{"success":true,"data":{"id":"fake-credit-card-account-suspended-phish","label":"Fake credit card account suspended or blocked phishing — fraudulent email impersonating Visa, Mastercard, American Express, Discover, or Citi claiming the recipient's credit card has been suspended, blocked, flagged, or cancelled due to suspicious activity or unauthorized charges — directing them to click a link to verify card details, update billing information, or confirm identity to restore card access — a credential-harvesting phishing attack targeting payment card information","description":"Phishing emails impersonating major payment networks and card issuers — Visa, Mastercard, American Express, Discover, or Citi — claiming the recipient's credit card has been suspended, blocked, flagged, or is at risk of permanent cancellation due to suspicious activity, unauthorized charges, or identity verification failure — then directing them to click a link to verify card details, update billing information, or restore access. Payment card phishing is one of the most consistent high-volume attack categories globally. Key facts: (1) Payment card fraud accounted for $33.5B in global losses in 2022 (Nilson Report 2023); phishing is the primary initial access vector for new card fraud, supplanting physical skimming as the leading compromise method; (2) Visa and Mastercard are the two most impersonated payment brands in phishing globally — their logos are universally recognized by cardholders across all demographics, making brand impersonation highly effective; (3) Credit card phishing typically harvests a complete card profile: card number, expiration date, CVV, billing address, and sometimes SSN — providing everything needed for card-not-present fraud across any e-commerce platform; (4) Legitimate card networks (Visa, Mastercard) do not send emails directly to cardholders — they communicate through card-issuing banks. A \"Visa\" or \"Mastercard\" email is almost always fraudulent by definition. Warning signs: direct email from card network (not issuing bank), card suspended/blocked threat, click-to-verify-card-details CTA, non-official sender domain.","tier":"danger","category":"phishing","isThin":false}}