I first read about this bit of nastiness a couple weeks ago and shared it on Facebook.
They’ve taken it further, now giving people the option to log into any email account. Yikes!
I’ve made a video so you can see what to look for. Scary stuff. I’m experienced, had read about it and *still* almost fell for it.
Here’s the link to the original article written by the folks at WordFence: https://www.wordfence.com/blog/2017/01/gmail-phishing-data-uri/
This is a newer scam, the first I’ve seen of it, though I found blog posts dating back a few months in a quick google search. If you get an ‘invoice’ like this DO NOT PAY IT.
I can’t believe companies like this are not immediately shut down. Fraud and misrepresentation happening all over the place here: from the appearance (it sure looks like an invoice!) to listing a non-existent account number.
What happens if you pay it? First, the company is going to submit an order to transfer your domain under their registration services. Then you’ll get an email asking you to approve it. Yikes! Letting a company that uses such unscrupulous methods have control over your domain is a nightmare waiting to happen.
The easiest way to stop getting mails like this (if you get one) is to opt for the private registration on your domain. Prices range from free to $15 or so a year, depending on your registrar, and it will block these scammers from getting hold of your information. I decided to leave this particular domain (cdgwebdesign.com) public because I’ve seen similar scams and figured it was better if I got them so I could warn clients.
Don’t be fooled!
