First Direct Switch to Paperless email

EachPenny

RG2015 wrote: »

Hi EachPenny,

I have heard about scammers presenting a 'genuine' phone number on a phone but not an email address. I received an email yesterday from "noreply@email.firstdirect.com" advising me that my statement was available to view. I would always trust that this was a genuine email address but would be interested to know how this could be presented by a scammer.

As takman says.

Fingerbobs

takman wrote: »

When you send an email it is extremely easy to choose what email address you want it to look like it comes from. If you search on Google you will easily find many sites where you simply fill out the too and from addresses to send an email like this.

You should never trust an email based purely on the address it came from.

Or just change the From: address in your email program to anything you like, and off you go.

It's getting slightly more difficult these days with the gradual adoption of DMARC validation, but until that's universal it remains very easy to spoof your sending email address.

maxximus75

If you are worried don't click on the email and just go into your first direct account and change these settings to paperless, manually!

RG2015

Fingerbobs wrote: »

Or just change the From: address in your email program to anything you like, and off you go.

It's getting slightly more difficult these days with the gradual adoption of DMARC validation, but until that's universal it remains very easy to spoof your sending email address.

I have always understood that if you hover your cursor over the displayed email address that you would see the true email address.

Are you saying that anyone can send an email with the address, for example, of "important@information.firstdirect.com" and that the recipient would be none the wiser?

OceanSound

maxximus75 wrote: »

If you are worried don't click on the email and just go into your first direct account and change these settings to paperless, manually!

Did this soon after opening account few months ago. I set statements to electronic for each account (see pic below) and I've been receiving electronic statements ever since.

That's how come I'm asking if I should've received such an email at all.
because the email say's 'We've notices that you haven't fully switched your first direct bank statements to paperless yet'. That's incorrect. I HAVE SWITCHED.
To be fair, I can't get my head round the fact there there are people out there who are so lazy that they'd rather click on a link sent via email to set their paperless settings, as opposed to logging on to internet banking and doing it manually. Perhaps the 'No time'' chesnut?

OceanSound

RG2015 wrote: »

I have always understood that if you hover your cursor over the displayed email address that you would see the true email address.

Are you saying that anyone can send an email with the address, for example, of "important@information.firstdirect.com" and that the recipient would be none the wiser?

They can, that's how come we shouldn't rely just on the senders address to confirm that its' genuine. Use the other indicators as well.

email protocols like simple mail transfer protocol (SMTP) is not called that for no reason. It's simple, cheap, easy to setup, but lacking security features. Anyone with a bit of know-how can spoof the senders address. If you really wanna have some fun you can send an email to a friend as if it's originating from the WHite House.

RG2015

Yes, but can you spoof an email address that already exists?

OceanSound

RG2015 wrote: »

Yes, but can you spoof an email address that already exists?

it's childsplay.

check the headers and you can work out the real sender.

RG2015

OceanSound wrote: »

it's childsplay.

check the headers and you can work out the real sender.

Thanks, although I do not understand enough about IT to work out anything from what you have posted.

Does this mean though that you were able to work out the real sender on your original email or have I misunderstood your post completely?