Options
Anyone else get a phishing email from US Mint recently?
panexpoguy
Posts: 1,239 ✭✭✭✭✭
Just curious, discusses site upgrade for US Mint but is seems phishy to me.
0
Comments
...it went to my spam folder
...it DOES give a convenient link to access your account (I would never use it and would just go directly to USMint.gov
Now you have me thinking....
JH
Proof Buffalo Registry Set
Capped Bust Quarters Registry Set
Proof Walking Liberty Halves Registry Set
<< <i>Just curious, discusses site upgrade for US Mint but is seems phishy to me. >>
Why?
They're not asking for anything new, just want you to verify your info, and the link does go back to the mint. They're probably looking for abandoned accounts they don't want to bring over to the new system. There are probably a bazillion of these.
I actually did this years ago for an organization I consulted for (before the internet was the Internet), just before we sent out a list of people's names and contact e-mail addresses. (It was all opt-in at the time, but since then it was discontinued (like 10 years ago or more) so spammers couldn't get the list.) Those addresses that bounced got removed from the list. Since I believe you need a valid e-mail address for a mint web account, the mint may be doing the same thing, compiling a list of accounts that could be abandoned.
<< <i>
<< <i>Just curious, discusses site upgrade for US Mint but is seems phishy to me. >>
Why?
They're not asking for anything new, just want you to verify your info, and the link does go back to the mint. They're probably looking for abandoned accounts they don't want to bring over to the new system. There are probably a bazillion of these.
I actually did this years ago for an organization I consulted for (before the internet was the Internet), just before we sent out a list of people's names and contact e-mail addresses. (It was all opt-in at the time, but since then it was discontinued (like 10 years ago or more) so spammers couldn't get the list.) Those addresses that bounced got removed from the list. Since I believe you need a valid e-mail address for a mint web account, the mint may be doing the same thing, compiling a list of accounts that could be abandoned. >>
The answer to why is that no tech savvy organization would include a link to the page when asking for updates, etc. They would simply say 'Go to the site and log in'. Now, it is certainly conceivable that the Mint would not be this savvy. But that is a strong flag for phishing. If they wanted dead emails, they could simply run a report on those that bounced back from all their advertising. Anw while they don't ask for your login an dpw, you have to input it to 'verify' your info. Could be harmless and legit too.
I knew it would happen.
I was glad to read that the "new system" won't be activated until the end of the year. That's good because if they started the same time as they started selling the Kennedy gold coins, chances are the system would be all screwed up in the usual government way, and we would have another mint disaster.
<< <i>The answer to why is that no tech savvy organization would include a link to the page when asking for updates, etc. >>
I would absolutely disagree. User compliance would fall off a cliff if they never bookmarked the site and have to type an address in. From an administrator perspective, most users won't do anything beyond tapping/clicking a link unless forced to...
<< <i>They would simply say 'Go to the site and log in'. Now, it is certainly conceivable that the Mint would not be this savvy. But that is a strong flag for phishing. If they wanted dead emails, they could simply run a report on those that bounced back from all their advertising. >>
You can opt out of all e-mail from the mint. It's in your preferences. (For instance, I don't need product intro info, so I don't get it. Just more e-mail clutter...)
<< <i>Anw while they don't ask for your login an dpw, you have to input it to 'verify' your info. Could be harmless and legit too. >>
In the end, I don't think it will matter if you don't verify your info. Note the new e-mail address of "usmint-support@catalog.usmint.gov" it as sent from. The first instance of it appearing is asking you to verify your info, so I suspect they're collecting bounces.
<< <i>Yea, I just got one plus a "dear john" letter that they won't be sending a HOF gold coin to me.
I was glad to read that the "new system" won't be activated until the end of the year. That's good because if they started the same time as they started selling the Kennedy gold coins, chances are the system would be all screwed up in the usual government way, and we would have another mint disaster. >>
Not to discourage you, but I think the test of the new system will be the silver Kennedy set. If you're interested in the silver, that is...
What would be gained from accessing someone else's account?
You'd get their shipping and billing address but the credit card numbers are masked out.
I suppose you could cancel impending orders and change the shipping address but the shipping addresses are verified at check out time so a user would know that something has been messed with.
I suppose you could update the email address as well but, again, the credit card information is masked out.
It just seems like a lot of work and unnecessary risk with no reward other than being a devil.
On the other hand, it's always best to avoid links in suspicious emails and if needed, just logon to the site using your own links. A call to customer support wouldn't hurt either.
The name is LEE!
<< <i>
<< <i>Yea, I just got one plus a "dear john" letter that they won't be sending a HOF gold coin to me.
I was glad to read that the "new system" won't be activated until the end of the year. That's good because if they started the same time as they started selling the Kennedy gold coins, chances are the system would be all screwed up in the usual government way, and we would have another mint disaster. >>
Not to discourage you, but I think the test of the new system will be the silver Kennedy set. If you're interested in the silver, that is... >>
Yes, I'm interested, but I imagine they will sell most them at the Baltimore coin show this fall. Since will be the first Baltimore show that I will be missing in quite a while, I might be out on the Kennedy set. This is one set I want only in the original mint package, not in slabs.
"Keep your malarkey filter in good operating order" -Walter Breen