Weird mail from EwalletXpress (possibly)

[chayton]

I got this mail today and I don't know what to make of it....

Dear (MY NAME),
Please note that you have $50 for use in your eWallet Xpress account.

Please contact our Customer Service department for further details and refer to your code : EWALLET50

There's a link that that starts with h ttp://r20.rs6(dot)net (and a whole string of numbers) but it redirects to h ttps://www.ewalletxpress(dot)com/svc/app?obj=home&sub=supp
Is this a phishing mail? But the site is ewalletxpress. Seems odd to me, what do you guys think?

[vinylweatherman]

I got this mail today and I don't know what to make of it....



There's a link that that starts with h ttp://r20.rs6(dot)net (and a whole string of numbers) but it redirects to h ttps://www.ewalletxpress(dot)com/svc/app?obj=home&sub=supp
Is this a phishing mail? But the site is ewalletxpress. Seems odd to me, what do you guys think?

1) Is this the correct balance that was in your account when it was frozen. If the email is genuine, the figure should be accurate.

2) The code "EWALLET50" looks like a bonus code that a casino might send, rather than something an eWallet would send.

In any case, how could you use this money without a merchant able to accept it.

The link may look genuine, but it may not be, and it could take very close examination of the site to find out.

The best bet would be to type the URL for the ewalletxpress home page into the browser, and then log in as you normally would and check whether this $50 is there, or even whether you can log in.

It is also possible that EWX have allowed their URL to lapse, and it has been reregistered by someone intent on using it in a fraudulent manner by trying to get EWX customers to supply some of their personal data in order to access an account that has usable money in it.

[vinylweatherman]

Very odd.

Going to the EWX site by typing in it's URL shows the EWX site seemingly open for registration. At the top is a banner ad for "Lucky Canuk" casino, which seems to encourage you to click and use your bonus code. Maybe this is the code in the email.

Lucky Canuk is a betsoft casino licenced in Curacao. The laws of the UK govern the participation according to the terms, and their certificate shows as being the general Betsoft one licensed by the AGCC. They also have the "gamcare" logo on their site.

Well, if it walks like a duck, quacks like one, it probably is one, and probably a "rouge" coloured one at that.

Someone seems to be using the EWX domain to have added this banner, yet EWX have gone AWOL with everyone's money, and I very much doubt whether Lucky Canuk, or any other casino, actually has EWX as a deposit option.


It almost looks as though a rogue affiliate has managed to get hold of the EWX domain, and is using it as a "passing through" point for his spam emails that are effectively promoting Lucky Canuk casino, which is clearly being aimed at Canadian customers, who would also have lost money in EWX.

Given all the odd goings on over the original incident, it could even be an "inside job" run by ex EWX staff who somehow "stole" the access details for the URL when the company was shut down, and who are now using it for their own profit.

It is certainly worth further investigation, just in case it opens a trail to the missing monies.

[SlotsLover]

Here is a tiny bit of good news. For the longest time, when I went to "live help" at EWX, I got an error message. Now, at least, I get the "leave a message" box. I just signed in and saw the Canuck banner as well.

Who knows, but this should be investigated more deeply.

[chayton]

Who could look into it?

[vinylweatherman]

Who could look into it?

Someone from Canada could "go through the motions" of registering there to see if the process actually works. In the past, it didn't. Someone with an empty account could see if they can log in.

The leave a message facilty has been there before, but none were ever responded to after the support staff finally left their desks.

All "updates" relating to the site have been removed, and all that remains is one that more or less indicates "business as usual". The FAQ seems to have been stripped of everything from sections other than the players. Merchant login is still there, but nothing else, no FAQ, guide, new merchant sign-up, etc.

It looks like a "shell" site, with very little behind it. The only thing that seems to work is the banner, it does go through to the casino.

[chayton]

I was nervous about entering my old account username/password on that site cause I'm not sure what's going on with it. If anyone's interested in trying to sleuth this out and if you'd like the email I received, let me know via PM and I'll forward it to you.

[chayton]

That Canuck casino doesn't say anything in the terms about being Canada only or disallowing any countries (except if it's illegal to gamble) I find that kind of odd too. To deposit you do a direct deposit through your bank, to withdraw, you have to send them an email and wait for 7-10 business days.

The whole thing smells fishy to me.

[XOXOXOXOXOX]

I received the same email too and logged in but without using the link, just going to the site directly. Saw the regular message
"Please be advised that due to current technical issues we are experiencing, deposits into Canadian wallet accounts are temporarily out of service." and no 50 bucks

[chayton]

If this is some affiliate for the casino that just took over the domain, I'm wondering if they're just mass mailing everyone on gambler lists that lives in Canada, or did they somehow get hold of the EWX database so they know who had accounts there...?