ebill@bell.ca phishing emails that appear to be sent from Bell stating "I don’t have a method of payment". Scam?

[taylors1]

I received an email purportedly from Bell telling me that I don’t have a method of payment 

I have been paying by credit card for some time

is this a valid Bell email?

[BB]

Response required. MyAccount Hello xxxxx@sympatico.ca, We couldn't process your last Bell payment for security reasons. Please use alternate bill payment method. Your Bell Billing account always needs at least one valid payment method on file. Sign up for pre-authorized payments through "MyAccount" using your card. To start, please use button below: Sign in to MyAccount  This way, you do not need to worry about the due date or setting any reminders. It should never take more than two minutes to be completed. The amount due will be processed on the due date shown on your bill only. Thanks for choosing Bell.

[BellDRock · Accepted solution]

Hey there, thanks for reaching out to us!

Most definitely sounds like a spam/phishing attempt.

You can click "Mark as spam" from webmail (when you log in from www.bell.net) - this will ensure the team managing the Bell email service will be aware of this specific spam campaign, can investigate and block it.

You can also send a copy of that email to abuse@bell.ca

Delete the email immediately after marking as spam or reporting abuse.

If you think you’ve been a target of fraud, contact the Canadian Anti-Fraud Centre. For more way to protect yourself against fraudulent emails, please click on the following How to Protect Yourself from Telecom Fraud

[FSzeto]

Received email from Bell-Customers (XXXXBill.ResponseRequiredXXXX@online-bell.net ) requiring a response and link in the email "Sign in to MyAccount" , stating the following:

We couldn't process your last Bell payment for security reasons. Please use alternate bill payment method. Your Bell Billing account always needs at least one valid payment method on file. Sign up for pre-authorized payments through "MyAccount" using your card. To start, please use button below:

I did not click on link, please confirm this is a phishing email and not sent from Bell.

[Leon]

Clever Bell spam online.I recieved a very authentic email, supposedly from Bell that was Spam.

[BellPatricia · Accepted solution]

Hi @Leon. Thanks for reaching out to the Bell Community, and for bringing this to our attention. 

What was the exact nature of the Email that you received?

Please remember to click "Mark as spam" from webmail when you log in via https://webmail.bell.net/- this will ensure the team managing the Bell email service will be aware of this specific spam campaign, can investigate and block it.

We also recommend that you send a copy of that email to phish@bell.ca. Simply start a new email message and attach the suspicious email, as this will include additional header information to help us investigate.

@BellPatricia 

[Rusty_Alexander]

My wife's account runs on Outlook, and my 2 run on Thunderbird - all 3 are Sympatico, and appear in my bell account profile together.  She just got a very realistic e-mail purporting to be from Bell, asking her to log on to My-Bell and update her account details.  I could not forward the e-mail to my Thunderbird client, so I deduced it was a phishing scam (contact box opened, but would not react to input).  Does anyone else have this experience or am I alerting forum users to a new threat?

[BellPatricia · Accepted solution]

Hi there @Rusty_Alexander. Welcome to the Community, and thank you very much for letting us know about this!

We will never ask for any personal information via email such as passwords, PIN numbers, banking or credit card information.

Can you share a screenshot of the email so the Community can take a closer look (be sure to hide any personal information)?

We also recommend that you click "Mark as spam" from webmail (when you log in from http://www.bell.net)- this will ensure the team managing Bell email service will be aware of this specific spam campaign, can investigate and block it.

You can also send a copy of that email to phish@bell.ca

The most important part of fraud prevention is education and awareness. Knowing about the different types of fraud, how to identify fraud attempts and what they look like, along with what to do next if you suspect fraud are key to increasing your protection.

We encourage you to check out the following articles we’ve put together to help you prepare and combat fraud:

• How to identify fraud
• What does fraud look like?
• Do you suspect fraud? What to do next?

Found those articles helpful? For further reading, check out:

• How to identify phishing or smishing
• Cell phone service provider scam

@BellPatricia 

[Rusty_Alexander]

I forwarded the original message to the abuse addy you sent me - not good with screen shots I'm afraid -  it is pasted below.  Note that "possible" is miss-spelled.

Your Bell account information needs to be updated as part of our continuing commitment to protect your account.
In order to avoid the interruption of your services, update your account information as soon as posible.
To update your account information, please click on the following link:

Visit our Privacy Policy and Terms of Service if you have any questions.

Thank you!

[Scam1]

billing-support@bellmobility.ca

Saying payment declined

Attackers on alawaelsmart.com may trick you into doing something dangerous like installing software or revealing your personal information (for example, passwords, phone numbers, or credit card details).

[Biff]

How do I send what I suspect is a scam email purportedly from Bell to Bell? I thought It was legit so I responded but now I think I have been had. Why?  Because I trust Bell to hunt down people who abuse their good name and reputation and not let these emails get through. Surely they have heard about it before. I don’t know how to post the email content here as it has many pages with surveys and prizes. 

[Northerngirl]

Users who have not updated their XXXXXXXXXXXX account will no longer be able to log in,  If you do not want the new Terms of Service and Privacy Policy to apply to you, you will no longer be able to access your account from Apr 15th-2023 . You may obtain a copy of your data by clicking here.

I keep getting these emails supposedly from Bell.  

Is this a scam?

[Concerned]

Email to change my information or I will lose service and not be able to access my account .

[Coffeeguy]

I received an email and I’m not sure if it’s legitimate.  Says my profile is suspended.   

Your payments profile is currently suspended, verify your account information. To avoid disconnection and a possible reconnection fee of $50, please renew your information before May 11, 2023 For more details please visit support here

when I go onto MyBell I don’t see any notices there

[Rusty_Alexander]

The singular benefit of using a third party e-mail "client" like Thunderbird, is that I can aggregate several e-mail accounts into a single app instead of having to open several individual sources (ie. Bell, Hotmail, G-Mail etc.) Another is the ability to view "Message Source" (in T'Bird at least) and see from which initial server the message was sent and/or how many different servers it passed through before it got to me.

Most scam and phishing mail has bad grammar and spelling errors, doctored logos, or other giveaways, but I always find it helpful to confirm my suspicions by looking at the source as well.