AMEX Email Campaign asks for my card number… you what?

I received this campaign today from American Express New Zealand, asking me to register to win.  American Ex-cess usually takes away not gives, so I thought I would take a look.

They called me a warm friendly ‘Cardmember’ – but in fact they had my name, which you can see in the side bar.  That was the first thing that made me feel special.

Then I click through on the link to register and they ask for my credit card number. 
HINT: 1. I think you know it already.  I’ve scratched it out of the email above but you stuck half of it in the side bar under “For Your Security” heading. 
HINT 2. It’s in the big computer next to you, and I’m not typing it into your entry form.

If American Express email marketing want me typing my card number into online forms to enter competitions then they will probably get their wish, as they incite lots of Eastern Blok types to try this campaign themselves.

We’d been talking about how clever spammers and phishers are getting, just this morning.  We’ve had McDonalds, banks of course, but the bank frausters are getting really good…  at phishing.

I had to take this thing apart to work out that it was genuine.

If Peter Newton had his phone number on the email I would have called him straight up, but he’s probably in his office in Sydney signing off campaigns.

Here is the landing page (you can click to enlarge):

What do you think?

UPDATE:  OOps! You did it again. American Express marketing has since sent me 2 other campaigns with a significant error you can see that here.





The landing page

The landing page










  • http://www.ragepank.com Harvey

    All class. And they wonder why people have trouble differentiating phishing sites from regular sites.