# Phishers aren't even trying anymore

**URL:** <https://boards.straightdope.com/t/phishers-arent-even-trying-anymore/839135>\
**Category:** Miscellaneous and Personal Stuff I Must Share\
**Created:** [August 23, 2019, 11:13pm UTC](https://boards.straightdope.com/t/phishers-arent-even-trying-anymore/839135 "2019-08-23T23:13:13Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![dropzone](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/dropzone/32/7515_2.png) [@dropzone](https://boards.straightdope.com/u/dropzone)\
**Post date:** [August 23, 2019, 11:13pm UTC](https://boards.straightdope.com/t/phishers-arent-even-trying-anymore/839135/1 "2019-08-23T23:13:13Z")

</div>

> [@](#):
>
> Dropzone, how you been? I hope everything ls okay now. I’ve got somee awesome news For you…
> 
> The Government ls giving out money ln your State for…college.
> 
> The amount ls $5,815\*
> 
> Youu can usee this money for Online courses.
> 
> lt Only takes about a minute to check lf you qualify.
> 
> Click-HERE-to-see-lf-you-Qualiify…
> 
> Best.Wishees

I’d highlight the errors, but they’re blatant. I don’t suppose their college offered a course in using Spell Check.

---

<div class="post-metadata">

**Author:** ![GaryM](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/garym/32/241_2.png) [@GaryM](https://boards.straightdope.com/u/GaryM)\
**Post date:** [August 23, 2019, 11:41pm UTC](https://boards.straightdope.com/t/phishers-arent-even-trying-anymore/839135/2 "2019-08-23T23:41:36Z")

</div>

So, are they sending a check, or money order? Perhaps a Green Dot cash card?

---

<div class="post-metadata">

**Author:** ![running\_coach](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/running_coach/32/15836_2.png) [@running\_coach](https://boards.straightdope.com/u/running_coach)\
**Post date:** [August 24, 2019, 3:26am UTC](https://boards.straightdope.com/t/phishers-arent-even-trying-anymore/839135/3 "2019-08-24T03:26:02Z")

</div>

> [@GaryM](#):
>
> So, are they sending a check, or money order? Perhaps a Green Dot cash card?

For your convenience, they will deposit straight to your checking account. All they need are your login credentials and answers to challenge questions.

Easy as pie!

---

<div class="post-metadata">

**Author:** ![wolfpup](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/wolfpup/32/10618_2.png) [@wolfpup](https://boards.straightdope.com/u/wolfpup)\
**Post date:** [August 24, 2019, 3:37am UTC](https://boards.straightdope.com/t/phishers-arent-even-trying-anymore/839135/4 "2019-08-24T03:37:06Z")

</div>

Sounds like “The Government” is outsourcing the administration of its college grant programs to Nigerian princes. Makes sense, since the princes already have well-established email networks and they do have a way with words.

---

<div class="post-metadata">

**Author:** ![CairoCarol](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/cairocarol/32/3825_2.png) [@CairoCarol](https://boards.straightdope.com/u/CairoCarol)\
**Post date:** [August 24, 2019, 3:43am UTC](https://boards.straightdope.com/t/phishers-arent-even-trying-anymore/839135/5 "2019-08-24T03:43:44Z")

</div>

Usee?  
Wishees?

I think that phisher has a MacBook like mine, with the sticky keys.

---

<div class="post-metadata">

**Author:** ![mbh](https://avatars.discourse-cdn.com/v4/letter/m/a6a055/32.png) [@mbh](https://boards.straightdope.com/u/mbh)\
**Post date:** [August 24, 2019, 2:34pm UTC](https://boards.straightdope.com/t/phishers-arent-even-trying-anymore/839135/6 "2019-08-24T14:34:23Z")

</div>

if wishees were phishees, we’d all cast nets.

---

<div class="post-metadata">

**Author:** ![running\_coach](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/running_coach/32/15836_2.png) [@running\_coach](https://boards.straightdope.com/u/running_coach)\
**Post date:** [August 24, 2019, 3:39pm UTC](https://boards.straightdope.com/t/phishers-arent-even-trying-anymore/839135/7 "2019-08-24T15:39:34Z")

</div>

> [@mbh](#):
>
> if wishees were phishees, we’d all cast nets.

Clickety, clickety, click. _footstomp_ Clickety, clickety, click.

---

<div class="post-metadata">

**Author:** ![Nawth\_Chucka](https://avatars.discourse-cdn.com/v4/letter/n/c57346/32.png) [@Nawth\_Chucka](https://boards.straightdope.com/u/Nawth_Chucka)\
**Post date:** [August 25, 2019, 2:32am UTC](https://boards.straightdope.com/t/phishers-arent-even-trying-anymore/839135/8 "2019-08-25T02:32:03Z")

</div>

Their typos are deliberate; they know their best mark will be the one who ignores them for the promise of money. They won’t double-check anything they’re told if they won’t even stop to look at how bad the typos are.

---

<div class="post-metadata">

**Author:** ![Cugel](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/cugel/32/1199_2.png) [@Cugel](https://boards.straightdope.com/u/Cugel)\
**Post date:** [August 25, 2019, 3:31am UTC](https://boards.straightdope.com/t/phishers-arent-even-trying-anymore/839135/9 "2019-08-25T03:31:02Z")

</div>

That’s the conventional wisdom, but doesn’t explain why phishes that are just trying to steal logins by faking official emails/websites make the same errors. The more believable they are, the more likely the mark will be fooled.

---

<div class="post-metadata">

**Author:** ![Nawth\_Chucka](https://avatars.discourse-cdn.com/v4/letter/n/c57346/32.png) [@Nawth\_Chucka](https://boards.straightdope.com/u/Nawth_Chucka)\
**Post date:** [August 25, 2019, 4:05am UTC](https://boards.straightdope.com/t/phishers-arent-even-trying-anymore/839135/10 "2019-08-25T04:05:03Z")

</div>

> [@Cugel](#):
>
> That’s the conventional wisdom, but doesn’t explain why phishes that are just trying to steal logins by faking official emails/websites make the same errors. The more believable they are, the more likely the mark will be fooled.

They are looking for greedy idiots. They get more than enough of them or else they wouldn’t keep doing it.

---

<div class="post-metadata">

**Author:** ![CairoCarol](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/cairocarol/32/3825_2.png) [@CairoCarol](https://boards.straightdope.com/u/CairoCarol)\
**Post date:** [August 25, 2019, 5:29pm UTC](https://boards.straightdope.com/t/phishers-arent-even-trying-anymore/839135/11 "2019-08-25T17:29:35Z")

</div>

> [@Cugel](#):
>
> That’s the conventional wisdom, but doesn’t explain why phishes that are just trying to steal logins by faking official emails/websites make the same errors. **The more believable they are, the more likely the mark will be fooled**.

Definitely. I got one from “Netflix” a couple days ago, saying there was a problem with my payment and they’d try again, but meanwhile if I wanted to check my invoice status I could click here. Since I did change my credit card number a little while ago, it didn’t seem completely out of the question that an autopay update might have slipped through the cracks.

The phishing was quite well done. No errors, extremely professional-looking, and the icing on the cake was the offhand “hey, no need to do anything unless you want to; we’re going to try again so everything is probably okay.”

The three things that alerted me to the fact it was fake were the “dear customer” rather than “dear CairoCarol,” the source email address which was gobblygook, and the fact that two identical emails came in within an hour or so, but each with a different “case number.”

I admit though, it gave me pause. If I’d been just a little less cautious, they could have gotten me. I’m sure it’s a very effective spoof.
