The dots do matter: how to scam a Gmail user

FredOnline · 10 Apr 2018, 09:16 PM

An interesting read for Gmail users:

https://jameshfisher.com/2018/04/07/...mail-user.html

Adrian Bell · 11 Apr 2018, 12:16 AM

Interesting. Netflix really should require the email address to be verified, most other sites do. Gmail, unfortunately, seem to be a law unto themselves. My bank started using my Gmail address to correspond with me. I had never given it to them or anyone else, I don't use it.

TenFour · 11 Apr 2018, 05:52 AM

I don't understand how this would work. Don't you have to login to Netflix using both your username (presumably the email address with the dots), AND your password in order to change your credit card details? In other words, the scammer can add some dots to use your email address to create the account, but unless they have your password how could they trick you into logging in and giving up your credit card details? So, I suppose you could potentially go through the password reset process, but then if you do that how would the other person be able to access the account to get or use your credit card? Still, the lesson is to never login to any payment site just using a link from within an email anyway. You should always open another browser tab and login in directly for many possible security reasons.

10 Apr 2018, 09:16 PM	#1
FredOnline The "e" in e-mail Join Date: Apr 2011 Location: Manchester UK Posts: 2,616	The dots do matter: how to scam a Gmail user An interesting read for Gmail users: https://jameshfisher.com/2018/04/07/...mail-user.html

11 Apr 2018, 05:52 AM	#3
TenFour Master of the @ Join Date: Feb 2017 Location: USA Posts: 1,742	I don't understand how this would work. Don't you have to login to Netflix using both your username (presumably the email address with the dots), AND your password in order to change your credit card details? In other words, the scammer can add some dots to use your email address to create the account, but unless they have your password how could they trick you into logging in and giving up your credit card details? So, I suppose you could potentially go through the password reset process, but then if you do that how would the other person be able to access the account to get or use your credit card? Still, the lesson is to never login to any payment site just using a link from within an email anyway. You should always open another browser tab and login in directly for many possible security reasons. Last edited by TenFour : 11 Apr 2018 at 06:01 AM.

11 Apr 2018, 12:16 AM	#2
Adrian Bell Cornerstone of the Community Join Date: Apr 2001 Location: Darlington, UK Posts: 938	Interesting. Netflix really should require the email address to be verified, most other sites do. Gmail, unfortunately, seem to be a law unto themselves. My bank started using my Gmail address to correspond with me. I had never given it to them or anyone else, I don't use it.