PHISHING - AOL Mail 'Exceeded Storage Limit' Email
OutlineMessage purporting to be from large US webmail provider AOL Mail claims that your email storage limit has been exceeded and you must therefore click a link to re-validate your mailbox.
© Depositphotos.com/ weerapat
Brief AnalysisThe message is not from AOL Mail. It is a phishing scam designed to steal your AOL account login details. If you receive this message, do not follow any links or open any attachments that it contains.
Your mailbox has exceeded the storage limit is 1 GB, which is defined by the administrator, are running at 99.8 gigabytes, you can not send or receive new messages until you re-validate your mailbox.
To renew the mailbox click link below:
Web mail system administrator!
WARNING! Protect your privacy. Logout when you are done and completely exit your browser.
'AOL Mail' Message Claims Your Mailbox Has Exceeded Storage Limit
The message is signed by the 'Web mail system administrator' and even includes a security alert advising you to logout and close your browser when you have completed the re-validation.
Email is Not From AOL Mail - Phishing
The link opens a bogus website designed to mirror a genuine AOL login page. Once you have 'logged in' on the fake page, you may receive a message claiming that you have successfully re-validated your mailbox and restored email service.
Thus, you may think you have dealt with the issue and forget about it.
Meanwhile, however, the criminals responsible for this phishing expedition can collect your AOL Mail login credentials and use them to hijack your account. Once they have gained access to your account, they can use it to launch further spam and scam campaigns, all in your name.
Beware Emails Claiming You Must Update or Validate Account
Some versions take a more generic approach and simply claim to be from 'IT Support' or the 'Web Mail Administrator' and do not specify a particular provider at all. These generic versions are designed to harvest details from users of many different email services.
While many, including the version discussed here, ask you to click a link to 'login', others may ask you to reply to the email with your username and password. Still others may ask you to fill in an 'update' form contained in an attached file.
Some email providers may send out automatic email notifications advising that you have exceeded a storage limit. However, these emails will not ask you to provide your login details or other personal information by clicking a link, replying to the message, or opening an attached file.
It is always safest to access your account - or deal with any supposed account problems - by entering the account address into your browser's address bar or via an officially endorsed software application.
Last updated: September 29, 2014
First published: September 29, 2014
By Brett M. Christensen