Eva, are you serious? You REALLY think that is real? You need to educate yourself about internet safety. Never, EVER download and open an attachment from an email you receive from an unknown person. I’m ultra suspicious of any attachments on mails from people I know because they get spoofed all the time, too.
The poor grammar in the first sentence should have bee your tip-off.
Look at the full header of the mail. You’ll find it did not come from American Express. Every mail program and webmail program allows you to inspect the email header. You have to inspect the domain carefully, though, as the crooks will have a domain that might look legit. You may find this mail came from am_ex.com or amerexp.com or amexx.com or americanexpres.com.
The best thing to do is forward suspicious mails to the company (AmEx in this case) and let them handle it. All financial services firms have security teams that will appreciate getting this so they can investigate. Look on their web site for the address.
: )
My sister replies to spam!
She started complaining to me one day and she came right out and said she writes them back!