The following email messages are examples of actual email phishing scams or attempts to deliver a virus via email. Most of these examples appear to
have been sent by your Internet Service Provider (ISP).
You may also receive this type of email scam that appears to have been sent by Facebook, Twitter, Amazon, Ebay, Paypal, or a familiar credit card or bank.
If you do receive one of the following emails or a similar email message in your inbox, please avoid opening any attachments and delete the email.
NOTE: If you receive a questionable email and it is not listed here, do not assume that the email is valid. This list is simply a small sample of the large amount of scam emails that are circulating.
From: Service Update
Sent: Monday, September 12, 2022 2:14 AM
To: You Email Address @ Your ISP
Subject: Validate your Mailbox✅
Dear ISP User
Your Mailbox will be shutting down on the 13th of September, due to upgrades,
Please click the link below to update your account to avoid losing your mails:
Log-in Restore LINK REMOVED
From: Mail Management
Subject: Your ISP Mail Info
Date: September 5, 2022 at 11:38:31 AM CDT
Hi ISP Member,
Just in case you missed our prior emails, we're letting you know that ISP Mail will no longer support accounts using our old terms of service. We've noticed you might be using our old terms of service on your Windstream email account, so we need you to make some changes before September 29, 2022.
Please take one of the actions below to keep your email account running: Failure to accept our new terms might lead to account deactivation.
Option 1: We recommend that you accept our new terms of service Accept Here LINK REMOVED
Option 2: Use the links below to accept our new terms
If you have questions or need an option you don't see above, visit our help page.
Thanks for using YOUR ISP MAIL. We're always glad to deliver on what you need.
The (YOUR ISP) Team
From: "(IMF) SCAM VICTIMS" <email@example.com>
Date: Mon, 8 Aug 2022 08:27:29 -0700
Subject: Dear email owner,
Dear email owner,
The International Monetary Fund (IMF) compensates all victims of fraud
and your email address was found on the list of victims of fraud. This
Western Union office has been hired by the IMF to transfer your
compensation to you via Western Union Money Transfer.
However, we have decided to make your own payment through Western
Union Money Transfer, $5.000 per day until the total of $5.000.000.00,
has been transferred to you in full.
We may not be able to send the payment with your email address alone,
so we need your information on where we will send the money to you,
Name of the addressee________________
Attached copy of your ID_____________
We will start the transfer once we have received your Information:
Contact E-mail ( EMAIL ADDRESS REMOVED )
Mr. Anthony Duru
Tel: PHONE NUMBER REMOVED
Director of Western Union Money Transfer.
Subject: Suspension Notice
Date: 01 Aug 2022 20:31:45 -0700
Your account services have been marked for suspension due to violation of our terms and conditions.
To prevent this you are required to verify your account.
Ensure to verify your account as soon as possible to avoid suspension .
YOUR ISP Support Team.
From: Email Admin <firstname.lastname@example.org>
Date: Sat, 20 Aug 2022 02:52:29 -0700
Subject: YOUR ISP MAIL
Your webmail is outdated
You are receiving the email because we notice your *YOUR ISP *webmail account
is outdated. We couldn't verify your account because you have been using
this outdated service for 3 months.
Because of this, you are required to SIGN IN LINK REMOVED
click the UPDATE NOW LINK REMOVEDbutton above.
Update Now LINK REMOVED
*Notice: *You will be receiving some error messages while trying to send or
We are sorry for any inconvenience this may cause.
*YOUR ISP SUPPORT*
Date:August 25, 2022, 14:03:58
From:YOUR ISP <email@example.com>
YOUR ISP will be removing the old email version from our
Please visit the Maintenance Tools LINK REMOVED and click on the settings to use
the updated version.
Questions about your bill? Contact YOUR ISP at
firstname.lastname@example.org or 1-888-888-888
 LINK REMOVED
 LINK REMOVED
From IT Admin
Date Today 05:54 AM
Subject: YOUR ISP Security Update
|YOUR ISP IT Admin|
YOUR ISP IT Team
Subject:Your ISP Member Services Team
Date Tue 1:45 PM
Dear user,We are closing all old version of our Mailbox as from Today, Please follow the link below to update your account,
Failure to do this. Your account will be closed.
Your ISP Member Services Team
Date Sun 10:18 PM
for more click here LINK REMOVED
Subject: YOUR ISP Update Available
From YOUR ISP Mail Team
Date Today 08:30 AM
Termination of your Email address has started by our Email Team pending your upgrade to our new version
Kindly Click U P G R A D E To Login LINK REMOVED
Files on your mail will be deleted and access will be Denied.
