Thursday, June 28, 2012

Fake ADP Email

Today when I checked my email I got a message looking like it was from ADP a well known payroll company. It even looked like it came from ADPClientServices@adp.com. Here is what it said....

Your Transaction Report(s) have been uploaded to the web site:

https://www.flexdirect.adp.com/client/login.aspx

Please note that your bank account will be debited within one banking

business day for the amount(s) shown on the report(s).

Please do not respond or reply to this automated e-mail. If you have any

questions or comments, please Contact your ADP Benefits Specialist.

Thank You,

ADP Benefit Services


Now the links in the email look like they came from one place but if you over your cursor over them they do not go to that website when you click on it. Also, they had cc'd this email to several people with an AOL account (this was my AOL email address). With all of that in place this email is a scam and get rid of it. DO NOT click on any of those links as they appear to be phishing for information.

89 comments:

  1. I just received this email too. I am glad that you posted this. I was worried for a moment that I had signed up for something unawares :)

    ReplyDelete
    Replies
    1. I just received this email also and it scared me for a moment as I did not recall signing up for anything like this nor had I heard of this company. I surely have not given out my bank info to anyone. Yikes. Who do we report this scam to?

      Andrea Hobright.

      Delete
  2. I just opened the same message and am presently checking to see if anyone has reported a scam. Thank you for posting this; my question has been answered.

    ReplyDelete
  3. I'm glad you took the initiative to post this. Many people will now be informed more.

    business college courses

    ReplyDelete
  4. today I received an email from ADPClientServies@adp.com telling me that my password had expired. ADP PASSWORDS DO NOT EXPIRE according to ADP's policy manual.

    ReplyDelete
  5. I received the email saying my transaction reports have been uploaded and my bank account would be debited in the next business day. I received it yesterday and am very grateful to find this blog reporting it as a scam. I, too, was worried I had signed up for something unawares. Some people just need to learn how to spend their time productively instead of causing other people trouble. I really don't get the reward for this type of behavior.

    ReplyDelete
  6. I just got this e-mail today, and was concerned. Something told me to check for scams.

    ReplyDelete
  7. I am retired for over 9 years, haven't worked a job since 2003. I've never even heard of ADP and have never given out my banking info, not even a credit card as I have none. This MUST be a SCAM!!!

    ReplyDelete
  8. Thanks for the confirmation! It was obviously a scam but it is nice to have a place to get more info.

    ReplyDelete
  9. I just received a similiar email a few minutes ago in my Outlook account. Hopefully my Norton 360 did its job.

    ReplyDelete
  10. J ai clique avant de vérifier !!!
    Que va t il se passer ? Merci

    ReplyDelete
  11. Today I received an email from ADP Benefit Services saying they are going to debit my account. I deleted this email but don't the police look into such scams and since I'm 85 I just might find out if they do.

    ReplyDelete
  12. Alice September 19, 2012 2:51p.m. Just got an identical email as Inez. Our Norton 360 said it blocked an attack. Are our bank accounts safe?

    ReplyDelete
  13. Really getting tired of this sort of scam. All beware and DO NOT CLICK THRU ATTACHMENTS! Many of these attachments use flaws in MS software to gain access to cached info. on your computer. Thanks for posting this, it will definitely help all!!!

    ReplyDelete
  14. I got this mail too. Thanks for this post. it was really useful. :)

    ReplyDelete
  15. I got a same mail today and unfortunatly i click the url link. My McAfee Internet Security found nothing ?! My laptop is a Apple MacBook Pro.

    ReplyDelete
  16. Your Transaction Report(s) have been uploaded to the web site:

    https://www.flexdirect.adp.com/client/login.aspx

    Please note that your bank account will be debited within one banking business day for the amount(s) shown on the report(s).

    Please do not respond or reply to this automated e-mail. If you have any questions or comments, please Contact your ADP Benefits Specialist.

    Thank You,
    ADP Benefit Services


    September 20, 2012 12:36 AM

    ReplyDelete
  17. even a retard can figure that out... then you want money for your 'research'...


    i guess scammers can recognize each other, right?

