Fake payment confirmation email with attached receipt file

What happens

Scammers send an email saying a payment was received and ask you to open an attached receipt. The attachment can contain a virus or a fake login page that steals passwords or money.

Warning signs

• Unknown sender domain The email comes from comicegotistic.com, which has no clear link to a payment or to the business it was sent to.
• Attachment asks you to open it The email tells you to review an attached 'receipt' PDF, which is a common way to deliver viruses or fake login pages.
• No real payment details There is no amount, order number, customer name or payment company named, only a vague request to confirm money was received.
• Urgency to confirm payment The message pushes you to check and confirm a payment, which tricks people into opening the file without thinking.
• Sent to a business address The email was sent to i•••@babytrio.lv, a general company inbox, which scammers often use to reach many people at once.

How this scam works

1. Criminals send a fake payment confirmation to businesses and private people.
2. The email says a payment was made and asks you to check an attached receipt.
3. The attached file hides a virus or leads to a fake login page that copies a real website.
4. If you open it, the criminals can take passwords, bank details or control of your device.
5. They may also use stolen details to pay or to steal money from your accounts.

What to do

1. Don't open the attachment and don't click anything in this email.
2. Don't reply to the sender or send any money or details.
3. Take a screenshot of the email and keep it.
4. Tell the person in charge of your email or computer about this email, and tell your family and friends so they are warned too.

Details to watch for

Websites comicegotistic.com babytrio.lv

E-mails c•••@comicegotistic.com i•••@babytrio.lv

Payment details Attached file: payment-receipt_ref437.pdf (90 KB)

Scammers can fake real names, numbers and logos. A number shown here may belong to an innocent person whose identity was misused.