What is JotForm?
JotForm is a free online form builder which helps you create online forms without writing a single line of code. No sign-up required.

At JotForm, we want to make sure that you’re getting the online form builder help that you need. Our friendly customer support team is available 24/7.

We believe that if one user has a question, there could be more users who may have the same question. This is why many of our support forum threads are public and available to be searched and viewed. If you’d like help immediately, feel free to search for a similar question, or submit your question or concern.

  • Profile Image

    Your system is being used by phishers.

    Asked by Rob Mousley on March 15, 2012 at 08:11 AM

    Like everyone else on the planet I get phishing emails every day.

    In the latest, I can see that they're using your system to capture victims' information.

    The phishing email purports to come from my bank and has an html attachment that has a form in it.  The form is at:

    <form class="jotform-form" action="http://submit.myjotform.com/submit/20741734145550/" method="post" name="form_20741734145550" id="20741734145550" accept-charset="utf-8">

      <input type="hidden" name="formID" value="20741734145550" />

      <div class="form-all">

        <ul class="form-section">

          <li class="form-line" id="id_1">

            <label class="form-label-left" id="label_1" for="input_1"> Cell Number: </label>

            <div id="cid_1" class="form-input">

              <!--webbot bot="Validation" b-value-required="TRUE" i-maximum-length="10" --><input type="text" class="form-textbox" id="input_1" name="q1_11" size="20" maxlength="10">



          <li class="form-line" id="id_3">

            <label class="form-label-left" id="label_3" for="input_3"> Cellphone 

            Banking PIN: </label>

            <div id="cid_3" class="form-input">

              <!--webbot bot="Validation" b-value-required="TRUE" i-maximum-length="5" --><input type="password" class="form-textbox" id="input_3" name="q3_2" size="20" maxlength="5">



          <li class="form-line" id="id_4">

            <label class="form-label-left" id="label_4" for="input_4"> Enter Card 

            Type( Credit,Debit,Cheque Card): </label>

            <div id="cid_4" class="form-input">

              <input type="text" class="form-textbox" id="input_4" name="q4_3" size="20">



          <li class="form-line" id="id_5">

            <label class="form-label-left" id="label_5" for="input_5"> Enter the 

            last 4 digits printed on your ATM debit, cheque or credit card:&nbsp; </label>

            <div id="cid_5" class="form-input">

              <!--webbot bot="Validation" b-value-required="TRUE" i-maximum-length="4" --><input type="text" class="form-textbox" id="input_5" name="q5_4" size="20" maxlength="4">



          <li class="form-line" id="id_6">

            <label class="form-label-left" id="label_6" for="input_6"> Enter your 

            card PIN: </label>

            <div id="cid_6" class="form-input">

              <!--webbot bot="Validation" b-value-required="TRUE" i-maximum-length="4" --><input type="text" class="form-textbox" id="input_6" name="q6_5" size="20" maxlength="4">



          <li class="form-line" id="id_2">

            <div id="cid_2" class="form-input-wide">

              <div style="margin-left:156px" class="form-buttons-wrapper">

                <button id="input_2" type="submit" class="form-submit-button">






          <li style="display:none">

            Should be Empty:

            <input type="text" name="website" value="" size="20">




       <input type="hidden" id="simple_spc" name="simple_spc" value="20741734145550" />

      <script type="text/javascript">

      document.getElementById("si" + "mple" + "_spc").value = "20741734145550-20741734145550";




    Best take these people down and ideally hand them to law enforcement.

  • Profile Image
    JotForm Support

    Answered by Goldo on March 15, 2012 at 08:15 AM

    We have now disabled the form and suspended the account. Thank you for reporting.