PhillipBlanton.com

"Save me, oh God, from people who have no sense of humor."
— Ludlow Porch

"Rejected ACH Transaction" NACHA Spam

I have been receiving about two of these per week. They often point to different domains, many of which have been shut down by the time I receive the message.

<http://nacha.org/images/nacha_logo.gif> 

The ACH transfer (ID: 283291090211), recently initiated from your checking account (by you or any other person), was rejected by the other financial institution.

Rejected transaction
Transaction ID: 	283291090211	 
Reason for rejection	 See details in the report below 	
Transaction Report 	report_283291090211.pdf.exe <http://witheld>  (self-extracting archive, Adobe PDF) 	

13450 Sunrise Valley Drive, Suite 100 Herndon, VA 20171 (703) 561-1100 

2011 NACHA - The Electronic Payments Association

Research indicates that most of these lead to a ZEUS infected website with the goal being to infect your machine with the ZEUS malware. ZEUS is a very dangerous trojan that is designed to steal banking information from you as you log on to your bank accounts. ZEUS contains an advanced keylogger and phones home with your banking login information, username, and password. If you have followed a link in a NACHA message, it is likely that you are infected with ZEUS. You should immediately take steps to rectify the situation. A good antvirus like ESET's NOD32 is an absolute MUST! 

If you haven't received one of these yet, you will. When you do delete it immediately. DO NOT follow the links. NACHA.org will NEVER send an email like this to you. If you receive an email from NACHA, IT IS A SCAM! DELETE IT!