[kwlug-disc] Trace spam email back to source

[Khalid Baheyeldin]

Yes, it is sad ...

A while back, I started putting examples of scam emails on my web site, as
a warning.

https://baheyeldin.com/technology/technology-in-society/internet-scams-and-fraud.html

The sadder thing is that people mistake my site for other people, from
Cairo hotels, the Library of Alexandria, all the way to the Sultan of Brunei

https://baheyeldin.com/technology-in-society/mistaken-identity-how-some-people-confuse-my-site-for-others.html

I got many emails about people who have actually paid scammers for lottery
winnings or other scams, and asking what to do next. Convincing them that
they have been a victim of a scam is painful. Many of them are from poor
countries and have borrowed to pay insurance/bank/taxes/courier fees in the
hope of getting more money ...

With social media, and friends posting things without basic fact checking,
it has become even worse, and more of a futile effort ... not outright
money scams, but scams in other aspects of life ...

On Tue, Jun 30, 2020 at 11:10 AM Yas Adem <yadem.ethio at gmail.com> wrote:

> Thanks guys. I won't spent much time on it... i was just curious.. lots of
> old people get scams on this and really sad.
>
> Regards
>
> Yasin
>
> On Tue, Jun 30, 2020, 11:00 AM Khalid Baheyeldin, <kb at 2bits.com> wrote:
>
>> The From address can be forged, so it is not necessarily that his email
>> is hacked.
>>
>> If you look into the email headers, which in Gmail are under 'Show
>> Original', they may give a clue as to what server it came from.
>>
>> But don't spend too much time on it, since it can be anything.
>>
>> On Tue, Jun 30, 2020 at 10:51 AM Yas Adem <yadem.ethio at gmail.com> wrote:
>>
>>> Hey Guys,
>>>
>>> i just received an email from friend i know and interestingly reply-to
>>> is different email address. This email is basically asking to purchase
>>> Google Play pay gift cards for him as he is in hospital helping relative,
>>> in short i believe his email has been hacked.  I am not expert on this
>>> butis there a way to trace back to thier source ip.. etc..
>>>
>>>
>>> Regards
>>> Yasin
>>>
>>>
>>> _______________________________________________
>>> kwlug-disc mailing list
>>> kwlug-disc at kwlug.org
>>> https://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org
>>>
>>
>>
>> --
>> Khalid M. Baheyeldin
>> 2bits.com, Inc.
>> Fast Reliable Drupal
>> Drupal performance optimization, hosting and consulting.
>> "Sooner or later, this combustible mixture of ignorance and power is
>> going to blow up in our faces." -- Dr. Carl Sagan
>> _______________________________________________
>> kwlug-disc mailing list
>> kwlug-disc at kwlug.org
>> https://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org
>>
>

-- 
Khalid M. Baheyeldin
2bits.com, Inc.
Fast Reliable Drupal
Drupal performance optimization, hosting and consulting.
"Sooner or later, this combustible mixture of ignorance and power is going
to blow up in our faces." -- Dr. Carl Sagan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://kwlug.org/pipermail/kwlug-disc_kwlug.org/attachments/20200630/a5c9de8f/attachment.htm>