Spoof Emails

Options
Hello Community,


Our email for our Newsletters has been used of a fake Amazon suvey.  Unfortunatley we are getting emails from many angry people because they didn't get their Amazon $50 gift card after completing the survey.  The good news is, none of these people are any of our constituents.  Apparently someone just hijacked our email for phishing or spam.  Question, has something similar happened to your Organization, is there a way to stop or fight this?


Thanks,

Ron
Tagged:

Comments

  • Ronald Timm:

    Hello Community,


    Our email for our Newsletters has been used of a fake Amazon suvey.  Unfortunatley we are getting emails from many angry people because they didn't get their Amazon $50 gift card after completing the survey.  The good news is, none of these people are any of our constituents.  Apparently someone just hijacked our email for phishing or spam.  Question, has something similar happened to your Organization, is there a way to stop or fight this?


    Thanks,

    Ron



    Two technoligies can help you out here, but they're both a little tricky if you don't have someone who knows the more advanced website stuff.


    Sender Policy Framework (SPF) is more or less a signature that comes from BlackBaud's servers that proves authenticity. See the LO help article here.


    DomainKeys (DKIM) is a technology that lives in your DNS records (the company that registered your URL, e.g. GoDaddy, eNom, Google Domains, etc.). LO Help Article here.

  • Hey Ron,


    Assuming your e-mail was spoofed and the offenders don't actually have access to your e-mail account, this article may help as well: ​https://lifehacker.com/how-spammers-spoof-your-email-address-and-how-to-prote-1579478914


    That's a rotten situation. I hope it's resolved soon!
  • Thanks you Jeremy and Ami.  Some of the reading was very technical, but it has given us an avenue to look at.  I will be working with our Network team in regards to DMARC.

Categories