"EarthLink Account Cancellation Confirmation" Phishing Scam

EarthLink Account Cancellation Confirmation Phishing Scam

EarthLink customers, be aware of "EarthLink Account Cancellation Confirmation" emails like the one below. The fake email which claims a request to cancel, close or lock the recipients' Earthlink's accounts has been processed and completed is a phishing scam being sent by cyber-criminals. The phishing email tricks EarthLink customers into clicking on the link in it, which goes to a phishing website that steals Earthlink account credentials (usernames and passwords).

Advertisements - Continue reading below

The "EarthLink Account Cancellation Confirmation" Phishing Scam

Subject:EarthLink Account Cancellation Confirmation, Account Closed

Date:Thu, 11 Jan 2018 02:25:11 -0700

From:Earthlink Notice <Support@earthlink.net>

EarthLink ® Account Cancellation Confirmation

Your confirmation number is: 170859748

Dear Client,

We're writing to confirm that on 01/11/18, you requested to cancel Your Earthlink Account

Your Request To Close And Lock Your Earthlink Account Has Been Processed And Completed .

You Will Be Disconnected Permanently Within 48hrs Of Receiving This Message

Your Billing Information's Has Been Deleted From Our System And Your Email Address Will Be Locked In 48hrs

FOLLOW THE STEPS BELOW IF YOU DO NOT WISH TO CLOSE YOUR ACCOUNT.

IF YOU HAVE MISTAKENLY PERFORM THIS ACTION PLS CLICK HERE TO RESTORE

Pls Delete And Disregard This Message If You Wish To Close And Lock Your Account Permanently

Sincerely,

EarthLink Support

The link in the fake email message goes to a fake EarthLink website, which was created by cyber-criminals to trick their potential victims into entering their EarthLink usernames, passwords and credit card information on it. If the requested information is submitted by the potential victims, it will be sent to the cyber-criminals, who will use it to steal their money and use their accounts fraudulently. The cyber-criminals/scammers behind the phishing email message will change the website's name, so look out for similar phishing email messages with links that go to different phishing websites.

If you are tricked into submitting your EarthLink credentials and credit card information on the fake web page, please change your EarthLink password immediately and contact your bank and let them know that you have submitted your credit card information on a phishing website.

Remember, never click on a link to sign into your EarthLink account, always go directly to www.earthlink.net and log in from there instead.

Check the comment section below for additional information, share what you know, or ask a question about this article by leaving a comment below. And, to quickly find answers to your questions, use our search engine.Search
Write commentWrite your comment or view the ones below.    +
Was this article helpful?
Advertisements - Continue reading below
Comments, Answers, Reviews or Questions
To protect your privacy, please remove sensitive or identifiable information from your comments, questions, or reviews. Please keep conversations courteous and on-topic.

Comments(3)

Jan 28, 2020 at 10:41 AM by
"EarthLink Account Cancellation Confirmation" Phishing Scam
an anonymous user from: Melbourne, Florida, United States

I noticed a charge on my bank acct. haven't had this account in 20 years. Don't know password, this needs to be canceled. Patricia F.

Delete

Oct 25, 2019 at 6:04 PM by
"EarthLink Account Cancellation Confirmation" Phishing Scam
info

Here is another scam:

-Forwarded Message-

From: service earthlink <service-earthlink@rindigen.com

Subject: EarthLink Service Cancellation Confirmation

๐‘ซ๐’†๐’‚๐’“,

๐–๐ž'๐ซ๐ž ๐ฐ๐ซ๐ข๐ญ๐ข๐ง๐  ๐ญ๐จ ๐œ๐จ๐ง๐Ÿ๐ข๐ซ๐ฆ ๐ญ๐ก๐š๐ญ ๐จ๐ง ๐Ÿ๐ŸŽ/๐ŸŽ๐Ÿ“/๐Ÿ๐Ÿ—, ๐ฒ๐จ๐ฎ ๐ซ๐ž๐ช๐ฎ๐ž๐ฌ๐ญ๐ž๐ ๐ญ๐จ ๐œ๐š๐ง๐œ๐ž๐ฅ ๐ญ๐ก๐ž ๐Ÿ๐จ๐ฅ๐ฅ๐จ๐ฐ๐ข๐ง๐  ๐ฌ๐ž๐ซ๐ฏ๐ข๐œ๐ž(๐ฌ) ๐Ÿ๐จ๐ซ ๐š๐œ๐œ๐จ๐ฎ๐ง๐ญ ๐ง๐ฎ๐ฆ๐›๐ž๐ซ 1564878:

