"message@adobe.com"

[Eric Claridades]

I received this email today from the above address telling me that I have duplicate subscriptions and that I have to delete 1 otherwise I will be charged for both. I did not click the links provided, instead I went to my CC account to have a look. There was no duplicate account. I think this was a scam bait.

Has anyone else received such an email?

Be careful. Don't click links.

[jane-e]

@Eric Claridades 

You have good instincts!

If you are not sure about the email, send it as an attachment to phishing@adobe.com . To send it as an attachment, start a new email and drag the suspected one into it. The whole email includes more information than forwarding does.

If you are not sure if you have two subscriptions (they may be under different emails), contact Adobe Customer Care, as they are the only ones who can look at your account information. We cannot.

Try the link to auto-open the Chat:
https://helpx.adobe.com/contact.html?rghtup=autoOpen  
Type "agent" and ask for a case number

If your browser blocks the Chat window, try the troubleshooting tips here:
https://community.adobe.com/t5/creative-cloud-services/how-to-contact-adobe-support/td-p/11875703  

You can also send a post through X (formerly Twitter) to @AdobeCare.

Do not reply to PMs, which are likely to be scammers.

Jane

 

[Eric Claridades]

Thanks. I would've had to apply for another subscription for Adobe to open a new account with one of my other emails. There are a number of steps to finalize a subscription, right up to the payment. There's nothing unusual happening with my accounts - just that one bizarre email - which I already flagged as spam. I just want to give people a heads up.

[kglad]

then it would be prudent to keep an eye on your credit card statements to see if a duplicate charge appears.

[kglad]

the most active email scammer uses an address similar to adobecare at outlook.com  is that who you received the email from?

[Eric Claridades]

The email address is the title of my post: message@adobe.com

[kglad]

you should check with adobe support about whether you have duplicate accounts.  there are 2 ways to contact adobe; chat and twitter (now x):

chat:
use a browser that allows popups and cookies
and click here, https://helpx.adobe.com/contact.html?rghtup=autoOpen
in the chat field (lower right), type AGENT
be patient, it can take quite a while to reach a human.

twitter/x:
tweet @AdobeCare

p.s. if you're contacted by anyone (via email or private message), it's much more likely to be a scammer than an adobe representative.

[jane-e]

@Eric Claridades 

Keith has repeated the information I posted on how to reach Adobe Customer Care, so you have it twice now, but there is one thing neither of us have said yet: email addresses can be spoofed and that information will be found in the header.

Jane

[Eric Claridades]

Yes thanks, I'm aware of spoofs. That's why I'm flagging it.

[sme_golem]

Hello, I had the same thing today and contacted the support via chat. They checked my account - I don't have a duplicate subscription. They also said they had technical problems, that's why I got the email, and I should just ignore it. Maybe that helps.

[kglad]

thanks for that @sme_golem 

[Eric Claridades]

Thanks for the info. I checked my Adobe account right after reading the email, there was no duplicate. Also, before my subscription payment is debited from my account, I first receive an invoice from Adobe. So there's plenty of time to cancel the payment if there's a duplicate. I think Adobe should inform subscribers if they are having technical problems instead of wasting their time.

[jane-e]

@Eric Claridades 

You can sometimes figure out the real sender from the header in the email. I use Mac Mail and can just click a button that I added to the toolbar, but the method for viewing full headers depends on the email app. I found them for Microsoft, Apple, and Google. If you are using something else I can look it up for you.

https://learn.microsoft.com/en-us/connectivity-analyzer/message-header-analyzer#how-to-view-message-...

https://support.apple.com/guide/mail/show-detailed-email-headers-mlhlp1089/mac

https://support.google.com/mail/answer/29436?hl=en

The (hidden) full header is what phishing teams need to see, which is why we send the suspicious email as an attachment.

Jane

[Eric Claridades · Accepted solution]

The email was legit. Sent by: "Amazones" from Adobe to my Adobe-registered Gmail account via Adobe Sydney Australia.

The email was "unsent" overnight - Sydney Australia time.

I don't want to spend any more time on this. Thanks very much for your help.

[jane-e]

Thanks for reporting back Eric. I've marked your post correct to close the thread. I would also have been suspicious — better that than too trusting. 😊

Jane

[Eric Claridades]

Thanks Jane 🙂

[steve_3212]

Scam I got one too

[kglad]

@steve_3212 

be careful. a lot of these are legit.

[andrew_6389]

I just got this one from message@adobe.com 

PayPal Order invited you to edit If this Charge is not for your Bitcoin buy Quickly inform us +1 (863) 208-7114

You paid $499.99 USD for Crypto Currency using PayPal. This amount will be auto deducted every month. If this is not authorized by you, Call PayPal Customer Service to cancel at +1 (863) 208-7114 (Toll Free)

[kglad]

adobe's not involved with cryptocurrency 

[jane-e]

I just got this one from message@adobe.com 

By andrew_6389

Look at the full header to see who really sent the email. The simple header can be forged. You are right to be suspicious!

Finding the full header differs depending on your email application. The University of Arizona lists several different email applications and explains how to find the full header in each.

https://security.arizona.edu/content/full-email-headers-guide

You probably already know this, but never call a phone number in a suspicious email. Instead, look up the correct contact information:
https://www.paypal.com/us/cshelp/contact-us

PayPal says, "Forward suspicious emails or messages to phishing@paypal.com and delete them."

Again, try to include the full header. One way to do it is to drag the suspicious email into the email from PayPal, which will send it as an attachment and PayPal can then look up the full header.

Jane