Forum Discussion

xerez1947's avatar
xerez1947
Brass Contributor
May 14, 2020

Can't see sender email address (Outlook web)

Hi,

I've noticed recently that I am not able to see the sender email address for some emails. Why? How can I fix this?

Example:

 

 

 

If I place the mouse on the sender I see my own email address:

 

I don't have this problem with most of my emails:

 

When I check the source of the TV Licensing email what I see is:

Date: Thu, 14 May 2020 03:05:34 -0700

Subject: Your TV Licence expires today

Message-ID:

<DB8PR02MB58514A4F8FBCF5689D1322CFDCBC0@DB8PR02MB5851.eurprd02.prod.outlook.com>

From: TV Licensing <myemailaddress@hotmail.es> , <sirajul_islam1987@hotmail.co.uk>

To: mailto:myemailaddress@hotmail.es

 

Does anyone know what is going on?

 

Thank you.

 

---------------------------------------------------

UPDATE 09/04/2021:

---------------------------------------------------

Unfortunately I have bad news. Scammers are taking advantage of this bug. Yesterday I got two new emails (indeed both emails were exactly the same) trying to scam me.

 

The procedure is similar to the TV Licensing email. This time, when I place the mouse over the email, I don't see the sender email address:

 

If I place the mouse over a legitimate email, I can see the sender email address:

 

This behaviour is different from the TV Licensing email. In the TV Licensing email I see my own email address as sender email address, while in these two new emails no email address is shown.

 

Moreover, if I check the message source of any of those two scamm emails, what I see is the following:

 

Sender: BitcoinSystem <noreply@pccomponentes.com>

To: xxxxxx@hotmail.es<xxxxxx@hotmail.es>

From: Notificación, <enzo@newsletter.spartoo.com>

Subject: xxxxxx ¡Tiene un pago agregado a su cuenta! Necesitamos una Confirmación

Date: Thu, 8 Apr 2021 16:57:19 -0400

 

I have replaced the first part of my email address by "xxxxxx".

 

Anyway, as you can see the field "Sender" tells me that the sender email address is "mailto:noreply@pccomponentes.com", however, the "From" field tells me the real sender email address which is "mailto:enzo@newsletter.spartoo.com".

 

Finally, I have on my phone (Android) the Outlook app installed. When I check this scam email on my phone, the thing is even worse, because the app shows "mailto:noreply@pccomponentes.com" as sender email. This email address is a legitimate email from the website https://www.pccomponentes.com/. Therefore, some non-advanced users could easily fall into this scam thinking PC Componentes is really sending them an email...

 

 

Everything this is slightly different from the TV Licensing email, but the final result is pretty much the same. Hence, scammers are taking advantage of this bug and even finding more sophisticated ways to scam people.

 

Thankfully, I am an experienced user, but I am pretty sure that many users will be scammed.

 

It's been almost one year since I post this message and nobody has fixed this bug. Apparently, Microsoft doesn't care about their users security. Maybe is time to switch to another email provider...

22 Replies

  • xerez1947's avatar
    xerez1947
    Brass Contributor

    Unfortunately I have bad news. Scammers are taking advantage of this bug. Yesterday I got two new emails (indeed both emails were exactly the same) trying to scam me.

     

    The procedure is similar to the TV Licensing email. This time, when I place the mouse over the email, I don't see the sender email address:

     

    If I place the mouse over a legitimate email, I can see the sender email address:

     

    This behaviour is different from the TV Licensing email. In the TV Licensing email I see my own email address as sender email address, while in these two new emails no email address is shown.

     

    Moreover, if I check the message source of any of those two scamm emails, what I see is the following:

     

    Sender: BitcoinSystem <noreply@pccomponentes.com>

    To: xxxxxx@hotmail.es<xxxxxx@hotmail.es>

    From: Notificación, <enzo@newsletter.spartoo.com>

    Subject: xxxxxx ¡Tiene un pago agregado a su cuenta! Necesitamos una Confirmación

    Date: Thu, 8 Apr 2021 16:57:19 -0400

     

    I have replaced the first part of my email address by "xxxxxx".

     

    Anyway, as you can see the field "Sender" tells me that the sender email address is "mailto:noreply@pccomponentes.com", however, the "From" field tells me the real sender email address which is "mailto:enzo@newsletter.spartoo.com".

     

    Finally, I have on my phone (Android) the Outlook app installed. When I check this scam email on my phone, the thing is even worse, because the app shows "mailto:noreply@pccomponentes.com" as sender email. This email is a legitimate email from the website https://www.pccomponentes.com/. Therefore, some non-advanced users could easily fall into this scam thinking PC Componentes is really sending them an email...

     

     

    Everything this is slightly different from the TV Licensing email, but the final result is pretty much the same. Hence, scammers are taking advantage of this bug and even finding more sophisticated ways to scam people.

     

    Thankfully, I am an experienced user, but I am pretty sure that many users will be scammed.

     

    It's been almost one year since I post this message and nobody has fixed this bug. Apparently, Microsoft doesn't care about their users security. Maybe is time to switch to another email provider...

    • Deleted's avatar
      Deleted
      Hi Thank you for your feedback and a lot of work it really helps. There is what is more and more scammers - of course you marked the sender as an attempt to extort because only so it is that you block it and Microsoft has such an email sender in the list = spammer , or is blocked for all Office 365 so it works = but not aware is very much yours
      • xerez1947's avatar
        xerez1947
        Brass Contributor
        Hi, in this case marking the email as phishing and report ir to Microsoft doesn't help. If I do it, Microsoft may block the sender email address, but the real problem would still be there. The scammers only need a new email address to continue their work, while people will still see their own email address or a legitimate email address as the sender email address. This is the real problem here.

        Moreover, in the case of the TV Licensing email, the "From" field has two email address, the scammer's one and my own email address. What would happen if I report that email to Microsoft? Would they block my email address?

        By the way, since I updated this case the 9th of April, I have receive two new emails using taking advantage of the same bug.
  • lkleeven's avatar
    lkleeven
    Copper Contributor

    Almost a year later, but I'm having the same problem. This makes it a lot harder to filter out phishing emails. Any help would be greatly appreciated!

Resources