Santander Banking Scam; Subject: Important Customer Notice; seemingly from - Scamalot

Seen a Scammer? Report Them!

Seen a scammer? Been caught out? Let the world know so they don't get burned. Add information if you see one that's already been logged - scammers move quickly and change details often to avoid detection. Details you log here will be in major search engines within an hour or two.

Please Like, Share, Tweet etc. to spread the word.
  Scam type at Advanced Search      
Scam ReporterScam Tips Received
No Name
Kingston, Royal Kingston upon Thames, United Kingdom
2012-10-14 06:33:30
Identity Theft
Santander Banking Scam; Subject: Important Customer Notice; seemingly from 
Email Address:
Santander Identity Theft Scam from blacklisted IP located in Fareham, UK. , a HELO user of sending phishing scam (with ESMTPA id 36711788) supposedly from with attached file link.

Originating IP:
ISP: Mailbox Networks
Host Name:
Organization: Mailbox Networks
Country: Fareham, Hampshire F2, United Kingdom.

Phish routed via IP (ISP: Hood College; Host Name: ; Organization: Hood College located in Frederick, Maryland, MD21701, United States.)
_ _ _ _ _ _ _ _

Received: from ([]) by with Microsoft SMTPSVC(6.0.3790.4900);
Sat, 13 Oct 2012 09:46:28 -0700
X-AttachExt: htm
Received: from [] (account HELO User)
by (CommuniGate Pro SMTP 5.3.7)
with ESMTPA id 36711788; Sat, 13 Oct 2012 12:45:24 -0400
From: \"Santander Online Banking\"
Subject: Important Customer Notice
Date: Sat, 13 Oct 2012 17:42:16 +0100
MIME-Version: 1.0
Content-Type: multipart/mixed;
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-OriginalArrivalTime: 13 Oct 2012 16:46:28.0749 (UTC) FILETIME=[4A9FD3D0:01CDA962]

This is a multi-part message in MIME format.

Content-Type: text/plain;
Content-Transfer-Encoding: 7bit

Irregular activities has been detected on your Santander account

your access to your Santander account has been temporarily blocked

complete security verification required to remove all restriction placed on your

Open with Internet Browser and proceed now via attached file to restore access to your account


Customer Service Team
 Got more information on this Scam/Scammer?
Add to Report
 Problems with this Report? (Spam/Legal/Abuse etc) ?
Report to Scamalot
Curious what information about you is out there? You may be surprised! | Reverse Email Lookup | Reverse Phone Lookup

Increase ad revenue 50-250% with Ezoic