Beware of Amex 'payment received' phishing attempts

I got an email this morning about how American Express received a payment from me. Had I clicked on the embedded links, I would have been in trouble.

For a split second, I was excited as the email told me American Express had received a payment from me to the tune of $4,127.38. I have a balance to pay off on my corporate card, after all.

Then I remembered that my real balance is much lower than that. In fact, I don't think I've ever carried a balance that high.

I investigated with the folks in our finance department, who confirmed that this is indeed just another phishing attempt.

The obvious message, here: If you get an email from Amex about a payment, don't trust it. Don't click it.

Have a reasonably safe Monday.

More on phishing and social engineering:

CSO's Ultimate Guide to Social Engineering

Latest Citadel scam sophisticated -- except for grammar

5 scams on Tumblr, Pinterest

New Zeus malware scam promises rebates, security

To comment on this article and other CSO content, visit our Facebook page or our Twitter stream.
How much is a data breach going to cost you?