The payroll scam EMAILs keep on coming

Last updated on July 5th, 2024 at 11:52 am

Please note these emails’ screenshots and texts may include names of real people and real businesses. The addresses are usually associated with a different business than the one sending the email.

I recently shared a post about payroll scam emails I’d been sent. Well it seems my blog is still being hit with these emails.

The latest two emails were a bit different. One is definitely spam because it was in the spam folder. The second ended up in my inbox. Although I know it’s spam I’ll still share it. Some of these emails are now threatening legal action.

Here’s the thing I’ve noticed that all the payroll emails I’ve been sent are all for under $300 USD. Most are for around $250 USD or under. I also find it odd that they are all addressed to HR or accounting or some other non-exisitant department. I assume these are created by spam bots or captured using some software app and they mass spam websites.

Another thing I noticed was that the emails that send the emails are from legitimate business yet they add an extra letter to the site’s email address. Such as an extra I or an N.

They are all being sent to my reviewsandsavingspal email address.

the emails

Threatening legal action

The first email threatening legal action was sent over the weekend from a Russian email address but was replied to a Michelle Thompson at a US based company.

Email addresses are the following:
sender: sup@bezmani.ru reply to: Michelle​ Thompson” accounting@clxlogistiics.com

if you notice there is an extra I in logistics.

The email text is the following:

Hello,

 

I’m getting in touch about the invoice [reference] for [amount] that still remains unpaid.

 

After several attempts to contact you with no payment, we will shortly begin legal action in order to collect the money you owe for our services. If we receive the payment immediately then we will close the issue without legal intervention.

 

Please get in touch if there is anything you need from our side to get this closed. 

The final invoice is attached for your reference.

 

Regards,

Michelle​ Thompson

Accounting Associate

Direct 

+1-267-419-9393

Office 

+1-800-288-4822

Here’s the thing

A few things stood out for me with this spam email. First off the Russian email address was a big tell. The other was that the email was so poorly thought out. It added place holders for text. There was no invoice number given or amount that was due. Yet they were threatening to take legal action. It was funny when I saw the laziness of the scammers.

There is a mention of an invoice attached to the email but there wasn’t one. So again how lazy are these scammers getting.

Also the email was addressed to accounting. Why would a one person blog have an accounting department?

CLX Logistics is a real company it is based in the US and Europe. It seems they help transport chemical products.

Email 2

The second email appeared in my inbox.

It was sent from the following email address:admin@hffbycongregation.org
with a reply to of:”Lisa Brandon” ap@woodyboglerr.com

This directed to AP at reviewsandsavingspal. I assume that’s accounting/payroll.

Note the extra R at the end of bogler.

Email text

Hello,

 

Following up on my previous email, I’m getting in touch about the outstanding invoice.

INV #3973 for $225.34

This invoice is now overdue, so could you please advise me of the status of the payment. Please let me know if there are any issues that have delayed the payment, and we can send any relevant information to you promptly. 

I have attached a copy of the invoice which includes the due date and payment terms for your reference.

 

Thank You

 

Lisa Brandon

Accountant

Woody Bogler Trucking

PO Box 195

Gerald MO 63037

573-764-3450 ext 125

Once again

Once again this email is a bit random and offers no real info aside from an invoice number and the amount that is due.

Yet, as with the other emails these seem to be for some sort of shipping costs. This email was stated to be from a trucking company.

Woody Bogler is a real company that seems to specialize in Semi truck and dump style truck transportation services. They are based in MO.

I would think that the shipping cost for a Semi truck shipping service would be well over $225.34.

what’s the point of these email

I think the point of them is that one of these will be sent to a legitimate payroll, HR or accounting department. Or even to a small business that outsources there services this may also be a way to gain more insight into companies.

Someone may fear legal action and send a reply with payment info.

So basically I think this is another form of phishing. it could also be ID theft or brand theft in a way as well. If this was to be send a small business that sends a payment they may access that bank account. This would be the same for cmpanies as well.

I’ll just be happy when these emails stop.