Possible 123-reg hoax email? Copy of your 123-reg invoice ( 123-015309323 )

[UKSBD]

I don't normally bother with these types of things, but this one looks so convincing I decided to post about it.

I've just received an email, apparently from [email protected] titled;
Copy of your 123-reg invoice ( 123-015309323 )

Headers and message source look OK, but as I received it to 4 separate email addresses it set bells ringing.

Logged in to my 123-reg account and no such invoice number.

It has an attachment, no idea what, as not opened.

Be careful if you get it.

 

[Faevilangel]

I never look at email invoices, I always login to the site and check there, most of my invoices are on auto renewal (domains, hosting etc) so doesn't affect me

 

[Ian J]

I've had that several times today too. As I have an account with 123-Reg I logged into my account to see if any of my domain names had been renewed which of course they hadn't.

My suspicions were aroused as the email didn't contain my name was just addressed to "hi"

 

[NuBlue]

Had quite a few in the last 24 hours, none sent to an email address that I've knowingly used and I can't remember 123-reg emailing an attachment for any reason so an instant junk.

 

[Mike W]

Coming to a 'remove@' address I have, I didn't even to take a second glance. Must be doing the rounds.

 

[MyAccountantOnline]

I don't normally bother with these types of things, but this one looks so convincing I decided to post about it.

I've just received an email, apparently from [email protected] titled;
Copy of your 123-reg invoice ( 123-015309323 )

Headers and message source look OK, but as I received it to 4 separate email addresses it set bells ringing.

Logged in to my 123-reg account and no such invoice number.

It has an attachment, no idea what, as not opened.

Be careful if you get it.

I've just had exactly the same and yes it did look VERY convincing.

The only thing that rang alarm bells for me was sending the invoice as a Word document.

 

[DavidWH]

Yes I had one too, however I haven't used reg123 for a number of years so deleted it.

It was one of the more convincing looking e-mails though, despite the attachment being a word document.

 

[Bob]

AVAST blocked mine before I even looked at it