๐’๐„๐‘๐•๐ˆ๐‚๐„ ๐’๐„๐‘๐•๐ˆ๐‚๐„ ๐„๐๐ƒ ๐ƒ๐€๐“๐„

๐จ๐ง๐ฅ๐ง๐›๐œ๐ค๐ฉ:๐›๐š๐œ๐ค๐ฎ๐ฉ๐Ÿ“๐ŸŽ๐ŸŽ ๐Ÿ๐ŸŽ/๐Ÿ6/๐Ÿ๐ŸŽ๐Ÿ๐Ÿ—

๐˜๐จ๐ฎ๐ซ ๐œ๐จ๐ง๐Ÿ๐ข๐ซ๐ฆ๐š๐ญ๐ข๐จ๐ง ๐ง๐ฎ๐ฆ๐›๐ž๐ซ ๐ข๐ฌ: 069343765

๐Ÿ‡ฎโ€‹๐Ÿ‡ซโ€‹ ๐Ÿ‡พโ€‹๐Ÿ‡ดโ€‹๐Ÿ‡บโ€‹ฮ‡๐Ÿ‡ปโ€‹๐Ÿ‡ชโ€‹ ๐Ÿ‡ทโ€‹๐Ÿ‡ชโ€‹๐Ÿ‡จโ€‹๐Ÿ‡ชโ€‹๐Ÿ‡ฎโ€‹๐Ÿ‡ปโ€‹๐Ÿ‡ชโ€‹๐Ÿ‡ฉโ€‹ ๐Ÿ‡นโ€‹๐Ÿ‡ญโ€‹๐Ÿ‡ฎโ€‹๐Ÿ‡ธโ€‹ ๐Ÿ‡ฒโ€‹๐Ÿ‡ชโ€‹๐Ÿ‡ธโ€‹๐Ÿ‡ธโ€‹๐Ÿ‡ฆโ€‹๐Ÿ‡ฌโ€‹๐Ÿ‡ชโ€‹ ๐Ÿ‡ฎโ€‹๐Ÿ‡ณโ€‹ ๐Ÿ‡ชโ€‹๐Ÿ‡ทโ€‹๐Ÿ‡ทโ€‹๐Ÿ‡ดโ€‹๐Ÿ‡ทโ€‹๏น ๐Ÿ‡ตโ€‹๐Ÿ‡ฑโ€‹๐Ÿ‡ชโ€‹๐Ÿ‡ฆโ€‹๐Ÿ‡ธโ€‹๐Ÿ‡ชโ€‹ ๐Ÿ‡จโ€‹๐Ÿ‡ฆโ€‹๐Ÿ‡ฑโ€‹๐Ÿ‡ฑโ€‹ ๐Ÿ‡บโ€‹๐Ÿ‡ธโ€‹ ๐Ÿ‡ฆโ€‹๐Ÿ‡ธโ€‹ ๐Ÿ‡ธโ€‹๐Ÿ‡ดโ€‹๐Ÿ‡ดโ€‹๐Ÿ‡ณโ€‹

๐Ÿ‡ฆโ€‹๐Ÿ‡ธโ€‹ ๐Ÿ‡ตโ€‹๐Ÿ‡ดโ€‹๐Ÿ‡ธโ€‹๐Ÿ‡ธโ€‹๐Ÿ‡ฎโ€‹๐Ÿ‡งโ€‹๐Ÿ‡ฑโ€‹๐Ÿ‡ชโ€‹ ๐Ÿ‡ฆโ€‹๐Ÿ‡นโ€‹ โ‚๏นฃโ‚ˆโ‚ˆโ‚ˆ๏นฃ๐Ÿ‡ชโ€‹๐Ÿ‡ฆโ€‹๐Ÿ‡ทโ€‹๐Ÿ‡นโ€‹๐Ÿ‡ญโ€‹๐Ÿ‡ฑโ€‹๐Ÿ‡ฎโ€‹๐Ÿ‡ณโ€‹๐Ÿ‡ฐโ€‹ ๐Ÿ‡ดโ€‹๐Ÿ‡ทโ€‹ ๐Ÿ‡ทโ€‹๐Ÿ‡ชโ€‹๐Ÿ‡ตโ€‹๐Ÿ‡ฑโ€‹๐Ÿ‡พโ€‹ ๐Ÿ‡บโ€‹๐Ÿ‡ธโ€‹๏น•

