Dear Capital One Cardholder, your online has expired. (PHISHING/IDENTITY THEFT SCAM SUPPOSEDLY FROM "CAPITAL ONE")

All these “undisclosed recipients” cards have “expired”? Surely you don’t believe that, because there isn’t a word of truth to it! First of all, if that were the case, you would be addressed by name. Secondly, most companies don’t threaten you. This is a blatant phishing attempt, so if you receive this, delete it and don’t click on the enclosed link.

Dear Capital One Cardholder, your online has expired.

Tuesday, January 5, 2010 9:42 AM



From:


"Capital One" online@capitalone.com


To:


undisclosed-recipients



Dear Capital One Cardholder,



This is an official notification from Capital One. Your online has expired.


If you want to continue using our services you have to renew your online right away. If not, your online will be limited and deleted.


To continue click here and complete the renew form with your current


information.


Thank you,


Capital One Online Banking Support

I forwarded this to abuse@capitalone.com and this is their response:
 
Re: Fw: Dear Capital One Cardholder, your online has expired. (KMM14151031I14835L0KM)
Wednesday, January 6, 2010 6:24 AM
From: "Capital One - Abuse" abuse@capitalone.com
To: "Linda DePeel" la_black_roze@yahoo.com
 
Hello,
 
Thanks for letting us know about this phishing e-mail. It definitely didn't come from us so please don't respond to it. But don't worry: our systems are not compromised in any way and we follow up on these matters with law enforcement agencies.
 
Just in case you think you might have provided personal information or clicked on the links in the fake e-mail, here are a few things you should do:
 
- If you are a Capital One customer, call us immediately at 1-800-955-7070 (00+1+804-934-2001 if you are overseas, collect calls will be accepted) to report that account information has been compromised
.- Log in to Capital One Online Banking and change your password and security questions.
- Check your accounts for suspicious activity.
- Run your antivirus software on your computer.
 
For the future, here are some ways of detecting phishing e-mails:
 
- Be careful of urgent-sounding e-mails that ask for your personal information
- If you get an e-mail that claims to be from us but you aren't sure, oryou think it's suspicious, don't click any of the links. Just send it to us then delete it.
- Notice typos and grammatical mistakes. It's a dead giveaway in fake e-mails.
 
Also, here are some things you can do to make sure no one gets access toyour account and personal information:
 
- Log in regularly to your online accounts and notice the last log in date.
- Check your bank and credit card statements to make sure that you recognize all the transactions. If something looks suspicious, give us acall.
- Make sure you update your browser with the latest version and install any security patches that come with it.
- Make sure you have up-to-date anti-virus software and run a scan of your computer at least once a month.- Be careful when you download free software off the Internet. A lot of that free software can have viruses or other malicious software that  could steal your information
.- Pay attention to any e-mails from us? or other online companies? that tell you about e-mail and address changes, or any other activity on your accounts.
 
Again, thanks for bringing this to our attention.
 
Regards,
Capital One Services, LLC
 
Original Message Follows: