topic Re: Overpayment Refund in My Account/Billing

Overpayment Refund Scam Email Warning

shutter — Wed, 23 Nov 2022 14:12:20 GMT

Thought I should give you all a "heads up" on this scam... especially as we are all experiencing financial problems...

Received this email....... although I am no longer a PlusNet paying customer .( Over 2 yrs now)

Sent from this address

myPlusNet [Overpayment-59282869] <anandc@ziggo.nl>

Moderators Note: Topic title changed.

Looks like a scam - be aware of this email

Davey76 — Tue, 22 Nov 2022 07:36:38 GMT

Just received this email this morning and was very tempted to respond to it - but I checked my bank account and no money has gone out. On checking the sender - it came from the Netherlands and some spurious address. Watch out - this is no doubt a scam and the first time I have anything purporting to be from Plusnet. Not sure where to post this so no doubt a moderator will put it in the right place. I have forwarded the email on to Action Fraud.

Re: Looks like a scam - be aware of this email

Davey76 — Tue, 22 Nov 2022 07:47:04 GMT

The wording of the email for those not opening my screenshot goes:

"Overpayment Online Confirmation

Dear xxxxxxxxx.plus.com,

Great news! We have received your payment of £185.21.

This amount will be associated with your account [ xxxxxxxxx.plus.com ] unless you ask for a refund.

To officially claim your refund, you will have to proceed by filling an online application relating your information.

Claim refund
Date: 11/22/2022
Account:xxxxxxxxxx.plus.com
The process is entirely automated, no refund due to over-payment will be entertained through contact-us form.
Upon which your case will be examined and your payment will be processed."

Re: Looks like a scam - be aware of this email

Weystoner1 — Tue, 22 Nov 2022 07:55:15 GMT

My wife has also received this email (if it's the one sent from 'myPlusnet' - I can't open your screenshot) this morning. She's not the contract holder, so i guess the scammer must be targeting emails rather than Plusnet direct, if that makes sense - please feel free to correct me on this.

Dave

Re: Looks like a scam - be aware of this email

Davey76 — Tue, 22 Nov 2022 08:12:48 GMT

Yes it shows up as from myPlusNet but is actually from gbakkercvdzwet@ziggo.nl . The email has gone to two plusnet alias addresses that my wife and I use and not my "real" email address.

Re: Looks like a scam - be aware of this email

TheMightyAJ — Tue, 22 Nov 2022 08:23:27 GMT

Hi @Davey76,

Thanks for bringing this to our attention and helping to make other users aware too! If you do require any assistance with your account at the moment, please don't hesitate to get back in touch and we'll be happy to help

Re: Overpayment Refund

irritablegit — Tue, 22 Nov 2022 08:54:58 GMT

Yes, I've got an identical email.

Clearly a scam

Re: Overpayment Refund

Katie222 — Tue, 22 Nov 2022 09:07:24 GMT

me too

Re: Overpayment Refund

bertb — Tue, 22 Nov 2022 09:44:32 GMT

Me to.😡

Forwarded to Action Fraud.

report@phishing.gov.uk

Re: Overpayment Refund

merlin1 — Tue, 22 Nov 2022 09:44:41 GMT

I have just received 2 of these sent to separate PN accounts, I reported them to spam@spamtraining.plus.com

I must check if my wife has receved any.

Re: Overpayment Refund

willcutforth — Tue, 22 Nov 2022 09:59:04 GMT

Thank you for creating a post about this, it's very much appreciated. If you can all forward it on to abuse@plus.net as well that would be great. Just so our guys can monitor it from there as well.

Re: Overpayment Refund

krose — Tue, 22 Nov 2022 10:30:33 GMT

I'm also due £185.21 😉

Re: Overpayment Refund

willcutforth — Tue, 22 Nov 2022 10:34:05 GMT

Now I know why I'm being made redundant @krose

Re: Overpayment Refund

Buggwrit — Tue, 22 Nov 2022 10:42:53 GMT

I've also received one this morning. I never click on links in unexpected emails, however genuine they look, and just hover over to see where the links lead. The 'Claim Refund' link didn't look right. I then looked at the sender address and it was immediately obvious it was a scam, see attached.

I've forwarded it to abuse@plus.net as requested.

Re: Overpayment Refund

g3ucq — Tue, 22 Nov 2022 10:46:55 GMT

Also received the scam email. Forwarded to abuse@plus.net

Re: Overpayment Refund

mervyncp — Tue, 22 Nov 2022 12:30:52 GMT

Had this email today. It's an obvious scam to get your banking details, but it is very well designed to fool people that it is genuine.

Re: Overpayment Refund

shutter — Tue, 22 Nov 2022 14:18:30 GMT

@willcutforth I did try to send the whole thing ( view source ) to abuse@plus.net... BUT GMAIL BLOCKED IT.. said it was spam/scam HUH !.

So... I then cut off the bottom half... the bit with the link in , and sent you ( abuse@plus.net ) the header and the main part of the text.

For all other information see my screenshot at the top of this thread.

Thank you.

Ex PN customer.

Re: Overpayment Refund

GDD1000 — Tue, 22 Nov 2022 15:24:49 GMT

I've had this too. I noted the reply address was incorrect and surmised it was a scam. I think it might be a good idea if Plusnet issued a general warning.

Re: Overpayment Refund

Townman — Tue, 22 Nov 2022 16:35:46 GMT

Question to those who have received the email.

Was the mail address and the account name yours?

It begs the question where were all of these mail@youraccount.plus.com email addresses harvested from?

Re: Overpayment Refund

GDD1000 — Tue, 22 Nov 2022 16:39:30 GMT

Yes, it was my Plusnet e-mail address.