about the screenshots. I always make sure I examine the URL before entering any info. It’s force of habit for me now.

Good job not falling for their scam. :tup:

---

<div class="post-metadata">

### Author: ![Locutus](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/locutus/32/7574_2.png) [@Locutus](https://forums.speedlife.net/u/Locutus)
#### Post date: [August 19, 2008, 7:57am UTC](https://forums.speedlife.net/t/holy-almost-scammed/53497/15 "2008-08-19T07:57:16Z")

</div>

good catch.

---

<div class="post-metadata">

### Author: ![Firehawk853](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/firehawk853/32/7607_2.png) [@Firehawk853](https://forums.speedlife.net/u/Firehawk853)
#### Post date: [August 19, 2008, 8:04am UTC](https://forums.speedlife.net/t/holy-almost-scammed/53497/16 "2008-08-19T08:04:38Z")

</div>

> [@Nikuk](#):
>
> nice catch.
> 
> EVERYTIME i get any email from banks, cards, ebay, etc… and they have a “new alert” or “message” with a link to login, i pop open a new browser & type in the url.

especially ones from Paypal or Ebay. scammers.

---

<div class="post-metadata">

### Author: ![eclipsed](https://avatars.discourse-cdn.com/v4/letter/e/bbce88/32.png) [@eclipsed](https://forums.speedlife.net/u/eclipsed)
#### Post date: [August 19, 2008, 8:08am UTC](https://forums.speedlife.net/t/holy-almost-scammed/53497/17 "2008-08-19T08:08:17Z")

</div>

that would have royally sucked.

i am glad you are observant.

banks will NEVER email you and ask you to update personal or account info.

---

<div class="post-metadata">

### Author: ![JUICEDSS](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/juicedss/32/7185_2.png) [@JUICEDSS](https://forums.speedlife.net/u/JUICEDSS)
#### Post date: [August 19, 2008, 8:19am UTC](https://forums.speedlife.net/t/holy-almost-scammed/53497/18 "2008-08-19T08:19:12Z")

</div>

Spelling was my first tip. Usually they will get simple things like that wrong.

Submiting

---

<div class="post-metadata">

### Author: ![Boomin99GT](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/boomin99gt/32/7306_2.png) [@Boomin99GT](https://forums.speedlife.net/u/Boomin99GT)
#### Post date: [August 19, 2008, 8:42am UTC](https://forums.speedlife.net/t/holy-almost-scammed/53497/19 "2008-08-19T08:42:45Z")

</div>

Scammers piss me off.

---

<div class="post-metadata">

### Author: ![dftsilvia](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/dftsilvia/32/7447_2.png) [@dftsilvia](https://forums.speedlife.net/u/dftsilvia)
#### Post date: [August 19, 2008, 9:41am UTC](https://forums.speedlife.net/t/holy-almost-scammed/53497/20 "2008-08-19T09:41:37Z")

</div>

damn they are getting into everything now.

what ever happened to working hard for your money, dam scammers

[Next page](https://forums.speedlife.net/t/holy-almost-scammed/53497.md?page=2)
