Today’s phishing email is a variation of the classic Nigerian Prince scam, which we have been luck enough to had a really good example here before. The basic hook is greed. The Nigerian Prince (phisher) asks you (phish) to help him move massive amounts of money by depositing them into your account and you then send him his share (which is the only real money: yours) before your bank checks if the transfer is real. In this variation, the phisher is offering you a easy but high paying job, which also requires you to believe they send you money so you will in turn send your hard-earned cash as commission.
Date: Nov 27, 2025, 02:50 From: support@vitalnourishlife.com Subject: Important: Our Proposal Offer( Accounts Receivable Position) To: Clueless Phish <cluelessphish@phishphillet.com> Hello, On behalf of PT. Nico Metal Indonesia, I would like to offer you the opportunity to represent our company in the United States and handle our Accounts Receivable in North America. This is a part-time position. The position does not require travel or clients visits; everything can be handled by phone and email. The compensation is as follows: Monthly salary: $5,000 10% commission on each outstanding invoice Tax deduction for collected amounts: 20% After each collection, our company will be transferred the net 70% of the payment, after a 30% deduction is applied. Upon your response to this email confirming your acceptance of our offer, I will send you the service agreement/contract between you and our company. I would be pleased to hear from without delays to discuss this proposal in more detail. Regards, PT. Nico Metal Indonesia Nico A. Nego Director JL. Kran 3 Dalam No 7A 06/05, Gunung Sahari Selatan, Kemayoran, Jakarta Pusat 10610 Indonesia Email : nico.nego@nicnegometalworks.com
What are the dead giveaways this is a phishing email
-
The email in the
From:field,support@vitalnourishlife.comhas absolutely nothing to do with the one in the body of the email,nico.nego@nicnegometalworks.com. The domainnicnegometalworks.comsure does not look likevitalnourishlife.com. -
If you want to do some further investigating, you will find the domain
nicnegometalworks.comwas registred/created in the 21st of September of this year (2025). That usually makes me blink, so I checked their website (yes they do have one, but I was very careful checking it) which claims company’s website has been around since 2021. My math may not be that great but 2025 is not 2021. -
Why would such company be contacting you for this offer?
-
The English is not particularly good.
-
As mentioned before, the EZ-Money hook is strong: work part time, making $5000/month + commission without any required skills (accounts receivable position with a contract ready to be signed)? Yeah right.