# Latest email scam starts with "Start with Trust"

**URL:** <https://boards.straightdope.com/t/latest-email-scam-starts-with-start-with-trust/636729>\
**Category:** The BBQ Pit\
**Created:** [October 4, 2012, 6:43pm UTC](https://boards.straightdope.com/t/latest-email-scam-starts-with-start-with-trust/636729 "2012-10-04T18:43:57Z")\
**Posts on this page:** 9\
**Page:** 2

<div class="post-metadata">

**Author:** ![dropzone](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/dropzone/32/7515_2.png) [@dropzone](https://boards.straightdope.com/u/dropzone)\
**Post date:** [October 6, 2012, 2:14am UTC](https://boards.straightdope.com/t/latest-email-scam-starts-with-start-with-trust/636729/21 "2012-10-06T02:14:08Z")

</div>

> [@slalexan](#):
>
> Whoa! Isn’t that a weird way to end a business email? I don’t know this Anni person and I don’t think I want them to be faithfully mine. Is this what you use if you are having an office affair? This alone would make me delete the email with disgust.

I dunno. Is she hot?

---

<div class="post-metadata">

**Author:** ![curlcoat](https://avatars.discourse-cdn.com/v4/letter/c/ea5d25/32.png) [@curlcoat](https://boards.straightdope.com/u/curlcoat)\
**Post date:** [October 6, 2012, 3:37am UTC](https://boards.straightdope.com/t/latest-email-scam-starts-with-start-with-trust/636729/22 "2012-10-06T03:37:32Z")

</div>

Wow, I guess it’s a good thing I’m 1) on a Mac, 2) don’t click links in emails and 3) don’t have a lot of money! 😉

---

<div class="post-metadata">

**Author:** ![digs](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/digs/32/14889_2.png) [@digs](https://boards.straightdope.com/u/digs)\
**Post date:** [October 6, 2012, 4:28am UTC](https://boards.straightdope.com/t/latest-email-scam-starts-with-start-with-trust/636729/23 "2012-10-06T04:28:39Z")

</div>

> [@Regallag\_The\_Axe](#):
>
> Only on the SDMB could I try to be a snarky bastard and end up learning something instead.

Fun, ain’t it? I’ve been doing that non-stop since I got here. Snark, rinse, repeat.

---

<div class="post-metadata">

**Author:** ![A\_qui\_profite\_le\_crime](https://avatars.discourse-cdn.com/v4/letter/a/ebca7d/32.png) [@A\_qui\_profite\_le\_crime](https://boards.straightdope.com/u/A_qui_profite_le_crime)\
**Post date:** [October 6, 2012, 4:46am UTC](https://boards.straightdope.com/t/latest-email-scam-starts-with-start-with-trust/636729/24 "2012-10-06T04:46:13Z")

</div>

> [@kferr](#):
>
> The malware is typically a key-logger and some code that watches your internet activity. When you log into your online banking it captures your userid and password and sends it to a server the bad guys control. They then log into your online banking and empty your account.
> 
> Another version will install an invisible plugin into your browser to steal the session cookie created when you log into your account. The bad guys then use the cookie to create a duplicate session and empty your account.

But don’t all banks now have some sort additional offline confirmation system prior to executing any money transferring transaction? I’ve used three banks for my personal banking needs and:

- one sent a randomly generated security pin on my cell phone that I needed to insert before it executed any requested payment order
- the other two provided me with random pin generators devices, linked to my account, that generated said pins whenever I needed to execute a payment. One actually needed three of these random pins. One when logging in. One when requesting the transfer and one when confirming the transfer.

Sure, time-consuming, but felt it was worth it. Unless you tell me that’s just an inconvenience to hackers and not a real stumbling block in which case I’ll be seriously depressed.

