# New Bizzare Email Scam

**URL:** <https://boards.straightdope.com/t/new-bizzare-email-scam/710123>\
**Category:** Miscellaneous and Personal Stuff I Must Share\
**Created:** [January 18, 2015, 2:37am UTC](https://boards.straightdope.com/t/new-bizzare-email-scam/710123 "2015-01-18T02:37:07Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![Charlie\_Wayne](https://avatars.discourse-cdn.com/v4/letter/c/4bbf92/32.png) [@Charlie\_Wayne](https://boards.straightdope.com/u/Charlie_Wayne)\
**Post date:** [January 18, 2015, 2:37am UTC](https://boards.straightdope.com/t/new-bizzare-email-scam/710123/1 "2015-01-18T02:37:07Z")

</div>

I just received an email purportedly (my big word of the day) from Microsoft which I believe is some kind of scam. But I wanted to post it here so that I could warn everyone if it is indeed a scam. Otherwise, I was hoping someone here might be able to examine it and tell me just what it really is.

It is supposedly from Microsoft - which was the big ringing alarm bell to my mind.

The single line in my inbox read as follows: Microsoft account team - Verify your email address - Microsoft account Verify your email address To finish setting up this Microsoft account, we just need

The full message reads as follows:

Microsoft account  
Verify your email address  
To finish setting up this Microsoft account, we just need to make sure this email address is yours.  
Verify [CharlieWayne@gmail.com](mailto:CharlieWayne@gmail.com)  
If you didn’t make this request, click here to cancel.  
Thanks,  
The Microsoft account team

I got a big laugh from “If you didn’t make this request, click here to cancel.”

I wonder how many poor people will actually click on that link and suffer Lord knows what for doing that. Holy Shit!

If they weren’t so stupid, I might have actually fallen for this.  
Please let me know what you think about this? I think it could be a lot more dangerous than most other scam emails.

---

<div class="post-metadata">

**Author:** ![Leaffan](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/leaffan/32/299_2.png) [@Leaffan](https://boards.straightdope.com/u/Leaffan)\
**Post date:** [January 18, 2015, 2:42am UTC](https://boards.straightdope.com/t/new-bizzare-email-scam/710123/2 "2015-01-18T02:42:54Z")

</div>

The informal phrasing alone would make me do a double-take. But yeah, phishing of some sort.

---

<div class="post-metadata">

**Author:** ![running\_coach](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/running_coach/32/15836_2.png) [@running\_coach](https://boards.straightdope.com/u/running_coach)\
**Post date:** [January 18, 2015, 2:45am UTC](https://boards.straightdope.com/t/new-bizzare-email-scam/710123/3 "2015-01-18T02:45:02Z")

</div>

> [@Leaffan](#):
>
> The informal phrasing alone would make me do a double-take. But yeah, phishing of some sort.

Hell, it’s in normal English. That alone might fool people.

---

<div class="post-metadata">

**Author:** ![Musicat](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/musicat/32/20189_2.png) [@Musicat](https://boards.straightdope.com/u/Musicat)\
**Post date:** [January 18, 2015, 2:48am UTC](https://boards.straightdope.com/t/new-bizzare-email-scam/710123/4 "2015-01-18T02:48:06Z")

</div>

Microsoft does not send unsolicited emails. It is a scam, and a highly profitable one, so I’ve heard.

---

<div class="post-metadata">

**Author:** ![EmilyG](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/emilyg/32/364_2.png) [@EmilyG](https://boards.straightdope.com/u/EmilyG)\
**Post date:** [January 18, 2015, 3:31am UTC](https://boards.straightdope.com/t/new-bizzare-email-scam/710123/5 "2015-01-18T03:31:45Z")

</div>

You should look at the email address of the person who sent it. If it’s an email address that doesn’t look like an official Microsoft email address, then it’s probably spam.

---

<div class="post-metadata">

**Author:** ![Leaffan](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/leaffan/32/299_2.png) [@Leaffan](https://boards.straightdope.com/u/Leaffan)\
**Post date:** [January 18, 2015, 3:43am UTC](https://boards.straightdope.com/t/new-bizzare-email-scam/710123/6 "2015-01-18T03:43:09Z")

</div>

Well yeah, and hover over the URL to see what the hell it goes to.

---

<div class="post-metadata">

**Author:** ![Senegoid](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/senegoid/32/6606_2.png) [@Senegoid](https://boards.straightdope.com/u/Senegoid)\
**Post date:** [January 18, 2015, 10:22am UTC](https://boards.straightdope.com/t/new-bizzare-email-scam/710123/7 "2015-01-18T10:22:31Z")

</div>

A lot of scammy spams and e-mails have a variety of links in them, like “Subscribe” and “Unsubscribe” and various buttons for more information and “Terms of Service” and “Contact Us” and so forth.

