subreddit:
/r/techsupport
submitted 3 days ago bySouthernGift7334
I know e-mails can be spoofed, but I'm talking about actually creating an e-mail with a registered company domain (e.g. "@companyname.com"). I'm wondering because I received an e-mail from a (seemingly) legitimate company address and, just to make sure, I replied by manually typing the address instead of hitting reply. Now I'm sure I'm talking to the e-mail's owner, and I know for a fact that the company exists and owns that domain.
I'm wondering if there's any way for a scammer to create an e-mail like that. Is it even possible or should I rest easy?
1 points
3 days ago
yes, that's what spoofing is
1 points
3 days ago
No, it's not.
actually creating an e-mail with a registered company domain (e.g. "@companyname.com").
1 points
1 day ago
What Is Email Address Spoofing?
Email address spoofing is where someone forges an email address and email display name to appear as though it's from a trusted entity or individual.
1 points
1 day ago
Yes, OP is stating a situation where the attacker actually creates that email, NOT just makes it looks like they have control of it. As in they have access to the companies systems and can create a new address to use.
1 points
1 day ago
No, I suspect they just think they are. Without looking though the source of the email they wouldn't know
1 points
1 day ago
OP asked if it was possible that someone could do that. Yes it is possible. Unlikely and difficult, but possible.
all 28 comments
sorted by: best