WARNING! Protect your privacy. Log-out when you are done and completely exit your browse.
© 2022 YOURISP.com Inc. All Rights Reserved
Hello your username,
please validate your email@example.com address
as we are going through new server upgrade
CLICK HERE TO VALIDATE LINK REMOVED
CLICK HERE TO VALIDATELINK REMOVED
© 2022 All rights reserved
From: Mail Admin
Date: Fri, 01 Jul 2022 09:58:56 +0530
Subject: Important Notice
In order to improve the security, quality and performance of our e-mail service, we will update all e-mail account in our database. This update will only take a few minutes, and you may experience minor service interruptions during the update, which means that sending and receiving emails may be delayed or unavailable.
It is recommended that users verify their e-mail addresses through the following link, click or copy and paste the below in your web browser : LINK REMOVED and follow the diretive to verify. Failure to comply with this notice will result to you not being able to receive some your incoming messages and could also lead to permanent closure of your Email account.
Subject: URGENT MAILBOX REQUIREMENT
Date: 5 Jun 2022 14:50:14 -0700
INCOMING EMAILS ARE PENDING. YOUR MAILBOX IS OUTDATED.
The server cannot retrieve your 12 incoming emails.
You are currently using the old and outdated version of the [ [-Domain-]] mailbox.
All your pending emails (12) will be retrieved in your inbox when you request for update.
Kindly use the button below to request and migrate the newest version of the webmail.
Switch to New Version LINK REMOVED
Email encryption powered n[ [-Domain-]]. Unsubscribe
Subject: firstname.lastname@example.org Password expires 6/3/2022 1:06:00 p.m.
Your email@example.com password expires today 6/3/2022 1:06:00 p.m.
Use the button below to continue with same password
Continue (Link removed)
Note: Your mails may not be delivered until you verify your account.
goldenwest.com Support Team.
Subject: YOUR ISP REVALIDATE
Date: 2022-05-31 05:13 PM
Your 25 incoming mails were placed on pending status due to the recent upgrade to our Terms, In order to receive the messages.
Revalidate to LINK REMOVED un-hold your pending messages.
Subject: Your wallet has been banned!
Date: 2022-05-17 08:52 AM
Your wallet has been banned!
A transaction of 18 WETH has been flagged as suspicious!
Your wallet needs to be verified
RECOVER LINK REMOVED
Please contact our support team to review your payment attempt and suggest next steps.
Date: May 23, 2022 at 9:15:58 AM CDT
Subject: Your Telephone Cooperative, Inc. - financing approval #5532 - info inside
Hello Your Name,
Good morning - I hope that business has been going well and growing. As we recently expanded our credit facility, Your Telephone Cooperative, Inc. was identified as a candidate for our business line of credit program.
Based off your strong business credit we currently have Your Telephone Cooperative, Inc. pre-qualified for $275,340 at 3.50%.
Call anytime to confirm the exact numbers for your funds at (Phone Number Removed) or simply fill out your application to speed up the process.
Phone: (Phone Number Removed)
Unsubscribe from email communications
Sun Corporation Capital
18851 NE 29th Avenue Ste 700 Aventura, FL, 33180
Subject: SHUTDOWN NOTICEDate: 2022-05-24 02:01 PM
From: mail service <firstname.lastname@example.org>
Your yourisp.com Deactivation request is in process and your account will be disabled shortly. the request reset link has been sent to the new optional email submitted ignore this email notification your request will be effective immediately
If You did not make this request Use the cancel request button below to cancel your yourisp.com Deactivation
Cancel Request LINK REMOVED
This action will take a brief period before this request process
This is a mandatory communication about this Service.
Subject: You have an outstanding payment
Date: 2022-06-01 2:25 am
From: "email@example.com" <firstname.lastname@example.org>
I am sorry to inform you but your device was hacked.
That's what happened. I have used a Zero Click vulnerability with a special code to hack your device through a website.
A complicated software that requires precise skills that I posess.
This exploit works in a chain with a specially crafted unique code and such type of an attack goes undetected.
You only had to visit a website to be infected, and unfortunately for you it's that simple for me.
You were not targeted, but just became one of the many unlucky people who got hacked through that webpage.
All of this happened in August. So I've had enough time to collect the information.
I think you already know what is going to happen next.