One common give-away that such an e-mail is a scam is that ALL these links not only go to some unrecognized URL, but they all go to the SAME URL. So if you see a bunch of links, hover over several of them and see about that.

---

<div class="post-metadata">

**Author:** ![Inna\_Minnit](https://avatars.discourse-cdn.com/v4/letter/i/5f8ce5/32.png) [@Inna\_Minnit](https://boards.straightdope.com/u/Inna_Minnit)\
**Post date:** [January 18, 2015, 5:44pm UTC](https://boards.straightdope.com/t/new-bizzare-email-scam/710123/8 "2015-01-18T17:44:53Z")

</div>

Who reads spam email? Seriously, scam or not, if it isn’t a personal email, or notification of ebilling, who opens email from random places?

---

<div class="post-metadata">

**Author:** ![Mangetout](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/mangetout/32/19_2.png) [@Mangetout](https://boards.straightdope.com/u/Mangetout)\
**Post date:** [January 19, 2015, 12:00am UTC](https://boards.straightdope.com/t/new-bizzare-email-scam/710123/9 "2015-01-19T00:00:25Z")

</div>

> [@EmilyG](#):
>
> You should look at the email address of the person who sent it. If it’s an email address that doesn’t look like an official Microsoft email address, then it’s probably spam.

‘From’ addresses in emails are very simple to spoof. A scam email could appear to come from an official Microsoft address.

It’s the URL they want you to click that might give it away, but even then, scammers can sometimes make the URL _look_ legit by setting up nested subdomains called ‘com’ and ‘microsoft’ within their own domain.

---

<div class="post-metadata">

**Author:** ![Inna\_Minnit](https://avatars.discourse-cdn.com/v4/letter/i/5f8ce5/32.png) [@Inna\_Minnit](https://boards.straightdope.com/u/Inna_Minnit)\
**Post date:** [January 19, 2015, 12:04am UTC](https://boards.straightdope.com/t/new-bizzare-email-scam/710123/10 "2015-01-19T00:04:00Z")

</div>

(checks dates) Not a zombie? Huh.

---

<div class="post-metadata">

**Author:** ![Melbourne](https://avatars.discourse-cdn.com/v4/letter/m/b5e925/32.png) [@Melbourne](https://boards.straightdope.com/u/Melbourne)\
**Post date:** [January 19, 2015, 12:34am UTC](https://boards.straightdope.com/t/new-bizzare-email-scam/710123/11 "2015-01-19T00:34:23Z")

</div>

> [@Musicat](#):
>
> Microsoft does not send unsolicited emails. It is a scam, and a highly profitable one, so I’ve heard.

That is spoofing a solicited email, and looks very close to the kind of email MS sends when solicited to do so. Except for the ‘cancel’ button. And that it is (apparently) unsolicited.

---

<div class="post-metadata">

**Author:** ![TBG](https://avatars.discourse-cdn.com/v4/letter/t/c89c15/32.png) [@TBG](https://boards.straightdope.com/u/TBG)\
**Post date:** [January 19, 2015, 12:44am UTC](https://boards.straightdope.com/t/new-bizzare-email-scam/710123/12 "2015-01-19T00:44:45Z")

</div>

> [@EmilyG](#):
>
> You should look at the email address of the person who sent it. If it’s an email address that doesn’t look like an official Microsoft email address, then it’s probably spam.

But keep in mind, even looking like an official MS addy doesn’t mean it is. Could be spoofed, and who knows where the links they’re after you to click go.

---

<div class="post-metadata">

**Author:** ![Dewey\_Finn](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/dewey_finn/32/4222_2.png) [@Dewey\_Finn](https://boards.straightdope.com/u/Dewey_Finn)\
**Post date:** [January 19, 2015, 12:51am UTC](https://boards.straightdope.com/t/new-bizzare-email-scam/710123/13 "2015-01-19T00:51:07Z")

</div>

> [@Senegoid](#):
>
> One common give-away that such an e-mail is a scam is that ALL these links not only go to some unrecognized URL, but they all go to the SAME URL. So if you see a bunch of links, hover over several of them and see about that.

Another giveaway that the email is a scam; it never uses your actual name. For example, if your email address is [CharlieWayne@gmail.com](mailto:CharlieWayne@gmail.com), the email might refer to you as CharlieWayne but never Charlie Wayne, or even Charles Wayne. The legitimate email I receive from my bank or other companies uses my full name.

