Ocado scam

I've had similar ones purporting to be from PayPal. I don't have an account with them and never have had one. I contacted PayPal and they are looking into it!!

Phishers do so by sending e-mails that are designed to collect an individual's sensitive information. To make phishing messages look like they are genuinely from a well-known company, they include company logos and other identifying information taken directly from real company's website. The victim receives an e-mail that appears to have been sent by a known contact or organization. The fake email conveniently includes a link you can click on to resolve the problem which you're told you need to do. These e-mails are clever fake and the information you provide goes straight to the crooks behind the scam. Because these e-mails look like from legitimate companies and victim trust them and enter their personal information.

net-informations.com/q/mis/phishing.html

DH and I have both received today individually addressed emails purportedly from Lancashire Police Authority. It claims to be sending us an invoice, which is an attachment. More worryingly it also asked for a read receipt, which we both refused to send.

I let the cursor hover over, what seems like a genuine "from" email address and it gave the same address as on the front of the email. However a quick check online showed that this is not the address of the Lancashire Police Authority.

As we live in Oxfordshire and have not been to or through Lancashire for many years we are confident that this is a scam. So if anyone else gets it, beware.

Sorry MadGrandma! Just realised you've already given this advice! My excuse? I'm on holiday - and so is my brain!!

Thanks for the warning I don't use Ocado myself but my elderly neighbours do so i have warned them as I would hate for them to be conned by this scam.

BEWARE - seriously - do not, ever, open any attachments in an email unless you are CERTAIN that the email is legitimate.

There are hundreds of fake, spam, emails, that may look genuine; but once you open the attachment then your computer is infected with a virus.

Some of these virus's lock your computer, so that you cannot access your data unless you pay a ransom (typically tens or even hundred of pounds) to the criminals behind this. This is called 'ransomware'.

If you get any emails of this type, then send it to Junk and do not open the attachment.

Many of these spam emails say things like "Invoice for payment", "Your order", etc.

Some of them start off with "Re: " in the subject line so that they look like they are replying to your email.

Also see the useful emails from Chaa006

haven't had one from ocado but had one yesterday about an iTunes account which I have never had I deleted it

A good way of how to check if an email is genuine, is to let the cursor hover over, what seems like a genuine "from" email address and you will see the details of the real sender disclosed underneath. Can be quite an eye opener! If in doubt always go to company website.

Good advice, Chaa006.

Another thing to watch out for when you get any such email is that your name isn't simply pasted from another source such as facebook, twitter or your email address found elsewhere.
I've had a lot of scam emails over the last year, supposedly from my electricity supplier (Scottish Power). The earlier ones just said something like "Hello Customer", but the later ones got cleverer!

I have this morning received an almost identical e-mail, but this one (which I believe to be genuine, but which I have nonetheless forwarded to Ocado for confirmation) addresses me by name rather than just starting "Hello", so it may be worth checking any/all similar messages in the future to see if they are correctly personalised or just generic (the latter should trigger loud warning bells). Unfortunately the "View the web version" link was broken in this most recent message, so it would still have been necessary to open the attachment if one wanted to see inside (today's attachment was an Adobe PDF, not a Microsoft Word document); I have reported this to Ocado.

There are several email addresses in use in the household and this email arrived in the Inbox of two of them. Not being Ocado users they were immediately marked as spam but I have to say it looked far more convincing than many of those purporting to come from banks and other major players.

I also received one of these emails yesterday and wondered why it hadn't gone into my junk mail. Wish I had seen this warning yesterday as unfortunately I replied to it, though didn't click on any link. Hopefully nothing untoward will happen.

Hubby received one too yesterday. Weve never shopped with Ocado. We r more Aldi!! Hubby is very savvy with this sort of thing n deleted it straight away.

I get loads of emails which supposedly come from Tescos, Boots, Argos etc, and my Yahoo mail generally gets it right to put them straight into my Spam folder. I've also discovered that if you hover your mouse over the name of the sender, it will reveal the email address which sent it, so you can double check if unsure. I even get "Bank" emails telling me that my account has been suspended, when I don't have accounts with them!

I got one of these emails yesterday and I went to my Ocado account, NOT using the link provided, as I knew this must be a scam as I too hadnt placed an order. I emailed Ocado advising them of the scam and I am awaiting a response.

Bumped to join the other one.

Yes, thank you for the warning Grannyknot I do sometimes use Ocado, so may well have not realised it was a scam - even though I like to think I'm pretty clued up!!!

Yes, and sorry for being sceptical - I couldn't see how scammers would be able to make money out of this but now it's been explained I realise I'm more gullible than I thought!

Well done for alerting us Grannyknot.

Cari -- the only way of seeing that the sender was not really Ocado was by looking at the message headers, which most people do not see; for this message, the clue lay in the first "Received: " header, which read :

Received: from VHHC-PB4VKWD.hcm.local (113.183.214.95) by DB3FFO11FD055.mail.protection.outlook.com (10.47.217.127) with Microsoft SMTP Server id 15.1.300.4 via Frontend Transport; Mon, 19 Oct 2015 10:12:33 +0000

or

Received: from [45.121.188.9] (45.121.188.9) by DB3FFO11FD009.mail.protection.outlook.com (10.47.216.165) with Microsoft SMTP Server id 15.1.300.4 via Frontend Transport; Mon, 19 Oct 2015 10:20:51 +0000

together with an SPF warning :

Received-SPF: PermError (protection.outlook.com: domain of ocado.com used an invalid SPF mechanism)

How is it, when you type in some company's name, it appears as a link. I didn't try to put a link there. Just the email address.

I haven't had one.

Nellie -- Ocado don't appear to be notifying their customers by e-mail, or if they are, it is taking a long time for the notification(s) to arrive. I am a long-standing customer, and informed them of the scam by telephone shortly after 11:12 today, but so far I have received no e-mail from them informing me of the message or of the risk of opening the attachment. They have, however, posted a warning on their web site, which reads :

Important Message

Some customers have been targeted with a spam email today which looks like it's from Ocado - the subject line is "Your receipt for today's Ocado delivery", and the delivery time is between 12pm and 2pm and the driver's name is Paul. If you have received this email please delete it without opening the attachment. Thank you.

Thanks Chaa006. I hope Ocado are notifying their customers.

They have not left me out! I've got one. I have never in my life used Ocado
I have e mailed Ocado. I wonder how whoever is doing this scam got my email address.

Everyone check their Emails and don't respond.