Computer CrimeWorksheet 1

Worksheet 1: Phishing
Read the emails and decide which, if any, are genuine and which are phishing or scam
emails. They are all accurate copies of emails received received or responded to by one
person in the past month. (All links have been removed from these emails, and names have
been changed).

List the clues in each email that lead you to believe they are either genuine or fraudulent.

EMAIL 1 (Paul Hawthorne is on Harry Morris’s list of hotmail contacts)

Date: Tue, 4 Mar 2014 12:33:39 +0000
From: [email protected]
Subject: Sad News...Help (Paul Hawthorn)
To: H Morris

Hello,

I Hope you get this on time, I made a trip to Ukraine and had my bag stolen from me
with my passport, mobile phone and personal effects  therein. The embassy has just
issued me a temporary passport but I  have to pay for a ticket and settle my hotel bills
with the Manager.

I have made contact with my bank but it would take me 3-5 working  days to access
funds in my account, the bad news is my flight will be  leaving very soon but i am having
problems settling the hotel bills  and the hotel manager won't let me leave until i settle
the bills, I  need your help/LOAN financially and I promise to make the refund once  i get
back home, you are my last resort and hope, Please let me know if i can count on you
and i need you to keep checking your email because it's the only way i can reach you.

Regards

Paul

(Response from H Morris)

From: [email protected]
To: [email protected]
Subject: RE: Sad News...Help (Paul Cawthorn)
Date: Tue, 4 Mar 2014 14:44:33 +0000

Oh dear, what bad luck. Just let me know what you'd like me to do.

Harry
Computer CrimeWorksheet 1

EMAIL 2
From: [email protected]
To: [email protected]
Subject: RE: Sad News...Help (Paul Cawthorn)
Date: Tue, 4 Mar 2014 22:49:27 -0800

 Am so glad you replied back, All I need now is just £1,850 GBP, You can have it wired
to my name via any Western Union Outlet around you..... I'll have to show my passport
as ID to pick it up here and i promise to pay you back as soon as I get back home
hopefully today.Here is my info where you will wire the money to:

Name: Paul Hawthorn

Location: 74 Kundiman Street, 33000, Kiev, Ukraine
COUNTRY = Ukraine
Amount: £1,850 GBP

As soon as it has been done, kindly get back to me with the MTCN confirmation
number.Let me know if you are heading to a western union outlet now..

I owe you a Lot..

Regards,

Paul
Computer CrimeWorksheet 1

EMAIL 3
From: PayPal ([email protected])
Sent: 03 March 2014 23:12:29

Account status update Response required upon receipt

Click here to confirm information you provided when you created your account

Log in to PayPal to resolve a limitation on your account

Recently, there's been activity in your PayPal account that seems unusual compared to your normal
account activities. Please log in to PayPal to confirm your identity and update security questions.

To help protect your account, no one can send money or withdraw money. In addition, no one can close
your account, send refunds, remove any bank accounts, or remove credit cards.

What's going on?

We're concerned that someone is using your PayPal account without your knowledge. Recent activity on
your account seems to have occurred from a suspicious location or under circumstances that may be
different than usual.

What to do
Log in to your PayPal account as soon as possible. We may ask you to confirm information you provided
when you created your account to make sure you're the account holder.

You should also do the following for your own protection:

 Check your account details (address, email, phone, etc.) to make sure they're accurate.
 Review your account activity to make sure you recognise the transactions made recently.
 Report any unknown or unauthorised activity. Go to the Resolution Centre and click Dispute a
Transaction.

What's next?
 Once you've completed all the tasks, we'll respond within 72 hours.
 If you need help or have any questions, call us on 0800 123 7890

Yours sincerely,
PayPal

Please do not reply to this email because we are not monitoring this inbox. To get in touch with us, log
in to your account and click "Contact Us" at the bottom of any page.

Copyright © 2013 PayPal. All rights reserved.

PayPal (Europe) S.a r.l. et Cie, S.C.A.

Societe en Commandite par Actions
Registered office: 22-24 Boulevard Royal, L-00rand Luxemburg
RCS Luxemburg B 118 123

PayPal Email ID PP-002-658-325-123

Computer CrimeWorksheet 1

EMAIL 4

TAX REFUND NOTIFICATION

From: HM Revenue & Customs
Sent: 25 March 2014 01:24:52

1 attachment | Download all as zip (21.2 KB) Tax – REFUND FORM.html (21.2KB)

Dear Sir/Madame,

After the last annual calculations of your fiscal activity we have determined that you are
eligible to receive a tax refund of 304.73 GBP
Please submit the tax refund request and allow us 6-9 days in order to process it.