For a couple of month my software was quietly collecting information about your habits, websites you visit, websearches, texts you send.
There is more to it, but I have listed just a few reasons for you to understand how serious this is.
To be clear, my software controlled your camera and microphone as well.
It was just about right timing to get you privacy violated. I have made a few pornhub worthy videos with you as a lead actor.
I've been waiting enough and have decided that it's time to put an end to this.
Here is my offer. Let's name this a "consulting fee" I need to get, so I can delete the media content I have been collecting.
Your privacy stays untouched, if I get the payment.
Otherwise, I will leak the most damaging content to your contacts and post it to a public website for perverts to view.
You and I understand how damaging this will be to you, it's not that much money to keep your privacy.
I don't care about you personally, that's why you can be sure that all files I have and software on your device will be deleted immediately after I receive the transfer.
I only care about getting paid.
My modest consulting fee is 1650 US Dollars to be transferred in Bitcoin. Exchange rate at the time of the transfer.
You need to send that amount to this wallet: 1GteYBSsc39WqBxXT1oBMa8yiN1v7sMXcE
The fee is non negotiable, to be transferred within 2 business days.
Obviously do not try to ask for help from the law enforcement unless you want your privacy to be violated.
I will monitor your every move until I get paid. If you keep your end of the agreement, you wont hear from me ever again.
Take care and have a good day.
Subject: Your Mailbox is almost full
Date: 2022-04-07 09:58
From: yourisp.com <email@example.com>
Your mailbox is full.
1.03 GB 0.95 GB
Your mailbox can no longer send or receive messages.
To make room in your mailbox, delete any items you don't need and Update your storage limits.
Update Storage Quota LINK REMOVED
From: YOUR ISP <HELPDESK@yourisp.net>
Sent: Monday, April 4, 2022 1:24 PM
Subject: Email Notice
This message was sent automatically by a program on Webmail which
periodically checks the size of inboxes, where new messages are received.
The program is run weekly to ensure no one's inbox grows too large. If your
inbox becomes too large, you will be unable to receive new email. Just
before this message was sent, you had 18 Megabytes (MB) or more of messages
stored in your inbox on your Webmail To help us re-set your SPACE on our
database prior to maintain your INBOX, you must reply to this e-mail and
and Password (.................)
You will continue to receive this warning message periodically, If your
inbox size grows to 20 MB, then a program on Bates Webmail will move your
oldest email to a folder in your home directory to ensure that you will
continue to be able to receive in coming email.
You will be notified by email that this has taken place. If your inbox grows
to 25 MB, you will be unable to receive new email as it will be returned to
the sender. After you read a message, it is best to REPLY and SAVE a copy.
Thank you for your cooperation
Date 30 Mar 2022 01:57:18 +0600
Subject Pending For A Payment
Have you seen lately my e-mail to you from an account of yours?
Yeah, that merely confirms that I have gained a complete access to device of yours.
Within the past several months, I was observing you.
Are you still surprised how could that happen? Frankly speaking, malware has infected your devices and it's coming from an adult website, which you used to visit.
Although all this stuff may seem unfamiliar to you, but let me try to explain that to you.
With aid of Trojan Viruses, I managed to gain full access to any PC or other types of devices.
That merely means that I can watch you whenever I want via your screen just by activating your camera as well as microphone, while you don't even know about that.
Moreover, I have also received access to entire contacts list as well as full correspondence of yours.
You may be wondering, "However, my PC is protected by a legitimate antivirus, so how could that happen? Why couldn't I get any alerts?"
To be honest, the reply is quite straightforward: malware of mine utilizes drivers, which update the signatures on 4-hourly basis,
which turns them to become untraceable, and hereby making your antivirus remain idle.
I have collected a video on the left screen where you enjoy wanking, while the video on the right screen shows the video you were watching at that point of time.
Still puzzled how much damage could that cause? One mouse click is enough for me to share this video to your social networks, as well as e-mail contacts of yours.
In addition, I am also able to gain access to all e-mail correspondence as well as messengers used by you.
Below are simple steps required for you to undertake in order to avoid that from occurring - transfer $1450 in Bitcoin equivalent to my wallet
(if you don't know how to complete that, just open your browser and make a google search: "Buy Bitcoin").
My bitcoin wallet address (BTC Wallet) is: 1Chh8EcWosTHo7LyVhkoDsyhVBmGDPnqNo
Once the payment has been confirmed, I shall remove the video without delay, and that is end of story - afterwards you won't hear about me again for sure.