    ReplyDelete
  18. This is one of the typical phishing scams, with all the information available on them, I don't understand why people still think they need to click a link from a company they have no business with...

    I use a service called Mailwasher Pro that BLOCKS this message before it even hits my 'in-box'

    ReplyDelete
  19. I want to add that the one I received came with the email e3636559a@courts.govt.nz That looks ALMOST like it's from the government of NZ, however, their email doesn't use that string.

    ReplyDelete
  20. We got the same email today. We've gotten it a few times over the past year or so. Seems like this email goes around every few months - thankfully it goes right to my junk mail folder.

    ReplyDelete
  21. Guys, from what I've seen the email itself contains no virus. Just text in the one I saw but I may not have received it in its original format.

    (Someone sent it to me and asked what to do about it)

    I have clicked on the website link and it looks like a phishing website. The address is flexdirect.adp.com. Which seems to be in the adp.com domain but maybe that is being spoofed somehow?

    ReplyDelete
  22. I just got the same email from: ADP Benefit Services

    'Your Transaction Report(s) have been uploaded to the web site:

    https://www.flexdirect.adp.com/client/login.aspx

    Please note that your bank account will be debited within one banking
    business day for the amount(s) shown on the report(s).

    Please do not respond or reply to this automated e-mail. If you have any
    questions or comments, please Contact your ADP Benefits Specialist.

    Thank You,
    ADP Benefit Services'

    .................................

    The link is actually to the below:

    http://agradealuminium.com.au/rekUxxQ3/index.html

    ReplyDelete
  23. This same email just came to my email account at UC Davis.

    Looked phishy, so I deleted it & then came looking for posts about it.

    Thanks for posting this info.

    ReplyDelete
  24. I received the same email today (Sept.21/12). It looked suspicious so I entered the sentence beginning with "Please note that..." into Google. Sure enough, it was a scam.

    ReplyDelete
  25. Thanks for taking the time to create this site for scams. I received the same e-mail you posted from ADP. I was a former client with ADP and thought it was a mistake but found out through this site that it is a scam. Thanks again.

    God Bless You!

    ReplyDelete
  26. got one today...email sent from:-

    ADPServices <7D51FED31@musicartwork.com>

    looks like its just a site created for sending lots of spam emails as there's nothing on it, except creating a free website button at the bottom...

    ReplyDelete
  27. I got it today (Sep. 22) to my email address on yahoo. I live in Sweden. I have never heard about ADP, the company they fake to be. In Sweden this is not only scam, it's highly illegal and can send the poster/fraud up to 6 months in jail. /Stefan

    ReplyDelete
  28. I have received similar emails on all three of my email accounts so thanks for posting this - I did assume it was phishing, but also worry on occasions that someone has got hold of my details and made payments from my bank account. This has put my mind at rest so thanks again.

    ReplyDelete
  29. Thanks for confirming the scam. I just received this email in my SPAM folder today.

    ReplyDelete
  30. Thanks for this post.

    I wish that it were possible to comment here anonymously.

    Do not click the link but, I don't *think* that it will hurt if you have clicked.

    I clicked, was redirected to an ip address with a java program, but I closed that page before the java program loaded up.

    My guess is that the page is just going to be an official looking page and ask us for bank account details including password "to prevent debit" but I am not sure.

    If your Windows and Flash software is not up to date, the java can access e.g. your clipboard.

    What did the page do/look like?


    Tim

    ReplyDelete
  31. thanks for information,I just got such message,now I know it is scam :)

    ReplyDelete
  32. What can I do if I already clicked on the soppouse links on the email?!!!

    ReplyDelete
  33. I got the same email....two of them this week, actually. It freaked me out by saying my bank account was going to be debited. I didn't click on anything though, thankfully.

