topic Re: spoof mail ??? in Everything else

spoof mail ???

PNnewbie — Fri, 14 Nov 2025 15:37:52 GMT

Hello,

Received an email this afternoon, supposedly from Plusnet entitled 'Plusnet Security Issue' and informing me that my account has been suspended. To remove the restrictions apparently I need to confirm my email address by logging on following a link in the mail.

Now I've not clicked on anything but have been doing some checks.

I'm able to send and receive emails as normal (I have a couple of other email accounts that I keep for emergencies...), I'm also getting the usual mail from various senders I'm familiar with, my 'net access is normal, my surfing speeds are normal ~300/40 down/up.

Is this a scam mail?

John

Re: spoof mail ???

jab1 — Fri, 14 Nov 2025 15:39:34 GMT

@PNnewbie Yes it is a scam/spam, and Plusnet are aware.

Re: spoof mail ???

brookhaven — Sat, 15 Nov 2025 15:54:24 GMT

Like wise - just received a similar email.

From email is given as [Removed]

Just enough to make it almost believable.

Eddie

Moderators Note: Personal information removed

Re: spoof mail ???

PNnewbie — Fri, 14 Nov 2025 15:46:42 GMT

jab1 - thanks SO much for your quick reply👍

I must admit I didn't look thru' the forums to see if it was mentioned (I panicked too much!) otherwise I would have probably seen something mentioned and not posted...

Thanks again for setting my mind at rest, have a nice weekend, peeing down here in North Wales...

John

Re: spoof mail ???

jab1 — Fri, 14 Nov 2025 15:48:50 GMT

Except the fact that it is a 'private' rather than 'corporate' address, @brookhaven

Re: spoof mail ???

brookhaven — Fri, 14 Nov 2025 15:54:03 GMT

Indeed - that was the give-away.

I checked my mail box via webmail but it's being excruitatingly slow at the moment, but there is a warning message about the migration.

Eddie

Re: spoof mail ???

PNnewbie — Fri, 14 Nov 2025 15:54:11 GMT

When I click on the link (right click NOT left click) and select 'open in a new window' my browser (Brave) warns that it is a scam site but lets me see where the link leads to:-

https://plustwebnet.s3.dualstack.us-east-1.amazonaws.com/plus.html

don't click the above😢

John

Re: spoof mail ???

jab1 — Fri, 14 Nov 2025 16:01:24 GMT

@PNnewbie I never click links from emails I don't trust, but interesting to see it is hosted Amazon AWS - Google must got wise to the number of spam agents they were hosting.

Re: spoof mail ???

PNnewbie — Fri, 14 Nov 2025 16:19:27 GMT

jab1 said...I never click links from emails I don't trust...

Very sound advice too. I wouldn't normally but I find that right clicking and opening the link in a new window merely shows the link destination without actually connecting. A safer way to do it is merely to hover the mouse over the link when open in the email and the link destination is shown at the bottom of the screen - maybe slightly less risky - works in Brave don't know about other browsers...

Thanks again.

John

Re: spoof mail ???

jab1 — Fri, 14 Nov 2025 16:28:40 GMT

A safer way to do it is merely to hover the mouse over the link when open in the email and the link destination is shown at the bottom of the screen - maybe slightly less risky

That is exactly what anyone should - if the email gets as far as their inbox - spoof/spam/scam ones never get that far in mine though, unless I need to forward them for inspection.

Re: spoof mail ???

CoralS — Fri, 14 Nov 2025 19:33:15 GMT

I have received the same email. I haven't clicked on anything. Could it be anything to do with the changeover to the new company taking over Plusnet's emails?

Re: spoof mail ???

dvorak — Fri, 14 Nov 2025 19:35:59 GMT

Moderators Note

This topic has been moved from Broadband to Everything Else

Re: spoof mail ???

jab1 — Fri, 14 Nov 2025 19:46:20 GMT

@CoralS Difficult to answer, as there are a number of unrelated incidents going off at the moment, and as I'm like you,only a Community member, I don't really know. Nor will anyone else, I think.

Re: spoof mail ???

Townman — Sat, 15 Nov 2025 16:01:19 GMT

@CoralS wrote:

Could it be anything to do with the changeover to the new company taking over Plusnet's emails?

In part - yes, but not directly.

Villains are quite imaginative in their scams, the more probable they can make them appear to be, the more likely unwary people might be sucked in. The Plusnet email services are in a state of flux; users might anticipate emails and thus not have their wits about them to not click links in unsolicited emails.

In the midst of such the user base is vulnerable to being hoodwinked into responding favourably to such emails. One should never enter personal details on a website accessed from an email. If you need to take action, always connect to the website from a link YOU enter into the the web browser.

Re: spoof mail ???

PNnewbie — Fri, 30 Jan 2026 18:54:51 GMT

Is this another spoof mail???

Apparently sent from [Removed]

"Plusnet Alert: Sign-In Attempt From Unrecognized Device no.88456-7299-777187"

Someone from Hungary attempting to log in using my account...

Moderators Note: Personal information removed

Re: spoof mail ???

jab1 — Fri, 30 Jan 2026 14:25:34 GMT

@PNnewbie Yep, another spoof. Suggest you forward it (as an attachment) to: abuse@plus.net

Re: spoof mail ???

PNnewbie — Fri, 30 Jan 2026 14:37:50 GMT

Thanks Jab1 for your quick reply, I've passed it on to Plusnet.

I'm receiving more spoof mail than I've had in years! Takes me back to all that Viagra stuff and mails from my friends in Nigeria!

John