🚨 Scam Alert: Fake Capital One “Payment Received” Email

Generic greeting – It just says “amir,” instead of using your full name as banks normally do.
Urgency and fear tactic – It claims your payment is “on hold” until you Authenticate Payment. Scammers often create urgency so you’ll click without thinking.
Suspicious button – The big green Authenticate Payment button is designed to trick you into clicking. It likely leads to a fake site that steals your login info.
Typos / formatting issues – For example, there’s an extra colon after “clicking the button below:.” Professional institutions rarely send emails with mistakes like this.
Unusual request – Banks do not require you to “authenticate” payments by clicking email links. You normally just see deposits in your account.

Do NOT click any links or buttons in this email.
Do NOT reply to it.
Report the email by forwarding it to abuse@capitalone.com or reportphishing@apwg.org.
Delete it after reporting.
If you already clicked or entered details, immediately log into your real Capital One account (by typing capitalone.com directly in your browser) and change your password.
Consider enabling two-factor authentication (2FA) for extra protection.

They will address you by your full legal name, not just “amir.”
Legitimate emails never ask you to click a link to “authenticate” or “unlock” deposits.
You should always be able to confirm activity by signing in at capitalone.com or through the official Capital One Mobile app.

⚠️ This is a classic phishing attempt — the safest move is to report and delete it.