Plusnet email moving to Greenby

[#1]

PS at 2:51 am (GMT) this morning "Yabby" emailed this:

Here is another fraudulent email.  Why would Social Security's email address be from some guy instead of customer service? I will be reporting to the State Attorney General's office and ask that you process as usual.  Thank you. 

She sent this to 

phishing@irs.gov

so maybe the IRS will be looking into it

[#2]

---

@ColdharbourDave wrote:

Re reporting scammers to the Social Security Administration.on https://secure.ssa.gov/oig/scam/

I would have to report my own email as the contact address for the scammer.

I would have to say I am still in contact with the scammer.

As regards did I supply further information to the scammer other than email address, phone number who can say - Greenby? PlusNet?

THEN I have to provide my full name, date of birth, all contact details including veteran status.

Fimally I have to declare whether I am receiving (US) pension, disability insurance, supplementary security inmcome.

THEN - the coup de gras - create a 5 digit PIN which will be known only to Social Secirity Administration Office of the Inspector General employees only.

Memorize the number and write it down.

I don't actually fancy filling in this form. It provided further information about me without any suggestion it will help cure my problem.

@Baldrick1 what is your view? Would YOU supply all your personal details in this way? 

---

Fair enough, but you can skip most sections or put in 'UK citizen - not relevant'.

You are not in contact with the scammer (ie replied or clicked the link)

You have not supplied 'additional information' (ie replied or clicked the link)

There is no need for your email address in the 'report' section, only the how to contact you, because they know that from addresses will always be forged.

The PIN is so that if they reply you know it is them - not the scammers.

The key is giving them the phish URL in the box for "Did the scammer direct you to call a phone number or click a link?" and full mail header in the free text box of 'Scam details' where they might get to the real sender.

Would it cure your backscatter issues ? No

Would it stop the scammer getting anything more from their scam - probably

Would the scammer get a DOS attack and their bitcoins seized - maybe

[#3]

---

@ColdharbourDave wrote:

@Baldrick1 what is your view? Would YOU supply all your personal details in this way? 

---

No. If I used Plusnet for Emails, I would follow the instructions here: https://www.plus.net/help/legal/service-abuse/ and report the abuse to Plusnet, delete all offending emails and move on in the hope that it would soon stop.

Additionally, I would not advertise my private email address by repeatedly posting it for all to see on a public forum. 

[#4]

---

@ColdharbourDave wrote:

The spam seems associated with the Greenby transfer - as commented on by other users and confirmed by the timing of my own transfer.

---

Most of the user comments are that they they are GETTING more spam addressed TO THEM due to the Greenby spam system being rubbish.

You are getting 'backscatter' (in unusually large amounts) due to a forged from address in spam sent by 'Spammy' in (N Korea / Iran / Belarus / NIgeria)

It suggests an amateurish 'Spammy' as they'd normally use a lot of from addresses not just one - to defeat filters.

You'd hope the FBI would not go on a 'from' address which they know is forged, but some simplistic spam systems might be doing so.

Anyone reporting through channels such as SpamCop would not be reporting your address, PlusNet, nor Greenby.  Those report URL and the initial mail hop IP address.

[#5]

@Baldrick1 thanks for the suggestion.

I got the form filled in - but it fell on the final hurdle.

Only forms with a ZIP code can be accepted.

-------------------------------------------------------------------------------------------

Hopefully one of the scam recipients can help out.

Total bounce backs in Greenby SPAM box currently 1710

Plus numerous others not picked up as spam delivered to Thunderbird.

------------------------------------------------------------------------------------------

Or do you think I should use this?  https://www.fakexy.com/fake-zipcode-generator-us

Personally I think I'm in enough trouble!

[#6]

@mwwagain the spammer(s) are using long lists of recipients.

So I'm not just getting bounces from individuals. Its also from such as [MaxBulk Mailer Delivery Report #78] gb cfewfv

[#7]

@ColdharbourDave From their website

Social Security Administration
Office of Public Inquiries and Communications Support
1100 West High Rise
6401 Security Blvd.
Baltimore, MD 21235

I would use their own Zipcode to submit, if there is a text field, I would add as UK citizen that you have no Zipcode.

[#8]

@ColdharbourDave 

Some-one in the world has spoofed your UK Email address to send out Spam. What do you expect the US SSA to do about it?

[#9]

As it was my suggestion to report, it would be the following:

Takedown of the target URL - so US citizens don't get scammed and force a new spam 'construction' which might not use Dave's address

Takedown of compromised mail server - which stops the outward spam from which Dave is getting backscatter and the odd ill-informed unsavoury reply.

An admittedly very small chance of causing the perpetrator some grief.

[#10]

@Phaeton On screen its a one page form - and the only descriptive part allow about 6 lines in the same width as this PlusNet messsage board.

Do I take it from your suggestion you think it best for me to print out the form and mail it to them at that address?

Or should I write a letter? 

How much is registered post to the USA these days.
Also weren't they refusing post from UK & Europe these days in case we were evading tarffs?

Its a six page form see attached

[#11]

---

@ColdharbourDave wrote:

On screen its a one page form - and the only descriptive part allow about 6 lines in the same width as this PlusNet messsage board.

---

There should be a corner icon or similar at the bottom right of the description box that can be dragged to enlarge it if required, but it should scroll upwards if text is entered beyond the end of a small box.

However, it does seem to have a limit of only 500 characters that can be entered, which is not an awful lot.

[#12]

@ColdharbourDave What's the weather like under the bridge? You're really coming across as a complete & utter **** 

I told you EXACTLY why I sent you the address, so stop being a f'ing child, if you don't want my advice fine, but don't be such a condescending a-hole about it!

[#13]

I don't think @Phaeton did say exactly WHY he provided the SSA address.

Be that as it may from 12:20 pm Greenby incoming emails have been shut off - both normal emails and SPAM box emails.

I have commented to their ticket. Again.

I have to say this Greenby service was not that bad whilst it was running normally. But currently not normal at all. 

Does not help having two problems at once.

[#14]

Hello @pvmb 

I have looked at My Subscription, and "Plusnet email moving to Greenby" is there and the number is 634. Any idea how I "fix" it?

[#15]

---

@penneck wrote:

Hello @pvmb 

I have looked at My Subscription, and "Plusnet email moving to Greenby" is there and the number is 634. Any idea how I "fix" it?

---

Select "Plusnet email moving to Greenby" on the left in the little box, then click on Options top right. You should see a little menu with Delete Selected Subscriptions. Click that, and you should be unsubscribed.

Another way which I use when viewing a thread, at the top right is Thread Options. Click on that and you should see a menu with Unsubscribe if you are subscribed to that thread. If you are not subscribed it will show Subscribe instead.