Chase Fake Payment Receipt Credential Phishing Attack
Initial Email Content
Your credit card payment is pending and waiting for approval.
Account ending in: 4642
Payment amount: $12461.77
Effective date: 05/13/2022
Payment authorized on: 05/10/2022
See payment activity
Click Here To Decline or Accept
If you pay between 8 PM ET and 11:59 PM ET, we’ll credit your account for the date you chose, but you might not see it for 1-2 days.
If you pay after 8 PM ET on your due date and you pay at least the minimum amount due, you’ll see a late fee on your account that will be reversed automatically when the payment posts in 1-2 days.
We’ll process this one-time electronic payment as scheduled.
To cancel a payment scheduled for a future date, please visit us at chase.com or in our app.
Attack Screenshots
Malicious Artifacts
Additional Indicators of Compromise
Type
Description
Attack Description
This link-based attack impersonates Chase using an external compromised account and a fake payment receipt theme to steal credentials.