Verify your account scam or real?

[#1]

Hi, just had this, looks like a scam

[#2]

@insussex Obvious scam/phishing.

What actual email address did it come from?

[#3]

Mine came from:

Customer Identity Department <info@schulhaus-gimmelwald.ch>

!!!!

[#4]

Ah, random (false) addresses, then. No surprise, but I'm guessing they all actually originate from the same source.

[#5 · Accepted solution]

@insussex @MartinGoose 

rather than just deleting the message you should report them to the National Cyber Security Centre (NCSC): You can forward phishing emails to report@phishing.gov.uk see https://www.gov.uk/report-suspicious-emails-websites-phishing 

[#6]

@Dan_the_Van Good point - I should have thought of that. Could be interesting to see how many get this obvious spam.

[#7]

@jab1  For a few quid anyone can have a go, latest offers :

-------------------------------------------
Email lists from any country in the world:

Each 100.000 emails = US$ 150
Each 500.000 emails = US$ 350
Each 1 million emails = US$ 500
Each 5 million emails = US$ 750
Each 10 million emails = US$ 1000

Segmented email lists from any country:

Each 10.000 emails = US$ 150
Each 50.000 emails = US$ 350
Each 100.000 emails = US$ 500
Each 500.000 emails = US$ 750
Each 1 million emails = US$ 1000

[#8]

@Champnet I know - not that I am likely to indulge.😀 I'm surprised that they get enough responses to make it worthwhile, but I suppose there must be enough sad individuals.

[#9]

An industry accepted 0.007% positive result  can provide a good income..

[#10]

---

@jab1 wrote:

Ah, random (false) addresses, then. No surprise, but I'm guessing they all actually originate from the same source.

---

Indeed, although the targetting url (where clicking the bad link would take you - view source DON'T CLICK) would be more interesting, and PlusNet should be the ones taking positive action against that domain / hosting or the first legitimate server upstream of it.

[#11]

---

@mwwagain wrote:PlusNet should be the ones taking positive action against that domain / hosting or the first legitimate server upstream of it.

That’s  a big ask, It’s doubtful if any ISP would want to get involved with such a course of action.
Consider that these ‘events’  may have nothing to do with Plusnet.

[#12]

@Champnet Agreed. I would suggest that @Dan_the_Van 's suggestion in post #5 would be a better line of ddefence - they have resources ISP's don't.

[#13]

Following @Dan_the_Van ‘s suggestion would give a sense of having ‘doing something’’. The forwarded email would be of little use without the actual mail server log. I suspect the government  office building an ever growing database containing details of no longer existing email addresses.

[#14]

I would have thought that HMG would be able to target the original sender source from headers, as they should be able to ascertain them, probably more deeply, as I do on the odd occasion I bother checking spam sources?

[#15]

A search provides this:-

How do I report service abuse?
To report a service abuse please email abuse@plus.net or contact our Support Team on 0330 1239 123.

We provide a safe and confidential method of reporting cases of abuse or potential vulnerability. Your report will be treated in the strictest confidence.

Please provide all information you report as clearly and concisely as possible, including appropriate URLs, firewall logs etc. This will help us complete our investigations much more quickly. We've also set out below some guidance on reporting certain types of service abuse.

Reporting email abuse and spamming
In order to investigate your report we must have the full headers of the spam email. Please send header information as plain text, in the body of your email, rather than as an attachment

Hopefully this won't be considered a waste of time