Best Buy e-mail scam/fraud

I recieved a warning in my e-mail from our security department this morning.

If you happen to receive an e-mail from Best Buy concerning an order that was placed using your credit card information DO NOT respond to it as it did not come from Best BUY.

This e-mail links to a site that asks for personal information and credit card numbers. Again do not give out any information.

If you have already respond to this e-mail contact your Bank or Credit Card companies immediately to notify them.

I have been unable to find more info about this but their customer care agents will confirm this. Call them at 1-888-BESTBUY if you have any questions.

I have not seen a warning on their website nor in their main greeting when you call their number.

Do you have the actual header information from the original email that is being sent out? Does it look like a bestbuy address that is spoofed or what?

Yeah, those kinds of scams are common. Another point...

E-Mail is VERY insecure without proper encryption and sigs so sending your info via unencrypted mail is suicide anyway.

Thanks for the heads up phish

Unfortunately I don't have any of that info.

That email was sent to me by fraud/security department, not the computer security department. They regularly send out updates like this but don't include too much technical info. Its more for our customer service reps than anything...

I'll see if I can dig one up though.

Phish, I got the same thing and contacted BestBuy. Please forward your copy to onlinestore@bestbuy.com and their security department will be investigating as well as prosecuting if possible. Please note in the body of your email that you have recieved a fraudulent email.

DO NOT click on the link contained in the email.

I might also add that there is a fraudulent PayPal account confirmation email circulating at present....like I'm actually stupid enough to reply and give them my CC#....sheeeesh!

Hrmmm when I bought another computer (3 days ago) I got a letter from the guy at the desk as i was leaving it reads (Best Buy)

Quote:

---

Please Guard your purchases closely
In recent weeks, some customers have experienced theft of merchandise purchased from our store in public parking areas.
Best But employees value the safety of their customers. Please take the following steps to avoid and such misfortune
- Bring merchandise in a secure area.
- Bring merchandise home (or install it) as quickly as possible following the purchase.
We want all of our customers to enjoy their new products, so, please be careful.

Thankyou for telling us rip you off ;) (Thankyou for your dusiness!)

---

This just can be in my area, but it can happen any where. So be care ladys/gentleman. Thanks phishphreek80 for tell us about this.

Cya

Quote:

---

Originally posted here by AciDriveHB
Do you have the actual header information from the original email that is being sent out? Does it look like a bestbuy address that is spoofed or what?

---

Here you go....


Return-Path: <Paulie_Carolynn@prodigy.net>
Received: from clearsource.net (clsr-2415552-161.cc-tx.clearsource.net [24.155.52.161])
by pop.*********.net (8.11.6/8.11.0) with SMTP id h5IM6Eh27075
for <*****@*********.net>; Wed, 18 Jun 2003 18:06:16 -0400
Received: from clsr-2415552-161.cc-tx.clearsource.net (clsr-2415552-161.cc-tx.clearsource.net [24.155.52.161])
by clearsource.net (8.12.5/8.12.5) with ESMTP id ufzhsa39333
for <*****@*********.net>; Wed, 18 Jun 2003 19:04:44 -0400 (EST)
Message-ID: <rtmhw13307@prodigy.net>
From: "Aurore Aurore" <Paulie_Carolynn@prodigy.net>
To: <*****@*********.net>
Subject: BestBuy Order #1095619. Fraud Alert.
Date: Wed, 18 Jun 2003 19:04:42 -0400 (EST)
MIME-Version: 1.0
Content-Type: multipart/related;
type="multipart/alternative";
boundary="----=_NextPart_000_000F_01C33095.9F84B280"
X-Priority: 1
X-MSMail-Priority: High
X-Mailer: Microsoft Outlook Express 6.00.2720.3000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2727.1300
X-MailScanner: Found to be clean
X-MailScanner-SpamScore: sss
Status: O

I got the same scam email to my Jupitermedia email address (which obviously doesn't have an account with Best Buy). I've seen similar scams from Paypal and Ebay...these guys are a bit more slick than the Nigeria scam that's ~still~ floating around.
intmon

:rofl: Intmon... I remember getting that Nigerian scam as well in ALL of my e-mail accounts. I thought that was done away with by now. I guess some people never learn. While we are on the subject, here are some places to go about schemes such as this:

http://www.ftc.gov/bcp/conline/pubs/alerts/doznalrt.htm

http://www.urbanlegends.com/ulz/

The Nigerian scam: http://www.snopes2.com/inboxer/scams/nigeria.htm

http://familyinternet.about.com/libr.../aa061603a.htm

Quote:

---

Companies will never ask you to verify your password or ask for credit card information on an email. Always make sure that you are using a secure Website before entering credit card information. To verify if you are using a secure connection look for a locked padlock on the bottom of your status bar and https in the url instead of http (https://www.paypal.com instead of http://www.paypal.com).

---

www.google.com is also a great source... :)

What Nigerian scam?

I am still waiting for that guy to deposit his 25 million US dollars into my account so he can get it out of the country. I even sent him the USD2500.00 for 'administration' costs. :)

I personally felt that with that nigerian one.. The freemail account used for 'queries' and the differing sender kinda gave it away abit... Not to mention the fact that who on earth would want to put 25 mil in my bank account..