๏นฃ ๐Ÿ‡ฌโ€‹๐Ÿ‡ดโ€‹ ๐Ÿ‡นโ€‹๐Ÿ‡ดโ€‹ ๐Ÿ‡ฎโ€‹๐Ÿ‡ณโ€‹๐Ÿ‡งโ€‹๐Ÿ‡ดโ€‹๐Ÿ‡ฝโ€‹ ๐Ÿ‡จโ€‹๐Ÿ‡ฑโ€‹๐Ÿ‡ฎโ€‹๐Ÿ‡จโ€‹๐Ÿ‡ฐโ€‹ ๐Ÿ‡ดโ€‹๐Ÿ‡ณโ€‹ ๐Ÿ‡ฒโ€‹๐Ÿ‡ชโ€‹๐Ÿ‡ธโ€‹๐Ÿ‡ธโ€‹๐Ÿ‡ฆโ€‹๐Ÿ‡ฌโ€‹๐Ÿ‡ชโ€‹

๏นฃ ๐Ÿ‡ทโ€‹๐Ÿ‡ชโ€‹๐Ÿ‡ตโ€‹๐Ÿ‡ฑโ€‹๐Ÿ‡พโ€‹ ๐Ÿ‡ฆโ€‹๐Ÿ‡ณโ€‹๐Ÿ‡ฉโ€‹ ๐Ÿ‡ธโ€‹๐Ÿ‡ชโ€‹๐Ÿ‡ณโ€‹๐Ÿ‡ฉโ€‹ ๐Ÿ‡พโ€‹๐Ÿ‡ดโ€‹๐Ÿ‡บโ€‹๐Ÿ‡ทโ€‹ ๐Ÿ‡ฎโ€‹๐Ÿ‡ณโ€‹๐Ÿ‡ซโ€‹๐Ÿ‡ดโ€‹๐Ÿ‡ทโ€‹๐Ÿ‡ฒโ€‹๐Ÿ‡ฆโ€‹๐Ÿ‡นโ€‹๐Ÿ‡ฎโ€‹๐Ÿ‡ดโ€‹๐Ÿ‡ณโ€‹๏น•

๏นฃ ๐Ÿ‡ชโ€‹๐Ÿ‡ฒโ€‹๐Ÿ‡ฆโ€‹๐Ÿ‡ฎโ€‹๐Ÿ‡ฑโ€‹/๐Ÿ‡ตโ€‹๐Ÿ‡ฆโ€‹๐Ÿ‡ธโ€‹๐Ÿ‡ธโ€‹๐Ÿ‡ผโ€‹๐Ÿ‡ดโ€‹๐Ÿ‡ทโ€‹๐Ÿ‡ฉโ€‹

๏นฃ ๐Ÿ‡ฆโ€‹๐Ÿ‡จโ€‹๐Ÿ‡จโ€‹๐Ÿ‡ดโ€‹๐Ÿ‡บโ€‹๐Ÿ‡ณโ€‹๐Ÿ‡นโ€‹ ๐Ÿ‡ณโ€‹๐Ÿ‡บโ€‹๐Ÿ‡ฒโ€‹๐Ÿ‡งโ€‹๐Ÿ‡ชโ€‹๐Ÿ‡ทโ€‹

๐Ÿ‡ธโ€‹๐Ÿ‡ฎโ€‹๐Ÿ‡ณโ€‹๐Ÿ‡จโ€‹๐Ÿ‡ชโ€‹๐Ÿ‡ทโ€‹๐Ÿ‡ชโ€‹๐Ÿ‡ฑโ€‹๐Ÿ‡พโ€‹๏น

๐Ÿ‡ชโ€‹๐Ÿ‡ฆโ€‹๐Ÿ‡ทโ€‹๐Ÿ‡นโ€‹๐Ÿ‡ญโ€‹๐Ÿ‡ฑโ€‹๐Ÿ‡ฎโ€‹๐Ÿ‡ณโ€‹๐Ÿ‡ฐโ€‹ ๐Ÿ‡ธโ€‹๐Ÿ‡บโ€‹๐Ÿ‡ตโ€‹๐Ÿ‡ตโ€‹๐Ÿ‡ดโ€‹๐Ÿ‡ทโ€‹๐Ÿ‡นโ€‹

