Forwarding Phishing emails

[stephen54]

Hi,

I have received a phishing email and have tried several times to forward it to phishing@talktalk.co.uk.

Every time (no matter what device or browser I use or whether I include external images or not) I get an error message saying the email cannot be sent.

Why is this happening and how can I forward it

Attached is a screen snip of the error message and the sender address.

[ferguson]

No worries, just correcting the terminology for the avoidance of doubt!  🙂

[stephen54]

Hi @ferguson ,

Sorry, my remark about Forwarding wasn't a comment on your post 

I hadn't seen it before posting mine 😁.

[ferguson]

OK, I should have said "send" rather than "forward." But the advice you have mentioned is the latest.

[stephen54]

Hi @DJR21 ,

 This is the first time I’ve heard this, so I’ve certainly not raised it with TT. Maybe this information needs passing on to one of the more technical members.

What I have done is reread the TT guide on dealing with spam and phishing on the Community pages. It’s worth a read. What it recommends is saving phishing emails as a file then sending it to the phishing@talktalk.co.uk email address as an attachment (not Forwarding). Obviously, the guide explains it better. I haven’t managed to try it yet with a problem email.

[ferguson]

The latest TalkTalk guidance is that you download the offending email as a file and then forward it on to them. 

[DJR21]

Have tried forwarding them from my PC (webmail) and my tablet used to work for all . Interesting, forget my last message, Have managed to send an email to phishing@rbs and phishing@talk talk.co.uk without forwarding the attachment, so phishing is not the key,

[DJR21]

Hi,

Can confirm that this happens to any account that seems to have phishing in the address. As several I have received came from "Talk Talk" amongst others it appears that there must be some new code scammers can attach to their emails. Has anyone contacted talktalk?

[stephen54]

Hi @ThamePete ,

That is interesting.

Wonder if anyone else in the Community has come across this and found a solution.

Must admit, I didn’t see this on the emails that I had problems with.

Since my original post, I have had a couple more emails with the same problem!

[ThamePete]

I have just noticed a padlock symbol followed by "Mail Disable Policy" after the senders address:

It sems very likely that this is the cause, but I can find no reference to this function, or how to disable it

[ThamePete]

I too am having this problem, emails forwarded to both Talk Talk and .gov.uk hang in the outbox. I have tried both from an App on my phone and the Talk Talk webpage on my laptop. I have forwarded a known good email to Talk Talk and it sends OK. The problem certainly looks like something sinister in the email. I really would like to get it to someone who can work out what it is (which is not me!), rather than just delete it. Any suggestions?

[Billx]

OK

[stephen54]

Hi @Billx 

Thanks for the comment.

I was using TalkTalk webmail when I tried reporting this email to the recommended email addresses - I always use webmail when reporting phishing (never an email app).

I had tried to report on an iPad and PC. I tend not to report by mobile as the screen is to small.

Prior to trying to report this one, l have reported other phishing emails without problem.

[Billx]

Hello, @stephen54 

I assume you are using a mobile phone and your own email app within your mobile.

It could be, that that app does not allow forwarding spam emails, or even something peculiar in that mobile.

I am using a PC and my own email app.

Via this, it was not possible to forward any spam emails to the 2 phishing addresses.

I then went to TalkTalk Webmail.

Via this, it was possible to forward 2 different spam emails to each of the 2 destinations:

phishing@talktalk.co.uk

report@phishing.gov.uk

(Edit: The forwards were done at 7:00 tonight.

I don't know whether you have deleted yours.)

Bill

[ferguson]

@Ady-TalkTalk 

Any observations/thoughts on this?

[ferguson]

OK, thats good to know. Maybe there are players out there who have found ways of circumventing this?

[stephen54]

Hi,

The email showed when I tried to forward it to TalkTalk, but I never clicked anywhere in the email.

I’ve scanned my devices and everything seems ok.

I think  I’ll just mark it as spam locally and just delete it.

Thanks everyone for your help. @Gliwmaeden2 @ferguson 

[ferguson]

@stephen54 

I am very concerned at that .lb suffix: Lebanon? I trust you haven't opened the email or clicked on any links in it? If so, I suggest security scans at the earliest opportunity. 

[Gliwmaeden2]

Odd. There may be something set up to stop you sending out something they are detecting in the message. 

Perhaps copy the message heading and send info, and anything that you can send without clicking on any dodgy links.

Try just sending that information on, @stephen54.

[stephen54]

Hi,

I’ve just tried that.

I used the email address on that site (phishing@gov.org I think it was) and had the same result.

Regards

[Gliwmaeden2]

Does it work if you try sending it to https://www.ncsc.gov.uk/collection/phishing-scams/report-scam-email, @stephen54?

Will be just as effective. Then put it in Spam and delete it.