AE
American Express
Targeting NZ cardholders with fake account alerts and identity-verification scams designed to steal card details and credentials.
Official indicators
AE
American Express<noreply@americanexpress.com>
To: you@example.com
For your security, please Manage Your American Express Account to complete this action.
Original URL: https://www.americanexpress.com/en-nz/. Click or tap if you trust this link.
What real American Express messages look like
- Official emails come from @americanexpress.com, @email.americanexpress.com, @alerts.americanexpress.com, @my.americanexpress.com, @welcome.americanexpress.com, or @aexp.com — check the full domain, not just the display name
- American Express will never ask for your full card number, CVV, PIN, or one-time passcode via email or SMS
- Never enter card details by clicking a link in an email — go directly to americanexpress.com/en-nz instead
- Report suspected phishing emails by forwarding to spoof@americanexpress.com
- NZ fraud line: 0800 656 660 (within NZ) or +64 9 583 8300 (overseas)
Common spoof patterns
- "Your account is temporarily limited" urgent emails with fake login links
- "Verify your identity" prompts leading to credential-harvesting pages
- "Your reward points are expiring" lures designed to capture card details
- Fake transaction alerts pressuring you to confirm or dispute a charge immediately
- Lookalike domains such as amex-secure.com, americanexpress-nz.com, or aexp-support.com