May 14 2020 12:52 PM - edited Apr 09 2021 07:38 AM
Hi,
I've noticed recently that I am not able to see the sender email address for some emails. Why? How can I fix this?
Example:
If I place the mouse on the sender I see my own email address:
I don't have this problem with most of my emails:
When I check the source of the TV Licensing email what I see is:
Date: Thu, 14 May 2020 03:05:34 -0700
Subject: Your TV Licence expires today
Message-ID:
<DB8PR02MB58514A4F8FBCF5689D1322CFDCBC0@DB8PR02MB5851.eurprd02.prod.outlook.com>
From: TV Licensing <myemailaddress@hotmail.es> , <sirajul_islam1987@hotmail.co.uk>
Does anyone know what is going on?
Thank you.
---------------------------------------------------
UPDATE 09/04/2021:
---------------------------------------------------
Unfortunately I have bad news. Scammers are taking advantage of this bug. Yesterday I got two new emails (indeed both emails were exactly the same) trying to scam me.
The procedure is similar to the TV Licensing email. This time, when I place the mouse over the email, I don't see the sender email address:
If I place the mouse over a legitimate email, I can see the sender email address:
This behaviour is different from the TV Licensing email. In the TV Licensing email I see my own email address as sender email address, while in these two new emails no email address is shown.
Moreover, if I check the message source of any of those two scamm emails, what I see is the following:
Sender: BitcoinSystem <noreply@pccomponentes.com>
To: xxxxxx@hotmail.es<xxxxxx@hotmail.es>
From: Notificación, <enzo@newsletter.spartoo.com>
Subject: xxxxxx ¡Tiene un pago agregado a su cuenta! Necesitamos una Confirmación
Date: Thu, 8 Apr 2021 16:57:19 -0400
I have replaced the first part of my email address by "xxxxxx".
Anyway, as you can see the field "Sender" tells me that the sender email address is "noreply@pccomponentes.com", however, the "From" field tells me the real sender email address which is "enzo@newsletter.spartoo.com".
Finally, I have on my phone (Android) the Outlook app installed. When I check this scam email on my phone, the thing is even worse, because the app shows "noreply@pccomponentes.com" as sender email. This email address is a legitimate email from the website https://www.pccomponentes.com/. Therefore, some non-advanced users could easily fall into this scam thinking PC Componentes is really sending them an email...
Everything this is slightly different from the TV Licensing email, but the final result is pretty much the same. Hence, scammers are taking advantage of this bug and even finding more sophisticated ways to scam people.
Thankfully, I am an experienced user, but I am pretty sure that many users will be scammed.
It's been almost one year since I post this message and nobody has fixed this bug. Apparently, Microsoft doesn't care about their users security. Maybe is time to switch to another email provider...
Mar 23 2021 09:30 AM
Almost a year later, but I'm having the same problem. This makes it a lot harder to filter out phishing emails. Any help would be greatly appreciated!
Mar 25 2021 05:32 AM
Mar 25 2021 11:37 AM
Apr 09 2021 07:23 AM
Unfortunately I have bad news. Scammers are taking advantage of this bug. Yesterday I got two new emails (indeed both emails were exactly the same) trying to scam me.
The procedure is similar to the TV Licensing email. This time, when I place the mouse over the email, I don't see the sender email address:
If I place the mouse over a legitimate email, I can see the sender email address:
This behaviour is different from the TV Licensing email. In the TV Licensing email I see my own email address as sender email address, while in these two new emails no email address is shown.
Moreover, if I check the message source of any of those two scamm emails, what I see is the following:
Sender: BitcoinSystem <noreply@pccomponentes.com>
To: xxxxxx@hotmail.es<xxxxxx@hotmail.es>
From: Notificación, <enzo@newsletter.spartoo.com>
Subject: xxxxxx ¡Tiene un pago agregado a su cuenta! Necesitamos una Confirmación
Date: Thu, 8 Apr 2021 16:57:19 -0400
I have replaced the first part of my email address by "xxxxxx".
Anyway, as you can see the field "Sender" tells me that the sender email address is "noreply@pccomponentes.com", however, the "From" field tells me the real sender email address which is "enzo@newsletter.spartoo.com".
Finally, I have on my phone (Android) the Outlook app installed. When I check this scam email on my phone, the thing is even worse, because the app shows "noreply@pccomponentes.com" as sender email. This email is a legitimate email from the website https://www.pccomponentes.com/. Therefore, some non-advanced users could easily fall into this scam thinking PC Componentes is really sending them an email...
Everything this is slightly different from the TV Licensing email, but the final result is pretty much the same. Hence, scammers are taking advantage of this bug and even finding more sophisticated ways to scam people.
Thankfully, I am an experienced user, but I am pretty sure that many users will be scammed.
It's been almost one year since I post this message and nobody has fixed this bug. Apparently, Microsoft doesn't care about their users security. Maybe is time to switch to another email provider...
Apr 09 2021 11:55 AM
Apr 12 2021 09:45 AM
Apr 12 2021 01:41 PM
Apr 13 2021 12:22 PM
@A1Hi, thanks for replying, but like I said before, the problem is not one scammer email address, the problem is that Outlook has a serious security issue with this bug.
I can block the email addresses of those scammers, that's easy, but it will not fix the problem, that is only a workaround to me, but what about the other millons of Microsft users that are receiving these emails and they are not able to identify the email as phising because the sender email address is legitimate to them? This is not a solution.
By the way, on Monday I got a new scam email using the same bug, and today a new one. Different email addresses. Microsoft needs to fix this ASAP!!!!!
Apr 13 2021 12:47 PM
Apr 13 2021 12:59 PM
Apr 16 2021 09:03 AM
@A1Hi, do you know which contact form should I use to contact Office 365 support team? Because I tried to contact several times to Microsoft using different chats/forms and none of them seem to be right one.
Thanks.
Apr 16 2021 12:57 PM - edited Apr 16 2021 01:07 PM
Hi!
https://docs.microsoft.com/en-us/microsoft-365/security/defender/advanced-hunting-query-emails-devic...
https://docs.microsoft.com/pl-pl/microsoft-365/security/office-365-security/use-the-delist-portal-to...
In this 2 link should be the correct form to which you will need to log in, this will be the right place- I can not share it on the Forum MTC Good luck I'm happy with your commitment!
Apr 16 2021 02:05 PM - edited Apr 16 2021 02:54 PM
https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/user-submission?view=o36...
https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/report-junk-email-messag...
Surely you will have no doubt that you have to report to Microsoft there is no other way! Good luck
Jul 07 2021 09:30 AM
Jul 07 2021 09:33 AM
Jul 07 2021 10:29 AM
Hi, because still someone is trying to deceive you and it takes a very long time - I would be interested in this topic police - there are specialized people who have the right tools to check it to protect others - from scammers.
Good luck Andrew
Dec 09 2022 06:51 AM
Dec 09 2022 07:56 AM - edited Dec 12 2022 05:24 AM
Thank you for being with us again!
if it is an address that has been associated with the services, or is part of 2MFA, it is worth changing this address to another, check whether the security services have changed to a new address, and this just needs to be removed, of course I would do so, it is not worth fixing it a waste of time.
Please read this article, it is worth sending suspicious emails for check:
How To Get Less Spam in Your Email | Consumer Advice (ftc.gov)