Renewal of W-8BEN Certification Phishing Scam
"Our compliance team has identified that your certification has expired or will soon expire. To remain in compliance, you must renew your documentation immediately". The consequences of failing to renew will result in witholding taxes. That as it may be but the email coming from an email address welcome@zykxdj.com seems suspicious.
E-Mails received:
Date: 30/10/2025, 12:31
From: eToro welcome@zykxdj.com
To: [Name and E-Mail address redacted]
Subject: Federal Tax Documentation Advisory — Renewal of W-8BEN Certification
Notes: The sender email address domain was only registered in August 2025. The Click-through website address: https://cxofiul.com/?token=q2PD5AohsdD6edjPY23U. A domain name that was only registered a few hours earlier on 30th October 2025.
Recommendation:
Just delete the e-mail, don't click on any links.
Michael Fowler
Other articles by Michael Fowler:
DVLA Phishing Scam - Michael Fowler
On first glance this email appears to have come from DVLA the Driver Licencing Authority in the UK but examine the sender email address, inconsistencies in the email and the click through web address and this is a scam email designed to capture your bank debit card details... more >>
Interactive Brokers Phishing Scam - Michael Fowler
I never cease to be amazed at the range of legitimate companies scammers choose to imitate to lure their customers into entering their personal details into a fake phishing website... more >>
First Direct Phishing Scam - Michael Fowler
Aimed at First Direct bank customers who perhaps are in a hurry and don't look at sender email address or click though web address... more >>