Email · stamped SCAM

The "your points expire today" emailSCAM

A real scam people fell for this year, next to the real thing. The numbers mark the three things to check: hover or tap one to see what it tells you.

Safe
MInbox (3) – Gmail×
https://mail.google.com/mail/u/0/#inbox
✎ ComposeInbox 3StarredSnoozedSent
Your $5 ExtraBucks Rewards are ready
CCVS Pharmacy <extracare@cvs.com>to me10:42 AM

Hi Linda, you earned $5.00 ExtraBucks Rewards. Nice work!

They're already on your ExtraCare card: use them in store or on cvs.com by Nov 30.

See all your deals in the CVS app.

Scam
MInbox (3) – Gmail×
https://mail.google.com/mail/u/0/#inbox
✎ ComposeInbox 3StarredSnoozedSent
URGENT: your 9,870 points expire today
CCVS ExtraCare Rewards <loyalty@cvs-rewards-desk.click>to me10:42 AM

Our records show 9,870 ExtraCare points in your account will expire today.

Redeem them now for FREE Bose noise-cancelling headphones. You only pay $5.99 shipping.

Enter your card to cover shipping and your headphones are on the way.

Redeem nowcvs-rewards-desk.click

Always check the fee.

Free headphones for your "expiring points", if you just pay $5.99 shipping by card. Real rewards never need a fee: the fee is how they get your card number, and often a monthly charge after.

Always checkThe real oneThe scam
1Where it livesIs it the real company's or person's own address or number?

extracare@cvs.com is CVS's own address.

loyalty@cvs-rewards-desk.click has CVS in its name, but CVS doesn't own it.

2What it asks you to doCheck firstDoes it want a password, a payment, a call, or a tap?

Use $5 ExtraBucks at the till or online, nothing to pay.

Enter your card to pay $5.99 "shipping" for a free gift.

3How hard it pushesIs there a deadline, a threat, or a surprise charge?

Your reward is good for a month.

Your 9,870 points "expire today".

RememberIf a free reward needs your card for shipping, it isn't free and it isn't real. Check your points in the store's own app.

Would you have spotted it?

10 pairs like this one, three minutes, a score to share. Then find out who in the family is the easy mark.

Take the testNext scam: The "Chloe, 1.4 km away" email →