Direct Deposit Transaction email - Scamalot

Seen a Scammer? Report Them!

Seen a scammer? Been caught out? Let the world know so they don't get burned. Add information if you see one that's already been logged - scammers move quickly and change details often to avoid detection. Details you log here will be in major search engines within an hour or two.

Please Like, Share, Tweet etc. to spread the word.
Scam Report Type: at  
Scam ReporterScam Tips Received
Anonymous
Maynard, AR, United States
2012-10-24 18:15:31
Identity Theft
+1 Direct Deposit Transaction email
 Scammer
  Information
Name:
   Nacha
Email Address:
   BB9A164F@sllsepa.com
The email copied below came with an attached ZIP file that supposedly contains a PDF. On closer examination, the \"PDF\" file has a .EXE extension following the .PDF extension. That means it is an executable file. If you open it you will run an unknown piece of malware that could infect your computer. I did not open it.


From: \"Nacha\"
To: nwilson@---.org
Subject: Direct Deposit transaction


Herewith we are notifying you, that your latest Direct Deposit transaction (Int. No.283589367141) was accepted.


The detailed information about this matter is available in the attachment.
View attached document using your PDF reader.


Please apply to your financial institution to obtain the necessary updates of the Direct Deposit software.


(c) 2012 NACHA - The Electronic Payments Association


nacha-directdeposit-trid4C7FE8602B8DF96CEABE6.pdf.zip
Follow Ups/Extra Information. Most recent is listed first.
Anonymous   () Added the following extra information on :2012-10-25 03:11:31
 Scammer
  Information
Email Address:
   BB9A164F@sllsepa.com
Additional information: Symantec antivirus found a trojan installer executable disguised as a PDF file contained inside a ZIP file. It was identified as TROJAN.ZBOT that can do seriously bad stuff.
The body of the email said:
Date: Wed, 24 Oct 2012 09:04:51 -0500 From: "Nacha" To: nwilson@---.org Subject: Direct Deposit transaction
Herewith we are notifying you, that your latest Direct Deposit transaction (Int. No.283589367141) was accepted.
The detailed information about this matter is available in the attachment. View attached document using your PDF reader.
Please apply to your financial institution to obtain the necessary updates of the Direct Deposit software.
(c) 2012 NACHA - The Electronic Payments Association
Attached file: nacha-directdeposit-trid4C7FE8602B8DF96CEABE6.pdf.zip

 Got more information on this Scam? Add to Report