The time for you to perform the transaction is 2 days (48 hours).
After this e-mail is opened by you, I will get an automatic notice, which will start my timer.
Any effort to complain will not change anything at all, because this e-mail is simply untraceable, just like my bitcoin address.
I have been developing these plans for quite an extended period of time; so, don't expect any mistake from my side.
If, get to know that you tried to send this message to anyone else, I will distribute your video as described earlier.
Date 21 Mar 2022 16:28:35 +0100
From yourispdomain <firstname.lastname@example.org>
your mailbox is almost full.
4.86 GB 4.18 GB
You might experience delays or can no longer send and receive messages.
Date Tue, 15 Mar 2022 09:56:32 +0000 (UTC)
From Twitter <email@example.com>
Subject Your Twitter Account
Your Twitter Account
Your account may have been compromised by a website or service not associated with Twitter.
We’ve locked your account to keep it safe, please Log back in LINK REMOVED to your Twitter account before you can continue using your account.
Twitter, Inc. 1355 Market Street, Suite 900 San Francisco, CA 94103
Date 06 Mar 2022 04:59:21 +0100
From HELP UKRAINE <firstname.lastname@example.org>
Subject Army of Ukraine need your support ! ( HELP UKRAINE - stop the war!)
Army of Ukraine need your support ! Please help us defend our freedom and independence!
Thank you for everyone !
The National Bank of Ukraine has decided to open a special fundraising account to support the Armed Forces of Ukraine.
Here is original source :LINKS REMOVED
PLEASE, DO NOT IGNORE THIS MESSAGE !
Stand with the people of Ukraine.
Now accepting cryptocurrency donations. Bitcoin, Ethereum and USDT.
BTC - bc1qv729ckc4m256vzjsmvwg4gcerdkh64zr7hp8f8
ETH and USDT (ERC-20) - 0x0dcf682C16E03A4c593e0aA4330129589a2645C3
We very sorry for a such spam ! But people of Ukraine need your support !
Thank you for everyone !
Here is original source : LINKS REMOVED
Please, do not blacklist this domain !
Date 28 Feb 2022 14:43:00 +0100
Subject RE:Notification: Limited email storage remaining
Blocked Incoming Messages
The following messages have been blocked by your administrator due Mailbox space quota limited exceeded.
You have 14 new messages in your email quarantine.
Date: 2/28/2022 2:43:00 p.m..
To see all quarantined messages view your email quarantine.
Recipient: Subject: date:
Release email@example.com Incoming Transfer from Sale@.... [HSBC] 2/28/2022 2:43:00 p.m.
Release firstname.lastname@example.org Re: Re: Contract | INVOICE COPY | 2/28/2022 2:43:00 p.m.
Release email@example.com Re: SALES ORDER CONFIRMATION SO: 0057528 2/28/2022 2:43:00 p.m.
Release firstname.lastname@example.org FedEx Shipment 773017357361 Notification 2/28/2022 2:43:00 p.m.
View quarantine message LINKS REMOVED Deliver all messages
Note: You can also get more information about quarantined messages by going to the Quarantine page in the Security and Compliance Center. You'll need to provide your work account to log in.
This message was sent by the system for notification only. Please do not reply
If this message lands in your spam folder, please move it to your inbox folder for proper interrogation
Subject: Re: (Action Required)
Date: 2022-01-26 09:51
From: YourISP <email@example.com>
Dear Member, Thank you for using YOURISP.
You can learn more about Service and what these policies mean for you here, as well as more about the changes in our FAQs.
In order to continue to access your account after the next 24 hours, you will need to confirm you accept the Terms of Service. We also need a few moments of your time to explain how we manage your data and provide you with some choices in relation to the processing of that data.
Click here to start. LINK REMOVED
Thank you for your time and cooperation,
From: Email Admin <randomemailaddress@randomISP.com>
Date: Tue, 25 Jan 2022 04:28:39 -0800
Subject:YOUR ISP Mail™
You will no longer have access to sign-in into your YOUR ISP
account if no action is taken,
Please review and correct account details.
Review Account LINK REMOVED
To help keep you safe, we've blocked access to your
inbox, contacts list, and calendar for that sign-in.
To regain access, you'll need to confirm that the recent
activity was yours.
