Phish Bowl

A collection of scam emails and other suspicious communications.
rss feed

From: Brown University. <jamie_rosen @brown.edu>
Date: Mon, Apr 4, 2016 at 2:39 PM
Subject: Account Activity Report .
To: 

[Brown University Mail by Google]

Posted: 4/4 2:48pm

From: "Brown University Registr" <khorbach @rc.edu>
Date: Apr 4, 2016 1:38 PM
Subject: Check your account recovery options .
To:
Cc:

Posted: 4/4 1:55pm
Resolved

From: nathan_malimban @brown.edu OR min_jae_kim @brown.edu
Date: Wed, Mar 30, 2016 at 3:46 PM
Subject: Important Document (Top Urgent)
To: 

Dear Friend,

Posted: 3/30 9:46pm
Legitimate Email

One of the features of Brown's new phone system is notification of voicemail messages by sending you a .wav file of the message.

Posted: 3/29 4:01pm

From: OIP Progams <ayenna_cagaanan @brown.edu> OR Amalean, Nitya <nitya_amalean @brown.edu>
Date: Wed, Mar 23, 2016 at 1:02 AM
Subject: Urgent Documents..
To: 

Posted: 3/23 7:55am

From: pamela_norberg OR jaskiranjeet_sodhi OR edith_mathiowitz OR lauren_bruguera OR susan_gerbi @brown.edu

Posted: 3/16 12:53pm
Updated: 3/23 7:54am

From: Andre, Khalif <khalif_andre @brown.edu>
Date: Tue, Mar 15, 2016 at 12:13 PM
Subject: Thank You
To:

Hello,
Kindly find attached for your perusal.

Best,
Khalif

Posted: 3/15 12:24pm

From: Brown University <isabel_balazs @brown.edu>
Date: Mon, Mar 14, 2016 at 2:12 PM
Subject: Account Activity Report .
To:

[Image result for brown university]

Posted: 3/14 2:27pm

​From: Daniela Morschbacher <dxmgsl @rit.edu>
Date: Fri, Mar 11, 2016 at 3:59 PM
Subject: ITS Help Desk Team​
To:

Posted: 3/11 4:04pm

From: Galindo, Abraham <abraham_galindo @brown.edu>
Date: Thu, Mar 10, 2016 at 8:57 AM
Subject: Note
To: 

Posted: 3/10 6:26pm

Though loaded with tell-tale signs and unlikely to fool, this email was added because of a new tactic: that due to a phishing scam, you'll need to "re-validate your mailbox into full operational system."

Posted: 3/9 11:02am

Two personalized emails from myawesomeresources.com with too-good-to-be true offerings.

Posted: 3/8 9:57am
Updated: 3/10 11:05am

From: Estelle Rollins <RollinsEstelle604 @public-gprs377640.centertel.pl>
Date: Tue, Mar 8, 2016 at 5:52 AM
Subject: Compensation - Reference Number #355850

Posted: 3/8 9:31am

From: Admin Server <ahusband @communityprep.org>
Date: Tue, Mar 8, 2016 at 6:47 AM
Subject: Email Validation
To:

Posted: 3/8 8:29am

Stay alert for phony wire transfer requests which surface at Brown periodically.  Known as a "Business Email Compromise", the "scammers impersonate a supplier, a high-level executive with the firm, or a firm’s employe

Posted: 3/7 3:23pm

From: Cox, Victor <victor_cox @brown.edu>
Date: Mon, Mar 7, 2016 at 10:53 AM
Subject: Reminder
To:

Hi,

Posted: 3/7 11:13am

From: Pliakas, John < john_pliakas @brown.edu>
Date: Mon, Mar 7, 2016 at 10:35 AM
Subject: Review Attached
To:

Review the sent document via GoogleDrive . Size of (248 KB Total)

Posted: 3/7 11:06am

An example of a classic "Nigerian Scam" was recently reported. Aside from its entertainment value, this message contains several tell-tale signs of a phishing email. How many can you spot?

Posted: 3/3 9:56am

From: FedEx Express <jiani_liu @brown.edu>
Date: March 2, 2016 at 10:57:07 AM EST
To: undisclosed-recipients:;
Subject: WAYBILL

Posted: 3/2 11:04am

From: Morrow, Rhonda <Rhonda.Morrow @dhr.alabama.gov>
Date: Wed, Mar 2, 2016 at 8:06 AM
Subject: Re: ***IT- HELPDESK { SUSPICIOUS SIGN-IN TO YOUR ACCOUNT}.‏***‏‏‏‏

Posted: 3/2 9:45am
Legitimate Email

The following email may appear phishy but is an actual notification from Benefit Strategies, Brown's benefits administrator for flexible spending accounts (see HR's 

Posted: 3/1 8:15am

From: Brown University Registrar <valentina_cano @brown.edu > OR < daniel_nurieli @brown.edu >
Date: Fri, Feb 26, 2016 at 11:07 AM
Subject: Account Activity Report .
To:

Posted: 2/26 11:22am

From: Carlisle Arias <carias @elon.edu> OR Jenna Bayer <jbayer5 @elon.edu>
Date: Wed, Feb 24, 2016 at 7:35 AM
Subject: Document from Carlisle Arias [ or Jenna Bayer ]
To:

Posted: 2/24 8:29am

Watch out for this very realistic phishing email, almost identical to the real alerts sent from AT&T, which has been noted on

Posted: 2/23 5:57pm

From: 2016 ADMIN <irs.online.services03@verizon.net>
Date: Tue, Feb 23, 2016 at 1:34 PM
Subject: TREAT URGENTLY!
To:

Posted: 2/23 3:27pm

From: Chase <no-reply @thechase.com>
Date: Fri, Feb 19, 2016 at 11:49 AM
Subject: We've sent an important communication
To:

Posted: 2/19 1:02pm

From: Christina Paxson <messsanges @gmail.com>
Date: Fri, Feb 19, 2016 at 11:50 AM
Subject: Payment
To: < actual Brown address >

Hi Christine,

Posted: 2/19 12:19pm

From: Google <Noreturn @Gmail.com> Google<Noreturn <leah_zavalick @brown.edu>
Date: Wed, Feb 17, 2016 at 7:32 PM

Posted: 2/17 10:40pm

From: no-reply <no-reply @cfargo.com>
Date: Wed, Feb 17, 2016 at 10:45 AM
Subject: Wells Fargo Online Access Temporarily Suspended
To:

[Wells Fargo Logo ]
wellsfargo.com

Posted: 2/17 10:50am

From: Liebowitz, Katherine < katherine_liebowitz @brown.edu >
Date: Tue, Feb 16, 2016 at 1:32 PM
Subject: paper
To:

Posted: 2/16 5:12pm

Pages