topic Re: Forwarding Phishing emails in Email

Forwarding Phishing emails

stephen54 — Sun, 17 Nov 2024 13:26:26 GMT

Hi,

I have received a phishing email and have tried several times to forward it to phishing@talktalk.co.uk.

Every time (no matter what device or browser I use or whether I include external images or not) I get an error message saying the email cannot be sent.

Why is this happening and how can I forward it

Attached is a screen snip of the error message and the sender address.

Re: Forwarding Phishing emails

Gliwmaeden2 — Sun, 17 Nov 2024 14:51:12 GMT

Does it work if you try sending it to https://www.ncsc.gov.uk/collection/phishing-scams/report-scam-email, @stephen54?

Will be just as effective. Then put it in Spam and delete it.

Re: Forwarding Phishing emails

stephen54 — Sun, 17 Nov 2024 15:47:33 GMT

Hi,

I’ve just tried that.

I used the email address on that site (phishing@gov.org I think it was) and had the same result.

Regards

Re: Forwarding Phishing emails

Gliwmaeden2 — Sun, 17 Nov 2024 20:20:36 GMT

Odd. There may be something set up to stop you sending out something they are detecting in the message.

Perhaps copy the message heading and send info, and anything that you can send without clicking on any dodgy links.

Try just sending that information on, @stephen54.

Re: Forwarding Phishing emails

ferguson — Sun, 17 Nov 2024 16:33:36 GMT

@stephen54

I am very concerned at that .lb suffix: Lebanon? I trust you haven't opened the email or clicked on any links in it? If so, I suggest security scans at the earliest opportunity.

Re: Forwarding Phishing emails

stephen54 — Sun, 17 Nov 2024 17:37:25 GMT

Hi,

The email showed when I tried to forward it to TalkTalk, but I never clicked anywhere in the email.

I’ve scanned my devices and everything seems ok.

I think I’ll just mark it as spam locally and just delete it.

Thanks everyone for your help. @Gliwmaeden2 @ferguson

Re: Forwarding Phishing emails

ferguson — Sun, 17 Nov 2024 17:39:40 GMT

OK, thats good to know. Maybe there are players out there who have found ways of circumventing this?

Re: Forwarding Phishing emails

ferguson — Sun, 17 Nov 2024 17:41:07 GMT

@Ady-TalkTalk

Any observations/thoughts on this?

Re: Forwarding Phishing emails

Billx — Sun, 17 Nov 2024 20:47:16 GMT

Hello, @stephen54

I assume you are using a mobile phone and your own email app within your mobile.

It could be, that that app does not allow forwarding spam emails, or even something peculiar in that mobile.

I am using a PC and my own email app.

Via this, it was not possible to forward any spam emails to the 2 phishing addresses.

I then went to TalkTalk Webmail.

Via this, it was possible to forward 2 different spam emails to each of the 2 destinations:

phishing@talktalk.co.uk

report@phishing.gov.uk

(Edit: The forwards were done at 7:00 tonight.

I don't know whether you have deleted yours.)

Bill

Re: Forwarding Phishing emails

stephen54 — Sun, 17 Nov 2024 20:03:18 GMT

Hi @Billx

Thanks for the comment.

I was using TalkTalk webmail when I tried reporting this email to the recommended email addresses - I always use webmail when reporting phishing (never an email app).

I had tried to report on an iPad and PC. I tend not to report by mobile as the screen is to small.

Prior to trying to report this one, l have reported other phishing emails without problem.

Re: Forwarding Phishing emails

Billx — Sun, 17 Nov 2024 20:02:52 GMT

Re: Forwarding Phishing emails

ThamePete — Wed, 04 Dec 2024 12:29:31 GMT

I too am having this problem, emails forwarded to both Talk Talk and .gov.uk hang in the outbox. I have tried both from an App on my phone and the Talk Talk webpage on my laptop. I have forwarded a known good email to Talk Talk and it sends OK. The problem certainly looks like something sinister in the email. I really would like to get it to someone who can work out what it is (which is not me!), rather than just delete it. Any suggestions?

Re: Forwarding Phishing emails

ThamePete — Wed, 04 Dec 2024 14:36:28 GMT

I have just noticed a padlock symbol followed by "Mail Disable Policy" after the senders address:

It sems very likely that this is the cause, but I can find no reference to this function, or how to disable it

Re: Forwarding Phishing emails

stephen54 — Wed, 04 Dec 2024 14:54:04 GMT

Hi @ThamePete ,

That is interesting.

Wonder if anyone else in the Community has come across this and found a solution.

Must admit, I didn’t see this on the emails that I had problems with.

Since my original post, I have had a couple more emails with the same problem!

Re: Forwarding Phishing emails

DJR21 — Thu, 05 Dec 2024 20:54:39 GMT

Hi,

Can confirm that this happens to any account that seems to have phishing in the address. As several I have received came from "Talk Talk" amongst others it appears that there must be some new code scammers can attach to their emails. Has anyone contacted talktalk?

Re: Forwarding Phishing emails

DJR21 — Thu, 05 Dec 2024 21:02:44 GMT

Have tried forwarding them from my PC (webmail) and my tablet used to work for all . Interesting, forget my last message, Have managed to send an email to phishing@rbs and phishing@talk talk.co.uk without forwarding the attachment, so phishing is not the key,

Re: Forwarding Phishing emails

ferguson — Thu, 05 Dec 2024 21:06:49 GMT

The latest TalkTalk guidance is that you download the offending email as a file and then forward it on to them.

Re: Forwarding Phishing emails

stephen54 — Thu, 05 Dec 2024 21:20:11 GMT

Hi @DJR21 ,

This is the first time I’ve heard this, so I’ve certainly not raised it with TT. Maybe this information needs passing on to one of the more technical members.

What I have done is reread the TT guide on dealing with spam and phishing on the Community pages. It’s worth a read. What it recommends is saving phishing emails as a file then sending it to the phishing@talktalk.co.uk email address as an attachment (not Forwarding). Obviously, the guide explains it better. I haven’t managed to try it yet with a problem email.

Re: Forwarding Phishing emails

ferguson — Thu, 05 Dec 2024 21:28:23 GMT

OK, I should have said "send" rather than "forward." But the advice you have mentioned is the latest.

Re: Forwarding Phishing emails

stephen54 — Thu, 05 Dec 2024 22:08:59 GMT

Hi @ferguson ,

Sorry, my remark about Forwarding wasn't a comment on your post

I hadn't seen it before posting mine 😁.