---

<div class="post-metadata">

**Author:** ![control-z](https://avatars.discourse-cdn.com/v4/letter/c/eada6e/32.png) [@control-z](https://boards.straightdope.com/u/control-z)\
**Post date:** [January 19, 2015, 5:05pm UTC](https://boards.straightdope.com/t/new-bizzare-email-scam/710123/14 "2015-01-19T17:05:56Z")

</div>

> [@Dewey\_Finn](#):
>
> Another giveaway that the email is a scam; it never uses your actual name. For example, if your email address is [CharlieWayne@gmail.com](mailto:CharlieWayne@gmail.com), the email might refer to you as CharlieWayne but never Charlie Wayne, or even Charles Wayne. The legitimate email I receive from my bank or other companies uses my full name.

Yeah for now that is the case, but I expect scammers will eventually put in the time and effort to get their software to extract at least common names from email addresses.

---

<div class="post-metadata">

**Author:** ![Musicat](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/musicat/32/20189_2.png) [@Musicat](https://boards.straightdope.com/u/Musicat)\
**Post date:** [January 19, 2015, 7:35pm UTC](https://boards.straightdope.com/t/new-bizzare-email-scam/710123/15 "2015-01-19T19:35:06Z")

</div>

> [@Melbourne](#):
>
> That is spoofing a solicited email, and looks very close to the kind of email MS sends when solicited to do so.

Bingo! Why do you think that is? An accident?

---

<div class="post-metadata">

**Author:** ![kayaker](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/kayaker/32/441_2.png) [@kayaker](https://boards.straightdope.com/u/kayaker)\
**Post date:** [January 19, 2015, 7:41pm UTC](https://boards.straightdope.com/t/new-bizzare-email-scam/710123/16 "2015-01-19T19:41:54Z")

</div>

Spam, scam, or legit, who reads email from Microsoft?

---

<div class="post-metadata">

**Author:** ![kayaker](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/kayaker/32/441_2.png) [@kayaker](https://boards.straightdope.com/u/kayaker)\
**Post date:** [January 19, 2015, 8:03pm UTC](https://boards.straightdope.com/t/new-bizzare-email-scam/710123/17 "2015-01-19T20:03:36Z")

</div>

> [@kayaker](#):
>
> Spam, scam, or legit, who reads email from Microsoft?

Too late to edit, but after recieving correspondence from Melinda Gates, the above post should read:

Spam, scam, or legit, who, other than Melinda Gates, reads email from Microsoft?

As you were.

---

<div class="post-metadata">

**Author:** ![arseNal](https://avatars.discourse-cdn.com/v4/letter/a/ecae2f/32.png) [@arseNal](https://boards.straightdope.com/u/arseNal)\
**Post date:** [January 19, 2015, 8:19pm UTC](https://boards.straightdope.com/t/new-bizzare-email-scam/710123/18 "2015-01-19T20:19:58Z")

</div>

Am I missing something, what is bizarre and/or new about this?

---

<div class="post-metadata">

**Author:** ![filmore](https://avatars.discourse-cdn.com/v4/letter/f/7993a0/32.png) [@filmore](https://boards.straightdope.com/u/filmore)\
**Post date:** [January 19, 2015, 8:40pm UTC](https://boards.straightdope.com/t/new-bizzare-email-scam/710123/19 "2015-01-19T20:40:35Z")

</div>

I’m guessing that email is sent because they are trying to find valid email addresses. If someone clicks on one of the links, the server knows that the email was valid and the recipient was able to receive it. It may have nothing to do with trying to phish your Microsoft account details. They may be trying to craft an email which will entice people to click in one way or another. I assume this is to create email lists of validated email accounts. A list of valid email address probably sells for more than a list of billions of random emails.

---

<div class="post-metadata">

**Author:** ![IvoryTowerDenizen](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/ivorytowerdenizen/32/17937_2.png) [@IvoryTowerDenizen](https://boards.straightdope.com/u/IvoryTowerDenizen)\
**Post date:** [January 19, 2015, 8:47pm UTC](https://boards.straightdope.com/t/new-bizzare-email-scam/710123/20 "2015-01-19T20:47:22Z")

</div>

> [@control-z](#):
>
> Yeah for now that is the case, but I expect scammers will eventually put in the time and effort to get their software to extract at least common names from email addresses.

I heard an NPR report once that said spammers actually don’t want their scams to be too tricky. They want to reel in on,y the most gullible, who’ll be most likely to fall for their scheme. If they reel in even somewhat skeptical folks they will waste their time interacting with people who won’t pan out. It’s like reverse Darwinian selection.

[Next page](https://boards.straightdope.com/t/new-bizzare-email-scam/710123.md?page=2)
