Re: Fake paypal email triggers -7.5 USER_IN_DEF_DKIM_WL From: address is in the default DKIM
"Anne P. Mitchell, Esq." <[email protected]>
| Newsgroups | gmane.mail.spam.spamassassin.general |
|---|---|
| Message-ID | <[email protected]> |
> On Jan 29, 2025, at 9:23 AM, Alan via users <[email protected]> wrote: > > As far as I can tell, they're valid notifications from PayPal, and probably useful for legitimate purposes. What the messages are doing is attempting to trigger sufficient anxiety that the recipient calls the phone number in the message, which connects them to a scammer. It will get worse, and then hopefully the folks at PayPal will find a way to eliminate it (they could refuse to send a phone number in the message, for example). One thing I have noted that they all have in common (so far at least) is that the 1 prefix of the phone number is actually an uppercase i (so "I" not "1"), so that spam filters can identify the scams by filtering on "Call-I(" Anne -- Anne P. Mitchell, Esq. Email Law & Policy Attorney Legislative Advisor Author: Section 6 of the CAN-SPAM Act of 2003 (the Federal email marketing law) CEO Institute for Social Internet Public Policy Board of Directors, Denver Internet Exchange Dean Emeritus, Cyberlaw & Cybersecurity, Lincoln Law School Prof. Emeritus, Lincoln Law School Chair Emeritus, Asilomar Microcomputer Workshop Counsel Emeritus, eMail Abuse Prevention System (MAPS)