Community Forum

pfishing sent email from xfinity.com

Highlighted
New Poster

pfishing sent email from xfinity.com

Today's pfishing expedition is unusual. The email with subject:
⚠️ Please review the following information for accuracy:

has a sender address:

xfinity@info.xfinity.com

 

This is the address I see when I hover over the address. It does not appear spoofed. But the link I am supposed to follow to review my info is:

<Edited>

 

How could this happen?

 

 

Highlighted
Regular Contributor

Re: pfishing sent email from xfinity.com

If you send a paper mail, you can write whatever return address you like on the evelope. Email is the same - the from field is filled in by the sender.  Typically, normal email users set this once in their email client, however, spammers change this often to fit the spam/scam.

 

 

Highlighted
New Poster

Re: pfishing sent email from xfinity.com

Thank you for your reply. I understand that people can spoof a sender address...making it look like it came from someone else. But I thought that if you hover over or click the sender address, then you see where it really came from. Is this not true?  

Highlighted
Gold Problem Solver

Re: pfishing sent email from xfinity.com


@ wrote: ... I thought that if you hover over or click the sender address, then you see where it really came from. 

Sorry, no. Scammers can hide the true source of an email completely, thanks to botnets and anonymizing email relays run by ignorant or unscrupulous persons, to name just two possibilities. Hovering over a link may not show the true destination either: see any Google search result.

Highlighted
New Poster

Re: pfishing sent email from xfinity.com

I learned something new here. Thank you.