Fucking scammer motherfuckers

Nope. I only use the phone for the GPS feature or to ::gasp:: make phone calls.

Wait, what? Phones can make calls??

Well, I had a hell of a time gluing that dial to it.

Hahaha! There’s an app for that, of course:

There is a cell phone for that: This rotary cell phone actually works - and you can buy it, too - Digital Trends

“You will be redirect”

Failure to use the past participle is a dead giveaway. For now. If this keeps on, in another hundred years the English past participle will have vanish.

She has close her eyes.
She has give up hope.

Good catch. Didn’t see that.

I was tempted to click on the link, as I was curious to see what the scammer’s website look like. But decided not to; too risky.

Browserling offers a sandbox environment to run such things in. You only get 3 minutes if you don’t have an account (paid) but it’s enough to get a peek.

Wouldn’t it be easier to check the email address it comes from? I get those spams also, and it is pretty clear they are not coming from Chase.

The From: line of an email is set by the sender, and can be set to any email address they want. The reason scams don’t all come from security@chase.com is because of things called SPF and DMARC. You’re email provider will require that incoming messages have SPF and DMARC.

Unfortunately SPF and DMARC are things that are controlled (in this example) by Chase. Chase says “these IP addresses can send messages claiming to be from Chase” and DMARC says “reject any messages that don’t pass SPF.” So if the scammer sets the email to be From: security@chase.com it will be rejected before you even see it.

However, Chase can setup SPF and DMARC too permissively by saying “any IP addresses can send messages claiming to be from Chase” or “you should accept messages claiming to be from Chase even if they don’t pass SPF”. In this case your email provider will delivery the scam message to you, because SPF and DMARC are valid, Chase just set them at a level that is not useful to prevent scams. Chase probably has better IT than this, but does absolutely every company you work with?

If you look at full headers, you can tell if the address is spoofed. More importantly, though, if you mouse over the link you can be sure it is, since the link is where the danger is.
All much easier than many email addresses. If I had that many, I’d never be able to check each one every week or so looking for bills.

You can add an identifier to a Gmail address: myobviouslyfakeid+Chase@gmail.com, which can be used to sort mail (and figure out who is selling your address). I have run into places that won’t allow the ‘+’ in an email address, so it doesn’t always work.

Works for snail mail also. I have no middle initial, but some companies add one for some reason, and I can trace who sold my address by the appearance of an initial.
I know people who do that deliberately
Back in the '70s the MIT Science Fiction Society would get junk mail addressed to
Mr. T Science
Fiction Society.

Kind of like tracing relationships though mutations on junk DNA.

Absolutely, but show me one single IOS/IPAD email program that will show full headers. It’s often a major hurdle to even show the <address@example.com> of the email address instead of just the "Name" portion.

And no “but I don’t use a phone to check me email.” Living in the 90s is no way to get along in the world.

When I lived in the Federated States of Micronesia, pre-internet era, a scammer snail-mailed a letter to the Congress Library. The salutation was “Dear Mr. Library.”

I was very sad that the body of the letter did not begin with “May I call you ‘Congress?’”

Years ago, I registered a motorcycle in Utah and they got my middle initial wrong.

I could tell that was the source of a lot of junk mail.

That’s a copyright trap!