We have received reports that a fraudulent email is being sent out pretending to be from Authorize.Net that is actually a phishing attempt by an unknown source. If you receive a “Successful Credit Card Settlement Report” email that does not include your Gateway ID or Reseller ID, please disregard it and do not click on any of the links provided. It is NOT from Authorize.Net.
As a reminder, Authorize.Net occasionally identifies fraudulent websites and emails which mimic the official Authorize.Net website and emails. While we work to have these sites and emails shut down in a timely manner, there is no guarantee that they will be shut down, nor a way for Authorize.Net to identify all fraudulent sites and emails.
If you receive an email requesting that you provide sensitive information, or update your Authorize.Net account information, do not respond to the email and do not click on any links that may be included. Instead, please contact Authorize.Net Customer Support at support@authorize.net to verify that the message is genuine. If the message is not from Authorize.Net, you may be asked to provide details about the message to assist in responding to the potential fraud attempt.
Authorize.Net will never request that you send sensitive information to us via email. Please do not send sensitive data to us via email because there is no sure way of preventing inadvertent or unauthorized access to emails both sent and received. You should also avoid opening email from any unknown persons or clicking links in emails from unknown persons, as it may lead to malicious software, virus infections or unintentional disclosure of sensitive data.
Examples of information that are considered sensitive include, but are not limited to:
- Bank account numbers
- Credit card numbers
- CVV data (3-4 digit card code & magnetic track data)
- Passwords (Authorize.Net or otherwise)
- PIN numbers
- Secret question & answer
- Social Security Numbers
- Tax ID numbers
- Bank routing numbers
- Driver's License numbers
- Merchant processing ID numbers
If you believe you may have inadvertently responded to, or clicked a link in a fraudulent email, please contact Authorize.Net for assistance in securing your account. Also, if ever there is a business need for you to disclose sensitive information to Authorize.Net, you think your password may have been compromised, or you believe that a malicious person is posing as Authorize.Net, please contact Authorize.Net Customer Support for guidance.
To learn more about this topic you may wish to visit http://www.us-cert.gov/cas/tips/ST04-014.html.
Thank you for your attention to this important security matter.
