Helping people with computers... one answer at a time.
People continue to fall for what more experienced users would say are laughably bogus phishing attempts. I'll analyze why one common attempt is so bad.
I keep getting this email from Hotmail - is it legit?
Subject: Account Alert From: WINDOW TEAM (*****@hotmail.com) To: *****@hotmail.com Dear Account Users CONFIRM YOUR WINDOWS LIVE ACCOUNT SERVICES. VERIFY YOUR HOTMAIL ACCOUNT NOW TO AVOID IT CLOSED !!! ...
•
This is an old, old scam. Delete it. Ignore it. Do not follow its instructions or your account will be hacked or your identity stolen.
Clear enough?
Apparently not, since I keep getting asked about this scam over and over and over again.
And it's not even that good a scam.
Let me walk through the many ways it's so obviously bogus.
•
By far the single most obvious and telltale sign that this is a bogus scam?
The English is horrible!
The entire message is littered with grammatical errors and other problems. Sure, official emails often have occasional mistakes; it happens. But an official communication from a huge U.S. based corporation is not going to be anywhere near this atrocious.
Let's look at some grammatical specifics and some of the many other tell-take signs in the part of the email we've seen so far:
WINDOW TEAM: There is no "Window Team". The product would be "WindowS", with an S. And email about what is now called Windows Live Hotmail would not come from the Windows Team, but from the Windows Live team - they are distinct teams.
*****@hotmail.com: the "From:" address, which I've obfuscated here, was obviously an email address of a random person, not a Microsoft employee. How do I know this? The email address was the classic name-digit-digit form that people use when they can't get just "name" as their email address. You think Microsoft employees need to do this? They use either official email addresses like "support" or "customerservice", not individuals, and - ironically - they don't usually use hotmail accounts to do it. Microsoft employees are typically @microsoft.com.
VERIFY YOUR HOTMAIL ACCOUNT NOW TO AVOID IT CLOSED !!! ALL CAPS. Official emails do not use ALL CAPS this much. It represents shouting, and is considered very rude. An official business email would never use all caps to this degree.
VERIFY YOUR HOTMAIL ACCOUNT NOW TO AVOID IT CLOSED !!! Horrible English: to avoid it being closed.
Some more tidbits from the rest of the message:
This Email is from Hotmail, Msn and Live Customer Care and we are sending it to every Email User Accounts Owner for safety. we are having congestions due to the anonymous registration of accountso we are shutting down some accounts and your account was among those to be deleted. We are sending this email to you so that you can verify and let us know if you still want to use this account. If you are still interested please confirm your account by filling the space below.Your User name, password, date of birth and your country information would be needed to verify your account.
I just can't list the many, many grammatical errors in that paragraph. It was clearly written by someone who does not speak English.
" Hotmail, Msn and Live Customer Care" - uh, no. "Hotmail", maybe. "MSN Hotmail" if this was two years old. "Windows Live", not "Live". In fact, the product name is "Windows Live Hotmail", and any official email from Microsoft can be reasonably expected to get their own product name correct.
Due to the congestion in all Hotmail ,Msn and Live users and removal of all unused Accounts, we would be shutting down all unused Accounts, You will have to confirm your E-mail by filling out your Login Information below after clicking the reply button, or your account will be suspended within 24 hours for security reasons.
Windows Live Hotmail already has a policy and procedure for pruning unused accounts. All you need to do is login periodically, nothing more, nothing less.
* Username: .............................. * Password: ................................ * Date of Birth: ............................ * Country Or Territory: ................
No one will ever ask you to email in your password. No one. Not ever. Never.
Next to the horrible English, this is, by far, the most glaring example that this is a scam. You're being asked to email your account login ID and password to a random email address. Don't do it. You will lose your account if you do.
After following the instructions in the sheet, your account will not be interrupted and will continue as normal. Thanks for your attention to this request. We apologize for any inconveniences. Warning!!! Account owner that refuses to update his/her account after two weeks of receiving this warning will lose his or her account permanently. Sincerely, The Windows Live Team Microsoft Corporation One Microsoft Way Redmond, WA 98052
Besides the continued bad English and bizarre spacing that's present throughout the message, this is just bogus fluff to make it look legitimate. I'm surprised that they finally got the product team name correct, but the fact that the product name changes throughout the message is another sign that whomever wrote this didn't really know what they were doing.
This is a classic "phishing" scam. It's point is to fool you into divulging your account information to someone, who can then steal your account and cause you a lot of grief.
And as bad as this one is - and trust me, particularly if you don't speak English natively, this one is really, really bad - people fall for it. Every day.
Don't be one of them.
Article C3863 - September 6, 2009
@Augustin
Posted by: Mark J at July 8, 2011 1:09 AMThis is the same scam mentioned in the article. Ignore it!
[Sigh] I guess "they" have read your article pointing out where they went wrong...
Oh, and - on the subject of "bad English" - [coff, coff]
"another sign that whomever wrote this " is exactly that. "whom" (or "whomever") is the object. In THIS case you should have used "whoever", as the subject.
Correct useage would be, e.g., "I can send it to whomever I want", where "I" is the subject of "want".
If followed by a verb, it should be "who", if by a noun, "whom".
"Whoever" and "whomever" likewise.
Oh, and - in the next sentence - "It's point is to fool you.. ", the apostrophe indicates a missing letter, here, "it is", which is obviously wrong. The possessive is "its", as this should have been.
Hey, Leo ! You've been reading too many of these phishing scams ! You're picking up bad habits ;-)
Erm... is this sufficient evidence that I read your article ? ;-)
Posted by: Robin Clay at September 27, 2011 3:56 PMPlease don't take this to mean I don't appreciate your sensible advice ! For which I thank you, once more.
@Robin
Posted by: Mark J at September 27, 2011 10:02 PMAs an English teacher, I can tell you that who is becoming accepted for use as an object. The apostrophe is a typo.
Hi Super Leo,
If this is a scam why doesn't msn do something about it? I'm a novice in computers & realised this can't be right, googled it & found your advice, thank you so much for the 'plain english' explanation.
Posted by: Helen at November 25, 2011 5:35 PM@Helen
Posted by: Mark J at November 26, 2011 1:02 AMThe email which claims your email account will close is phishing spam which purports to come from Microsoft, but never goes through Microsoft's servers. So, Microsoft has no way of stopping these emails.
Why can't we catch spammers and phishers?