Note to Self Email Scam
Overview of the Scam(s)
The “Note to Self” scam uses spoofed emails to bypass traditional phishing detection methods. The email seems to originate from your own email address, creating a false sense of urgency and legitimacy. In reality, these emails are sent from a different IP address and not from your actual account.
Cybercriminals use this tactic to:
Steal sensitive information.
Spread malware.
Gain financial advantage through extortion or fraudulent links.
How the Scam Works
Email Spoofing:
The email header is manipulated to make it appear as though the email was sent from your own address.
This is achieved using Simple Mail Transfer Protocol (SMTP) servers and email software.
Deceptive Content:
The email often contains alarming language, such as threats of account compromise or requests for urgent action.
Scammers may include links to phishing websites or attachments containing malware.
No Evidence in Sent Folder:
Victims are confused because the email does not appear in their “Sent” folder, suggesting their account has not been hacked.
Targeted Approach:
Modern scammers carefully select their targets and craft messages to appear as though they come from trusted sources, including the victim’s own account.
How to Prevent This Scam in the Future
Understand Email Spoofing:
Spoofing does not require access to your email account. It is simply a manipulation of the “From” field in the email header.
Knowing this can help reduce panic and prevent rash actions.
Verify Email Headers:
Check the full email header to trace the actual sender’s IP address.
Look for inconsistencies between the sender’s domain and the originating IP.
Enable Advanced Email Security:
Use email providers that support Domain-Based Message Authentication, Reporting, and Conformance (DMARC), Sender Policy Framework (SPF), and DomainKeys Identified Mail (DKIM) to filter out spoofed emails.
Avoid Clicking Links or Downloading Attachments:
Do not interact with suspicious emails, especially if they claim to be from your own address.
Secure Your Email Account:
Use strong, unique passwords and enable two-factor authentication (2FA).
Regularly update your account security settings.
How to Report the Scam
To Your Email Provider:
Report the spoofed email as spam or phishing through your email provider’s built-in tools.
Forward the email to your provider’s abuse department (e.g., abuse@gmail.com for Gmail users).
To the National Cyber Security Centre (NCSC):
Forward phishing emails to report@phishing.gov.uk in the UK.
To Action Fraud:
Report the scam online at Action Fraud or call 0300 123 2040.