---

<div class="post-metadata">

**Author:** ![Musicat](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/musicat/32/20189_2.png) [@Musicat](https://boards.straightdope.com/u/Musicat)\
**Post date:** [October 6, 2012, 7:45am UTC](https://boards.straightdope.com/t/latest-email-scam-starts-with-start-with-trust/636729/25 "2012-10-06T07:45:45Z")

</div>

> [@A\_qui\_profite\_le\_crime](#):
>
> But don’t all banks now have some sort additional offline confirmation system prior to executing any money transferring transaction? I’ve used three banks for my personal banking needs and:
> 
> - one sent a randomly generated security pin on my cell phone that I needed to insert before it executed any requested payment order
> - the other two provided me with random pin generators devices, linked to my account, that generated said pins whenever I needed to execute a payment. One actually needed three of these random pins. One when logging in. One when requesting the transfer and one when confirming the transfer.

I can transfer from my bank account to my paypal account with only the resources at my computer. With the same data (name, password, possibly a secret question/response), a program in my computer could do the same, and the bank doesn’t know the difference. All it knows is it got what it expected.

Other transfers, I don’t know. The procedure you use sounds like a good one, but if my bank sent a PIN to my cellphone, the chances are I wouldn’t get it, as cellphone coverage is poor in my area.

---

<div class="post-metadata">

**Author:** ![BigT](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/bigt/32/12044_2.png) [@BigT](https://boards.straightdope.com/u/BigT)\
**Post date:** [October 10, 2012, 7:26pm UTC](https://boards.straightdope.com/t/latest-email-scam-starts-with-start-with-trust/636729/26 "2012-10-10T19:26:07Z")

</div>

> [@Musicat](#):
>
> That’s the whole point of the malware. If you entered your bank name, number or password EVER in your computer, it might still be there, stored in plaintext, or easily decoded, either in RAM or in a file, possibly a browser work file. That’s what it’s looking for.

Not just before, but after, seeing as you won’t know you’re infected.

---

<div class="post-metadata">

**Author:** ![Really\_Not\_All\_That\_Bright](https://avatars.discourse-cdn.com/v4/letter/r/e8c25b/32.png) [@Really\_Not\_All\_That\_Bright](https://boards.straightdope.com/u/Really_Not_All_That_Bright)\
**Post date:** [October 12, 2012, 4:53pm UTC](https://boards.straightdope.com/t/latest-email-scam-starts-with-start-with-trust/636729/27 "2012-10-12T16:53:51Z")

</div>

> [@slalexan](#):
>
> Whoa! Isn’t that a weird way to end a business email? I don’t know this Anni person and I don’t think I want them to be faithfully mine. Is this what you use if you are having an office affair? This alone would make me delete the email with disgust.

“Yours faithfully” (or the reverse) is the standard close for business letters addressed to people whose names you don’t know in most of the English-speaking world. Fowler’s Modern English Usage never really caught on in the US, which is why Americans chuckle when they see it.

---

<div class="post-metadata">

**Author:** ![Musicat](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/musicat/32/20189_2.png) [@Musicat](https://boards.straightdope.com/u/Musicat)\
**Post date:** [October 12, 2012, 5:08pm UTC](https://boards.straightdope.com/t/latest-email-scam-starts-with-start-with-trust/636729/28 "2012-10-12T17:08:49Z")

</div>

> [@Really\_Not\_All\_That\_Bright](#):
>
> “Yours faithfully” (or the reverse) is the standard close for business letters addressed to people whose names you don’t know in most of the English-speaking world.

Yeah, that phrase doesn’t seem odd to me. But most of the paragraph is mildly tortured English: “Better Business Bureau has got…”, “Please open this problem…”, “in respect of their dealings with you…”.

---

<div class="post-metadata">

**Author:** ![Yllaria](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/yllaria/32/3452_2.png) [@Yllaria](https://boards.straightdope.com/u/Yllaria)\
**Post date:** [October 12, 2012, 6:20pm UTC](https://boards.straightdope.com/t/latest-email-scam-starts-with-start-with-trust/636729/29 "2012-10-12T18:20:38Z")

</div>

> [@Really\_Not\_All\_That\_Bright](#):
>
> “Yours faithfully” (or the reverse) is the standard close for business letters addressed to people whose names you don’t know in most of the English-speaking world. Fowler’s Modern English Usage never really caught on in the US, which is why Americans chuckle when they see it.

It’s really no odder than Sincerely Yours, which used to be common in the US.

[Previous page](https://boards.straightdope.com/t/latest-email-scam-starts-with-start-with-trust/636729.md?page=1)