To access your tax refund, please follow the steps bellow:

- download the Tax Refund Form attached to this email

- download the attachment
- follow the instructions.

TAX - REFUND FORM.html (21.2 KB)

A refund can be delayed for a variety of reasons. For example submitting invalid records
or applying after the deadline.
Revenue and Tax Administrator

HM Revenue & Customs

Tax Credit Office
PO Box 1970
Liverpool
L75 1WX

TAX REFUND ID: UK3239489-HMRC

© Crown Copyright, HM Revenue & Customs

Computer CrimeWorksheet 1

EMAIL 5
From: FENG WEI [email protected]
Subject line: RE:CONFIDENTIAL PROJECT

I WISH TO DISCUSS A VERY CONFIDENTIAL/PROFITABLE BUSINESS DEAL WORTH OVER

US$8.3M WITH YOU.KINDLY REPLY FOR DETAILS IF INTERESTED AT {[email protected]

EMAIL 6
Subject line: MY DEAR,

MY DEAR,
I AM MRS ROSE CISSE, FROM  KUWAIT, A WIDOW TO LATE  MR MARTIN CISSE, I AM
55 YEARS OLD, I AM A NEW CHRISTAIN CONVERT, SUFFERING FROM LONG TIME CANCER
OF THE BREAST,FROM  ALL INDICATIONS  MY CONDITION IS REALLY DETERIORATING
AND IT IS QUITE OBVIOUS THAT I WOULD NOT LIVE MORE THAN THREE MONTHS,
ACCORDING TO MY DOCTORS, AND IN ALL INDICATION REGARDS TO MEDICAL ANALYSIS,
THIS IS BECAUSE THE CANCER STAGE HAS GOTTEN TO A VERY BAD STAGE THAT NO
HOPE FOR ME TO BE A LIVING PERSON AGAIN,

MY LATE HUSBAND  WAS KILLED DURING THE FRANCE RAID AGAINST TERRORISM IN
TOGO, AND DURING THE PERIOD OF OUR MARRIAGE WE COULD NOT PRODUCE ANY
CHILD,
MY LATE HUSBAND WAS VERY WEALTHY AND AFTER HIS DEATH, I INHERITED ALL HIS
BUSINESS AND WEALTH. THE DOCTORS HAS ADVISED ME THAT I MAY NOT LIVE FOR
MORE THAN THREE  MONTHS, SO I NOW DECIDED TO DIVIDE THE PART OF THIS
WEALTH, TO CONTRIBUTE TO THE DEVELOPMENT OF THE CHURCH IN AMERICA, AFRICA,
ASIA AND EUROPE ESPECAILLY CREATE SOLUTION TO PROBLEM OF LESS PREVILEGED
ONES AND ORPHANAGE HOMES.

I SELECTED YOU AFTER VISITING THE WEBSITE I PRAYED AND FASTED  FOR THREE
WEEKS OVER IT, I AM WILLING TO DONATE THE SUM OF $10 MILLION DOLLARS, TO
THE LESS PRIVILEGED. PLEASE I WANT YOU TO NOTE THAT  THIS FUND IS LYING IN
A BANK IN TOGO AND UPON MY INSTRUCTION,WILL FILE IN AN APPLICATION FOR THE
TRANSFER OF THE MONEY IN YOUR NAME.

LASTLY,I HONESTLY PRAY THAT THIS MONEY WHEN TRANSFERED WILL BE USED FOR THE
SAID PURPOSE EVEN THOUHG I AM LATE THEN, BECAUSE I HAVE COME TO FIND OUT
THAT WEALTH ACQUISITION WITHOUT CHRIST IS VANITY AND I MADE THE PROMISE TO
GOD THAT THE FUND WILL BE USE TO BUILD HIS TEMPLE. MAY THE GRACE OF OUR
LORD JESUS THE LOVE OF GOD AND THE FELLOWSHIP OF GOD BE WITH YOU AND YOUR
FAMILY.
I AWAIT URGENT REPLY FROM YOU.
Computer CrimeWorksheet 1

GOD BLESSES YOU.

MRS ROSE CISSE.

EMAIL 7
From: Student Loans
Company <[email protected]>
Subject: Grant Payment (ID:17270872997)

Dear customer,

This is a message for all students receiving grants and loans from the Students Loan
Company. Please click the link below to proceed with your grant eligibility check:

http://logon.slc.co.uk.bankaccountconfirm9233951235.com?
m=ZmxvcmEuaGVhdGhjb3RlQGdtYWlsLmNvbQ==

Yours sincerely,
Student Finance England

Extension task

List three ways you can prevent yourself from being a victim of phishing.

Tip: Look at the webpage http://www.banksafeonline.org.uk/node/9