๐Ÿ‡นโ€‹๐Ÿ‡ญโ€‹๐Ÿ‡ฎโ€‹๐Ÿ‡ธโ€‹ ๐Ÿ‡ฎโ€‹๐Ÿ‡ธโ€‹ ๐Ÿ‡ฆโ€‹๐Ÿ‡ณโ€‹ ๐Ÿ‡ฆโ€‹๐Ÿ‡ฉโ€‹๐Ÿ‡ฒโ€‹๐Ÿ‡ฎโ€‹๐Ÿ‡ณโ€‹๐Ÿ‡ฎโ€‹๐Ÿ‡ธโ€‹๐Ÿ‡นโ€‹๐Ÿ‡ทโ€‹๐Ÿ‡ฆโ€‹๐Ÿ‡นโ€‹๐Ÿ‡ฎโ€‹๐Ÿ‡ปโ€‹๐Ÿ‡ชโ€‹ ๐Ÿ‡ฒโ€‹๐Ÿ‡ชโ€‹๐Ÿ‡ธโ€‹๐Ÿ‡ธโ€‹๐Ÿ‡ฆโ€‹๐Ÿ‡ฌโ€‹๐Ÿ‡ชโ€‹ ๐Ÿ‡ซโ€‹๐Ÿ‡ทโ€‹๐Ÿ‡ดโ€‹๐Ÿ‡ฒโ€‹ ๐Ÿ‡ชโ€‹๐Ÿ‡ฆโ€‹๐Ÿ‡ทโ€‹๐Ÿ‡นโ€‹๐Ÿ‡ญโ€‹๐Ÿ‡ฑโ€‹๐Ÿ‡ฎโ€‹๐Ÿ‡ณโ€‹๐Ÿ‡ฐโ€‹. ๐Ÿ‡ฎโ€‹๐Ÿ‡นโ€‹ ๐Ÿ‡ฎโ€‹๐Ÿ‡ธโ€‹ ๐Ÿ‡ณโ€‹๐Ÿ‡ดโ€‹๐Ÿ‡นโ€‹ ๐Ÿ‡ธโ€‹๐Ÿ‡ตโ€‹๐Ÿ‡ฆโ€‹๐Ÿ‡ฒโ€‹. ๐Ÿ‡ซโ€‹๐Ÿ‡ทโ€‹๐Ÿ‡ดโ€‹๐Ÿ‡ฒโ€‹ ๐Ÿ‡นโ€‹๐Ÿ‡ฎโ€‹๐Ÿ‡ฒโ€‹๐Ÿ‡ชโ€‹ ๐Ÿ‡นโ€‹๐Ÿ‡ดโ€‹ ๐Ÿ‡นโ€‹๐Ÿ‡ฎโ€‹๐Ÿ‡ฒโ€‹๐Ÿ‡ชโ€‹๏น ๐Ÿ‡ชโ€‹๐Ÿ‡ฆโ€‹๐Ÿ‡ทโ€‹๐Ÿ‡นโ€‹๐Ÿ‡ญโ€‹๐Ÿ‡ฑโ€‹๐Ÿ‡ฎโ€‹๐Ÿ‡ณโ€‹๐Ÿ‡ฐโ€‹ ๐Ÿ‡ผโ€‹๐Ÿ‡ฎโ€‹๐Ÿ‡ฑโ€‹๐Ÿ‡ฑโ€‹ ๐Ÿ‡ธโ€‹๐Ÿ‡ชโ€‹๐Ÿ‡ณโ€‹๐Ÿ‡ฉโ€‹ ๐Ÿ‡พโ€‹๐Ÿ‡ดโ€‹๐Ÿ‡บโ€‹ ๐Ÿ‡ธโ€‹๐Ÿ‡บโ€‹๐Ÿ‡จโ€‹๐Ÿ‡ญโ€‹ ๐Ÿ‡ฒโ€‹๐Ÿ‡ชโ€‹๐Ÿ‡ธโ€‹๐Ÿ‡ธโ€‹๐Ÿ‡ฆโ€‹๐Ÿ‡ฌโ€‹๐Ÿ‡ชโ€‹๐Ÿ‡ธโ€‹ ๐Ÿ‡ฎโ€‹๐Ÿ‡ณโ€‹ ๐Ÿ‡ดโ€‹๐Ÿ‡ทโ€‹๐Ÿ‡ฉโ€‹๐Ÿ‡ชโ€‹๐Ÿ‡ทโ€‹ ๐Ÿ‡นโ€‹๐Ÿ‡ดโ€‹ ๐Ÿ‡จโ€‹๐Ÿ‡ดโ€‹๐Ÿ‡ฒโ€‹๐Ÿ‡ฒโ€‹๐Ÿ‡บโ€‹๐Ÿ‡ณโ€‹๐Ÿ‡ฎโ€‹๐Ÿ‡จโ€‹๐Ÿ‡ฆโ€‹๐Ÿ‡นโ€‹๐Ÿ‡ชโ€‹ ๐Ÿ‡ฎโ€‹๐Ÿ‡ฒโ€‹๐Ÿ‡ตโ€‹๐Ÿ‡ดโ€‹๐Ÿ‡ทโ€‹๐Ÿ‡นโ€‹๐Ÿ‡ฆโ€‹๐Ÿ‡ณโ€‹๐Ÿ‡นโ€‹ ๐Ÿ‡ฎโ€‹๐Ÿ‡ณโ€‹๐Ÿ‡ซโ€‹๐Ÿ‡ดโ€‹๐Ÿ‡ทโ€‹๐Ÿ‡ฒโ€‹๐Ÿ‡ฆโ€‹๐Ÿ‡นโ€‹๐Ÿ‡ฎโ€‹๐Ÿ‡ดโ€‹๐Ÿ‡ณโ€‹ ๐Ÿ‡ฆโ€‹๐Ÿ‡งโ€‹๐Ÿ‡ดโ€‹๐Ÿ‡บโ€‹๐Ÿ‡นโ€‹ ๐Ÿ‡พโ€‹๐Ÿ‡ดโ€‹๐Ÿ‡บโ€‹๐Ÿ‡ทโ€‹ ๐Ÿ‡ธโ€‹๐Ÿ‡บโ€‹๐Ÿ‡งโ€‹๐Ÿ‡ธโ€‹๐Ÿ‡จโ€‹๐Ÿ‡ทโ€‹๐Ÿ‡ฎโ€‹๐Ÿ‡ตโ€‹๐Ÿ‡นโ€‹๐Ÿ‡ฎโ€‹๐Ÿ‡ดโ€‹๐Ÿ‡ณโ€‹.

