Subvert the scam of a different target?

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Hello I'm New here! Joined: 26 Oct 2018 Posts: 1

I've always wanted to waste scammer's time and mess around with them, but I never seem to get the scam e-mails. I work IT Security, and see them in our phishing inbox all the time, but they're never directed at me. Is there a good way to redirect the scammer, or make them think they've hooked someone they might not have reached out to?

As I think about it, I should probably browse my gmail spam folder. Could probably find a few somewhere in that mess.

Posted: Fri Oct 26, 2018 3:30 pm

Welcome to Eater ForensicFox. We can use your talents here.

If you use a baiting Gmail account simply copy the scammers subject, copy the text and reply with a simple "I am interested, tell me more."

If you use a Mail.com provider for your baiting, the system may detect that the text or subject is scam related and close your box. It has happened to me so I would write something like "I won the Lottery!" in the subject line and "Tell me how to collect." in the body of the message.

Posted: Fri Oct 26, 2018 3:44 pm

There’s a section here called “Surplus scam letters” which is fed daily by some very generous people, take a look and see if anything takes your fancy (as it were)

Make sure you are baiting from a completely risky free email address, that has no detectable person at the other end – gmail is favourite. Choose a name that is untraceable, as the lads will probably check it before entering into conversation. There have been (and are) some very humerous examples on here, but if it shows up on google, you stand no chance. Never bait from your own account under any circumstances. If I know your name, I can find your address, your employer, even what you had for breakfast and where you purchased those items from

Simply copy and paste “the plot” into your email, then reply to it underneath. Some of the lads need reminding of the scam they started, and you are more likely to get a result if they recognise the script. They almost never check if the email replying is one they sent to

Read all the stickies on this board – all of them – then read them again. Consider signing up for a mentor for your first few baits, as it gets tricky in places

Sometimes you won’t get a reply at all, sometimes they’ll bite over the next few days, sometimes all you need to put in an email is a question mark – there are no such things as “typical” scams, every one of them has a person behind it, and people are unpredictable

Any questions, just ask on here, it’s better than making a mistake (or get a mentor) – it may look simple, and in some cases as funny as feck – but it is all very real – be very very careful ……

Posted: Sat Oct 27, 2018 10:06 am

Nice explanation Purple!

One other comment on the original post: you will probably find plenty of good scam mails in your own boxes' spam folders, but be sure not to bait them directly from an account linked to your identity. You may already be well aware of the potential security issues but others who read the thread may not be.

However it's fine to "reply" to a scam message you received personally, but from a baiting account as mentioned above. Just make sure to clean any reference to your original account/name/etc. Scam mails get sent out in such massive numbers, it is extremely rare a scammer will check that you were actually sent the message.

Subvert the scam of a different target?	View next topic View previous topic