‘Your Order Has Been Processed’ Malware Email
The original site is no longer online; links go to the Internet Archive copy.
What the fact-checkers found
This email, which purports to be a ‘payment accepted” notification from an online store, claims that your order has been processed.
The email includes the supposed order number along with cost and delivery details for the purchase. The order numbers in the body of the email are clickable links.
Despite its appearance, however, the email is not a genuine order notification. Instead, it is a ruse designed to trick you into downloading malware.
The criminals who distribute the email hope that at least some recipients will mistakenly believe that their credit card has been used to make a fraudulent transaction online. Those thus tricked may click one of the links in the email in the hope of finding out more about the supposed order.
But, clicking any of the links in the email downloads a.zip file. The zip file harbours malicious software that, if opened, will install malware on your computer.
The exact nature of the malware may vary. It may be ransomware which will lock up your computer files and then demand that you pay a fee to online criminals to get an unlock code. Or, it may be designed to steal passwords and other sensitive financial and personal information from your computer.
Note that details, such as the order number, the name of the online store, and the supposed cost may vary in different incarnations of the message.
If you receive one of these fake order notifications, do not click any links or open any attachments that it contains.
Malware emails like this are very common.
A screenshot of the email
Got a similar message?
Paste it into the detector and see whether it matches a known hoax.
Check a similar messageRelated fact-checks
Browse the archive →IMAGINiT ‘Urgent Invoice’ Malware Email
The email is not from IMAGINiT and the attachment does not contain an invoice. The attached document contains a malicious macro that, if run, can download and install malware on your computer.
Fake ‘First NetBank Third Party Payment’ Emails From CBA Contain Malware
This email, which purports to be from Australia’s Commonwealth Bank (CBA), is supposedly a ‘First NetBank Third Party Payment’ notification about a recent payment from your account to a third party.
Fake Walgreens Order Email Opens Malware Website
The email is not from Walgreens. Clicking the link opens a website that contains malware. Criminals are sending similar malware emails that pretend to be from Costco, Walmart, and other popular stores.
Fake Costco Order Notification Leads to Malware
The email is not from Costco. Clicking the link opens a website that contains malware. Once installed, this malware may collect personal information from your computer and connect with servers operated by criminals.