    ReplyDelete
  34. Just got this Email today glad i checked first thanks

    ReplyDelete
  35. in the spam section, here are the headers, my email removed :)

    Delivered-To: me@somewhere.com
    Received: by 10.152.125.171 with SMTP id mr11csp298758lab;
    Sun, 30 Sep 2012 15:00:11 -0700 (PDT)
    Received: by 10.58.79.2 with SMTP id f2mr7607253vex.31.1349042410577;
    Sun, 30 Sep 2012 15:00:10 -0700 (PDT)
    Return-Path:
    Received: from ([187.186.133.230])
    by mx.google.com with ESMTP id u17si2257051vcv.60.2012.09.30.15.00.06;
    Sun, 30 Sep 2012 15:00:10 -0700 (PDT)
    Received-SPF: neutral (google.com: 187.186.133.230 is neither permitted nor denied by best guess record for domain of F7E5EED@windriders.com) client-ip=187.186.133.230;
    Authentication-Results: mx.google.com; spf=neutral (google.com: 187.186.133.230 is neither permitted nor denied by best guess record for domain of F7E5EED@windriders.com) smtp.mail=F7E5EED@windriders.com
    From: "ADP Service"
    Subject: New transactions
    To:
    Content-Transfer-Encoding: 8bit
    Content-Type: text/html; chars="utf-8"
    Date: Sun, 30 Sep 2012 17:00:06 -0500
    List-Unsubscribe:
    Message-ID: <20120930170006.BD80AEC11FBF28FCEDFF5.9B1962@CHIPILO-LAP>

    http://cntmensclub.org/1WKRxj/index.html title is "ADP Benefit Services" poses as https://www.flexdirect.adp.com/client/login.aspx

    ---cant post html----

    ReplyDelete
  36. right now i got this mail
    ur Transaction Report(s) have been uploaded to the web site:

    https://www.flexdirect.adp.com/client/login.aspx

    Please note that your bank account will be debited within one banking
    business day for the amount(s) shown on the report(s).

    Please do not respond or reply to this automated e-mail. If you have any
    questions or comments, please Contact your ADP Benefits Specialist.

    Thank You,
    ADP Benefit Services

    ReplyDelete
  37. Just got this email as well. Got a 403 error when I opened the link on my iPhone. Does anyone know if the error that is being exploited is Windows specific?

    ReplyDelete
  38. Am glad I was able to find this report as the email caught me off guard & I had even started to wonder what the hell I had signed up to or who had used my accounts/cards/etc to buy stuff

    Thanks for the info, oh & I am not with AOL I got the msg through an old Yahoo.com.au email account

    ReplyDelete
  39. Thank you for the post as I have also received the email and was tempted to clieck through to find out more. Glad I didn't. I hate this stuff.

    ReplyDelete
  40. Add to the list of those who have thanked you!

    ReplyDelete
  41. I just received this email too. I am glad that you all posted this. I was worried for a moment that I had signed up for something unawaringly..

    ReplyDelete
  42. I just received this too - normally I'd trash it, but coincidentally, I'm awaiting a Super payout... lucky I always look into things before clicking links (and I did the hover before heading over here to check it out - def going to a different website!)

    Soooo glad I listen to my instincts (specially as I'm meant to get an sms notification - not an email when it goes through!)

    ReplyDelete
  43. Thanks for the note.. I have also receive that Message. And I have clicked the linked provided. Is, it harmful??

    ReplyDelete
  44. thank you, is there anything can be done to stop those people

    ReplyDelete
  45. I received a few from that concerned "ADP Benefit Specialist" (there is no "benefit specialist" in ADP - I asked them) in the last couple of days.
    I don't have anything to do with ADP so I knew it is a phishing scam but left me worry anyway... so I Google the "ADP benefit services" and found this link.
    Thanks for posting this blog, you have done a great services to everyone!

    ReplyDelete
  46. I just received this e-mail and immediately sent it to spam@uce.gov which is a government agency that investigates this sort of scam.......

    ReplyDelete
  47. Hi, I could see this was a scam, it went straight to my junk folder, it came from this email address. ADPClientServices@adp.com , so much junk mail these days you have to be aware. thanks for your post. I got this email two days running.

    ReplyDelete
  48. Got it today. Gmail flagged it as spam. I googled the text and found this blog. Thank you.

    ReplyDelete
  49. thank you, I googled the company and found this.

    ReplyDelete
  50. Thank You....this is still out there!

    ReplyDelete
  51. same here, I got the exact same email, and I got a hunch that I had to check out there.
    Thanks for this info, dear!! It helps a lot!

