Spoof email return addresses
I did a search here but didn't really find an answer - so here goes...
Emails usually come with a return address for replies - but scam emails tend to use a false return address (sometimes even the same address as the recipient!!) Is it possible for Thunderbird to show the sender's actual address? i.e. where the reply would go if I did reply?
The reason I'm asking is that I've started getting emails purporting to come from a couple of elderly neighbours when in fact they aren't actually from them.
All Replies (3)
You could look in the source: Select email click on 'More' and select 'View Source' OR via Menu icon > View > Message Source OR use keyboard 'Ctrl'+'U'
Look for the 'Received' header, the one at the top will be the last one - received onto server that looks after your account. So you need to work down until you see the the Received that is closest to the FROM, SUBJECT, TO DATE headers.
Sometimes the Source View also includes a 'Reply-to' header which may be different to whom it alledges to be from.
But in all honesty - do not attempt to reply because that will confirm your email address is real and working and therefore can be abused.
Please also be aware that there may be links in the email which do not go to where they say. Hover (do NOT click) over a link and look in the bottom Status bar and it will tell you the real link.
Please make sure you do not allow remote content to display. Remote content can be hidden in an image which is so small you cannot see it. More info on Remote Content.
Please tell your friend if someone is abusing their email address. At least they can then warn their friends and relatives.
Many thanks for all that... I compared the spoof email with one of their genuine ones and the Received info is totally identical - so it looks like the spoofer has simply guessed their password. They've an ancient Hotmail account which was probably set up in the days when simplistic passwords were commonplace :-(
I'll advise them to ditch this email address and set up a new one somewhere with a more secure password!
johne53 said
I'll advise them to ditch this email address and set up a new one somewhere with a more secure password!
Perhaps just suggest they change their password. There is nothing wrong with the email address and they probably have a lot of family and friends that send mail to them at that address.