[MlMt] Flagging potentially fake email addresses

[Kee Hinckley]

My wife just got one of those scams where they pretend to be someone (in 
her case, the Department Chair for the Sociology department) and they 
are in a meeting and want you to do them a favor. If you don't notice 
the incorrect email address and reply, it turns out they want you to buy 
some iTunes gift certificates for someone.

The intro text was professionally done. It was specifically targeted for 
a sociology department. Followup text was sloppier and clearly done on 
the fly. She managed to alert other students and stopped at least one 
person who was just about to buy the cards. The scam works very well.

Obviously the most important thing you can do is check the return email 
address, but a friend mentioned to me that GSuite Enterprise has a 
feature where they will highlight email addresses where the email 
address is one not seen before for the given fullname.

So if the sender's name is "Kee Hinckley" and previous mail from me has 
been coming from "kee at example.com", and this one comes from an email 
address that I haven't seen associated with that user before, highlight 
it.

There's some interesting edge cases (misspelling, handling "+" and "." 
in the email, how to deal with people who have multiple email addresses, 
deciding when to say "yes, it's okay even though it's new"…) but I 
thought I'd throw it out there as a potential feature. Although I 
suspect the people who would find this most useful probably aren't 
MailMate users.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freron.com/pipermail/mailmate/attachments/20190213/4131947f/attachment.html>