    ReplyDelete
  52. I too have just received this email and I called my Payroll manager and she informed me that ADP does not directly contact employees and too not click the link as it is most likely a virus. I did however try to click the link, but thankfully my browser did not allow me to open it as it informed me that it was indeed an attack page.

    ReplyDelete
  53. I got the email as well. We need an Internet Police to search these scam artists and lock them up.

    ReplyDelete
  54. Hold curser over sender's email and it comes up "moovie.cz/uh1indYindex" I Googled that and it comes up empty. But scroll down and there's a line item that states " Ad related to (above inquiry)" Lesbian Films www.frameline,org. I'm not a tachie guy so I'm not sure how to report this. I'f anyone can ...... please do. I almost opened it but glad I didn't. Good luck.

    ReplyDelete
  55. I got two emails like that too. One tomorrow and another one just few minutes ago. When I tried to go on to the link. It crashed and my anti virus detected intrusion attempt. This is so annoying. Hope it ends soon.

    ReplyDelete
  56. i just got 2 of these - forwarded them to abuse@adp.com as attachments.

    ReplyDelete
  57. Just received this today and happy that I didn't fall for it.

    ReplyDelete
  58. just got one today too thanks for blog had feeling it was a scam have not clicked on link so will delete straight away

    ReplyDelete
  59. Same here. It was only addressed to me, not multiple addreses, so was slightly concerned at first, particularly since I had two rougue debit card transactions appear on my bank account last week ( my bank have refunded me and are investigating ) so it was good to be able to google this and see the exact e-mail referred to. Will delete immediately.
    Thanks

    ReplyDelete
  60. I ALSO RECEIVED. THIS IS SCAM AND FISHY. these type of stupids, bastards try to cheat the public. They always tries to cheat the people particularly from Nigeria. Useless fellows

    ReplyDelete
  61. i recieved the same mail in my spam folder, fearing that i had unknowingly signed up for some thing, i clicked the link. it went to an indonesian site and then i googled and found this blog.thanks for posting and creating awareness.

    ReplyDelete
  62. I see this email in my spam folder right now, googled it and found this. I will delete this scam spam. Thank you.

    ReplyDelete
  63. Same email as above in SPAM folder.

    I'll keep an eye on my bank account but do not believe they really have the info. I've asked who exactly they are but don't expect an answer...

    Of course, NEVER click the links in unsolicited email.

    ReplyDelete
  64. Surprise, surprise - reply message failed to deliver.

    ReplyDelete
  65. I got it yesterday here in Sydney on my live account. Thanx everyone for posting. I'll just delete it.

    ReplyDelete
  66. just received the same mail but they hadn't cc'd the email to several people. thanks for the post!

    ReplyDelete
  67. I work for a company that uses ADP for our payroll services. Have been advised that there are currently 3 phising emails circulating. Was told that anyone who attempts to open the links should run an extensive scan on their pc - to avoid any phising. ADP is working to have them stopped.

    ReplyDelete
  68. http://www.viet.it/r2PhRJnQ/index.html

    This is where it sends you to a scam website in vietnam.
    If you want to frigure out where the scam is coming from just right click and select properties and this will divulge the culprit. Never open a suspicious link with out viewing the properties to see where your headed.

    ReplyDelete
  69. They can't hide the properties so you can always see if it is legit by looking at the properties of a link before clicking it.

    ReplyDelete
  70. I got this scam email yesterday and I am glad I did not check on the link include in the email. Thank you all for your comments and this blog.

    ReplyDelete
  71. I emailed them asking who they were and what company they were representing. NOW WHAT??? I responded before I read all these posts. Does it leave me more open for this dirt bag to hack into my computer and steal my identity???? or get into my bank accounts???? HELP!!

    ReplyDelete
    Replies
    1. Unless you gave them your personal information you should be fine. You can even scan your computer for viruses just to make sure.

      Delete
  72. The new links are so placed with different and scam accounts. The several accounting cursors are really informed with phishing transform. Specialist version of the services systems are really very effective and entire.

    Virtual Office London

    ReplyDelete
  73. I was sent the same e-mail to my company from this hotmail account...

