64 ms·
It's just a numbers game. There are suckers born every minute. There are an unbelievable number of accountants out there who couldn't put together these obvious
by rwmurrayVT 11y ago
It's just a numbers game. There are suckers born every minute. There are an unbelievable number of accountants out there who couldn't put together these obvious signs.
A phone call from a stranger and an email from an account that has her name in it... it was probably CEO@imstealingyourmoney.ru
- Retric 11y agoIt's easy to fake from address. So, it's going to be CEO@yourconpany.com
- rwmurrayVT 11y agoWhat major email service would allow that email to pass through into the accountant's inbox with no warning? I guess if you're stupid enough to transfer the money, you're stupid enough to ignore the warnings on the email. This is a serious question just as a FYI.
- Mahn 11y agoWhy would an email service know that conpany.com is a scam address of company.com? If they were spoofing addresses then it may be detected, but if they are using a valid domain with a random letter changed you are out of luck unless you have common sense and pay a lot of attention.
- joveian 11y agoThere are many things that can be done to prevent this and likely often are. I've set my mail client to color the subject line of messages differently if the from address is in my addressbook or not. However, I don't know how common it is for mail clients to do things like that by default so there may be many people who don't have any obvious sign that something is wrong. ETA: I think some slight variations on the domain name could also be filtered out completely, but I'd guess it would be hard to catch all of those that it is difficult to visually detect without also filtering legitimate mail.
- positr0n 11y agoAgreed with my sibling post, that email would probably get flagged and dropped as spam before it got to the accountant. I've seen an email like this aimed at the company I work for and it was something like ceo@yourrcompany.com (just one letter was doubled from the real domain).
- Retric 11y agoI think you both missed: Conpany vs Company Which just demonstrates how easy it is to get this past people. PS: That or you where just assuming that was an error on my part ops. I did briefly correct it before realizing it was a better example.
- brazzledazzle 11y agoIf it was flagged as spam it would probably be due to a misconfiguration on the fraudster's end. There might be some anti-spam systems that might be looking for this now but I've yet to see it listed as a feature.
- deleted 11y ago[deleted]