Skip to main content

Email Attacks — 70 posts

Fraudulent and malicious emails including phishing, scam, and spam attempts.

View All Tags

Scam: Document | A Quotation Request With No Attachment, Sent From Gmail to Itself

· 15 min read
Jagdish Kumawat
Founder @ Dewiride

Please find the attached document for your attention and consideration. Kindly provide the requested quotation at your earliest convenience. Five polite sentences, a one-word subject and no attachment: a quotation request that names no product, no company and no person, sent from a Gmail account to itself with the recipient blind-copied.

Phishing: कर अनुपालन की कमी और दंड सूचना / Tax Compliance Deficiency and Penalty Notice | Fake CPC Bengaluru 143(1) Intimation With a ZIP

· 22 min read
Jagdish Kumawat
Founder @ Dewiride

Intimation under Section 143(1) of the Income Tax Act, 1961, cross-verified with AIS, TIS, and SFT, with a total corporate demand of ₹ 2,73,250 payable in fifteen days. The penalty-notice template's third draft — sharing its reply-to with the 7 September version — now dressed as a CPC Bengaluru intimation, with a fabricated DIN, a demand table that cites a Section 234F fee at a ceiling that was cut in half four years ago, and a ZIP to download.

Phishing: कर वसूली एवं दंड सूचना | Fake Income Tax Department Tax Recovery and Penalty Notice With a ZIP Attachment

· 22 min read
Jagdish Kumawat
Founder @ Dewiride

Review of your return found under-reported income and undisclosed foreign assets. Refer to the attachment for full details. A bilingual Income Tax Department notice that says nothing about the tax, the amount, or the taxpayer, and defers to a ZIP file in every other sentence — sent from a domain registered seventeen days earlier, through a real-looking government address pasted into the wrong half of the sender.

Phishing: Notice from Tax Departmen | Fake Court Notice, a Disk Image, and a Side-Loaded WeChat Binary

· 27 min read
Jagdish Kumawat
Founder @ Dewiride

COURT NOTICE. Case Number: [ITD/2026/ND/458721]. Investigating Authority: Income Tax Department, Government of India. Hearing Date: 30 September 2026. The court-notice template's fourth draft, back in English and back on a free Outlook mailbox. This time we followed the link to the end: a disk image carrying a signed Tencent WeChat executable and the malicious DLL it loads.

Fraud: 慷慨嘅捐款 | Fake Schaeffler FAG Foundation Donation of €4,500,000

· 26 min read
Jagdish Kumawat
Founder @ Dewiride

You have been randomly selected to receive a €4,500,000 donation. A Cantonese-language donation fraud signed in the name of a real German research foundation, sent from a Rio de Janeiro fire brigade's government mailbox, and routing replies to a misspelled Gmail address.

Phishing: कॉर्पोरेट टैक्स नियमों का पालन न करने के संबंध में 2026 का नोटिस | Fake Income Tax Department Court Notice

· 30 min read
Jagdish Kumawat
Founder @ Dewiride

Court Notice. Case Number: 54973713. Investigating Authority: Income Tax Department, Government of India. Monday, 7 September 2026, 10:30 AM. The Brazilian judicial-notice template we took apart in August, now translated into Hindi with its Portuguese removed and sent from a randomly generated domain instead of a free Outlook mailbox.

Scam: dewiride | Chinese Domain Name Registration Conflict from Kevin Liu

· 22 min read
Jagdish Kumawat
Founder @ Dewiride

This is a official email. We are the Domain Registration Service company in Shanghai, China. The Chinese domain name registration scam, back for the third time in our archive, sent from a nine-month-old domain with the same phone numbers and the same Shanghai address as the version we dissected in June 2024.

Phishing: कर अनुपालन की कमी और दंड सूचना / Tax Compliance Deficiency and | Fake Income Tax Department Penalty Notice

· 29 min read
Jagdish Kumawat
Founder @ Dewiride

The tax inspection of your company has revealed irregularities under Section 271(1)(c) of the Income Tax Act, 1961. The same forged Income Tax Department notice we dissected a month ago, rewritten to remove its worst mistakes and pointed at a convincing lookalike domain registered in Indonesia.

Fraud: Re: | Fake MacKenzie Scott Foundation Donation of USD 100,800,000

· 29 min read
Jagdish Kumawat
Founder @ Dewiride

I am MacKenzie Scott, ex-wife of Amazon CEO and founder Jeff Bezos. A Chinese-language donation fraud promising USD 100,800,000 through a foundation that does not exist, sent from a German online shop's info mailbox under a subject line that is only Re:.

Phishing: Final Warning — Immediate Domain Renewal Needed | Fake WordPress.com Renewal Notice

· 21 min read
Jagdish Kumawat
Founder @ Dewiride

We are contacting you regarding your expired domain registration. A WordPress.com-branded final warning sent from a German mail server subdomain, whose only button points at a throwaway subdomain of an Italian sports academy.