    Date: Wed, 9 Jan 2013 01:09:02 +0400 [Tue, Jan 8, 2013 04:09:02 PM EST]

    From: JeramiahChatcho@hotmail.com

    Subject: ADP Immediate Notification
    1 unnamed 1 KB
    ADP Immediate NotificationReference #: 791534154

    Wed, 9 Jan 2013 01:09:02 +0400
    Dear ADP Client

    Your Transfer Record(s) have been created at the web site:

    https://www.flexdirect.adp.com/client/login.aspx

    Please see the following notes:Please note that your bank account will be debited within one banking business day for the amount(s) shown on the report(s).Please do not respond or reply to this automated e-mail. If you have any questions or comments, please Contact your ADP Benefits Specialist.
    This note was sent to acting users in your system that approach ADP Netsecure.

    As usual, thank you for choosing ADP as your business affiliate!

    Ref: 808289938

    HR. Payroll. Benefits.

    The ADP logo and ADP are registered trademarks of ADP, Inc.
    In the business of your success is a service mark of ADP, Inc.
    © 2013 ADP, Inc. All rights reserved.

    ReplyDelete
  74. I was sent this email today and I know it's a scam because I have never signed up and I am definitely not familiar with the company in my line of work...

    We were unable to process your recent transaction. Please verify your details and try again.
    If the problem persists, contact us to complete your order.

    Transaction details are shown in the attached file.

    Reference #493020107768

    This e-mail has been sent from an automated system.
    PLEASE DO NOT REPLY.

    The information contained in this message may be privileged, confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify your representative immediately and delete this message from your computer. Thank you.

    ReplyDelete
  75. Received same mail today. I have never signed up. There is one zip attachment as well.



    We were unable to process your recent transaction. Please verify your details and try again.
    If the problem persists, contact us to complete your order.

    Transaction details are shown in the attached file.

    Reference #949260435677

    This e-mail has been sent from an automated system.
    PLEASE DO NOT REPLY.

    The information contained in this message may be privileged, confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify your representative immediately and delete this message from your computer. Thank you.

    ReplyDelete
  76. I received a couple of identical mails from the same company a few days ago. Just for your information. I live i Norway and have an E-mail address ending with .no.

    ReplyDelete
  77. I received that email via LinkedIn, which made it look more plausible, but I was still suspicious so I Googled it and found this thread. Thanks for exposing this for the scam it is.

    ReplyDelete
  78. Adding my two cents. Check this out...

    ACH transaction is completed. $8980 has been successfully transferred.
    If the transaction was made by mistake please contact our customer service.
    Payment receipt is attached.

    And the kicker is that there is a 23kb file attached: Payment receipt.zip.zip ...

    I wouldn't touch this thing with a ten foot electronic pole.

    ReplyDelete
  79. I received an email today supposedly from ADP_FSA_Services@ADP.com to tell me we owed $29203.56. As I had no idea who ADP was I googled it and came up with this thread. Thank you to all for posting. The links within the email go to an entirely different location.

    ReplyDelete
  80. Just got this one at work with a zip file attached. I deleted it and reported it to spam@uce.gov as well. Email text below -

    "We were unable to process your recent transaction. Please verify your details and try again. If the problem persists, contact us to complete your order.

    Transaction details are shown in the attached file.

    Reference #126482929385

    This e-mail has been sent from an automated system.
    PLEASE DO NOT REPLY.

    The information contained in this message may be privileged, confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify your representative immediately and delete this message from your computer. Thank you."

    ReplyDelete
  81. Today was a first from this Phishing scam. This time it is saying we could not process your recent transaction please verify your details and try again with a zip file attached. The person doing this is an idiot it is so easy to recognize. Has to be a novice practicing Phishing scams.

    ReplyDelete
  82. Just got this email today SEP quarantined it and now running SEP scan and Malware-bytes Ill keep everyone in the loop

    ReplyDelete
  83. It wasn't me but my business associate who had got this email from ADP some months ago. He was scared a lot until I told him about the scam going on by that payroll company. It had been happening to a lot of people.

    Regards,
    Jimmie Menon
    Payroll Services Guelph

    ReplyDelete