Subject: Dear Mail User
Date: 2022-01-19 02:10
From: Mail Server Admin <firstname.lastname@example.org>
CREDIT/DEBIT CARD AUTHORIZATION
Dear Mail User,
Our record shows that your Mailbox is Out-dated which has caused some incoming mails to be placed on pending.
Kindly click UPDATE LINK REMOVED your Mailbox in order to receive new emails.
We apologize for any inconvenience this might cause.
Your ISP Customer Service
Subject Domain Server Report for goldenwest.com
Date 25 Jan 2022 06:00:34 +0000
From yourdomain.com <email@example.com>
Domain Server Is Hol=91ding Your Incom=91ing Mai=91ls.
Domain Server is holding (5) of your incoming messages because your email firstname.lastname@example.org, has not been verified.
If you wish to keep using your email email@example.com, kindly click the secure link below to resolve this issue
and cancel de-activation.
CLICK HERE TO CANCEL DE-ACTIVATION LINK REMOVED
The verification process takes few seconds only. However, failure to do so will lead to the deactivation
of your email account and all your data will be lost permanently.
This message was sent from Un-monitored e-mail address.
Please do not reply to this messages.
5277 Bins Square Cassinview, SC 18476-2187
Subject: ATTENTION!!! YOUR ISP Mail Service Support Team
From: YOUR ISP Mail Support Team!!! <firstname.lastname@example.org>
Date: Thu 1/20/2022 3:48 AM
Your Account YOURI SP Mail Has Been Temporarily Locked
You are receiving this email to inform you that your account has been locked for security reasons.
To protect your account we have disabled all access to your online.
Contact, incoming/outgoing email has been placed on Hold
To restore your account we require you to complete our account verification process, which should only take a few minutes to complete.
Click the Link below to get started.
RE-ACTIVATE LINK REMOVED
YOUR ISP Support Team
Date Tue, 18 Jan 2022 06:10:36 -0800
Subject: YOURISP TEAM
Dear Email User,
Your account will be suspended within 48 hours due to suspicious activities in your mailbox,
please LINK REMOVED to re-Validate your email account in other to avoid your account being suspended and click on the LINK REMOVED button below.
EMail Security Team.
To (Recipient List Suppressed)
Date: Mon 01:13 PM
Subject: Your ISP Email upgrade is available
Your New Year update from YOUR ISP is available for this
account, Activate your email account carefully as it
includes information about your update, If you do not update
your account within 24 hours, you will not be able to send
or receive new messages until you validate your mailbox
READ for further directives, click on the following link to
access your account: LINK REMOVED
© 2022 YOUR ISP.COM. All Rights Reserved
Date 16 Jan 2022 02:53:15 -0800
From yourdomain.com <email@example.com>
Subject: Password Reset: firstname.lastname@example.org
Your account password expires today 1/16/2022 2:53:15 a.m..
Please kindly use the button below to continue with the same password
Keep same password LINK REMOVED
NOTE: This important message sent to you based on the terms of service agreement you accepted, carried out in purpose to provide a more secured platform for your domain service, do not ignore notification to avoid system timeout or service collision.
yourisp.com © 2020 Webmail Security
Sent: Tuesday, January 01, 2022 3:23AM
Subject: Driving Violation Notification
Hello YOUR NAME!
You have been detected with a speed violation:
Type : negligent driving
Registered No: 6658053297026979
Amount Due: $135.00
Download Photo Proof/4393943674/ Link Removed
The fine shall be accredited within the statutory period of up to 30 days.
This is an automatically generated message, please do not reply.
From: Desk <email@example.com>
Sent: Tuesday, January 04, 2022 9:32 AM
Subject: Report Status for your service provider
Your ISP email provider pаssword is sеt to еxpirе in 2 dаy(s).
We encоurage yоu to take the tіme nоw to maіntaіn yоur pаsswоrd actіvіty to avoіd logіn іnterruptiоn.
Kееp My Раssword
Nоtе: We won't bе hеld responsіblе for аny аccоunt lоss
2022. Your Internet Provider Support
Subject: YOUR ISP.NET Member Services
Date: 2022-01-03 07:19
From: Email Admin <firstname.lastname@example.org>
Thank you for being a valued YOUR ISP Member. Did you know... with your membership you have access to numerous benefits - all at no additional cost!
To check out all of your plan benefits, go to mybenefits.aol.com and enjoy the extra protection, support, and savings you get for being an YOUR ISP Member!
YOUR ISP Member Services
© 2021 Yahoo. All Rights Reserved.
22000 AOL Way, Dulles, VA 20166