Delete

Aug 26, 2019 at 11:06 AM by
"EarthLink Account Cancellation Confirmation" Phishing Scam
info

"From: EarthLink Support <confirmbillinginformation@earthlink.net>

Sent: Monday, August 26, 2019 5:37 AM

Subject: Thanks For Closing Your Account : EarthLink Service Cancellation Confirmation

Service Cancellation Confirmation

EarthLink

EarthLinkร‚ยฎ Service Cancellation Confirmation

Dear User,

We're writing to confirm that on 08/24/19, you requested to cancel the following service(s) for your account :

Your Webmail, Internet, TV Connection Will be disconnected And Deactivated After 24hrs Of Receiving This Message.

Your confirmation number is: 172, The following service will be disconnected from the EarthLink network within 24hrs of receiving this message.

DELETE AND CANCEL THIS MESSAGE IF YOU HAVE DELIBERATELY PERFORM THIS ACTION OR CLICK HERE TO CANCEL THIS REQUEST.

Click The Link Above To Cancel Your Account Deactivation Before 24hrs Of Receiving This Message"

Here is another scam.

Delete

Advertisements - Continue reading below

waiting
Write Your Comment, Answer, Review or Question

Advertisements - Continue reading below
Advertisements - Continue reading below
Advertisements - Continue reading below
Advertisements - Continue reading below
Advertisements - Continue reading below
Advertisements - Continue reading below
Advertisements - Continue reading below
Advertisements - Continue reading below
"EarthLink Account Cancellation Confirmation" Phishing Scam