That was the subject line of a piece of unwanted e-mail (i.e., spam) that I received recently. Although the subject line was a bit nutty, even I have to admit that it was creative.
And that’s what I’m noticing . . . that spammers and phishers are getting more and more creative in their subject lines and targeting. Thousands of people fall prey to these e-mails every day. They enter their sensitive information on what appears to be a legitimate website–even some confusingly similar to their own banking institutions–and, before you know it, someone either tries to remove money from their bank accounts or, worse yet, assume their identity.
It’s getting bad out there. Really bad.
Here’s how we help stem spam at xynoMedia. I hope it will give you a few ideas:
1. Don’t use filters. Filters give too many false positives. How many times have you sent an e-mail to someone who tells you he or she didn’t receive it, only to have that person find your e-mail crowded among obscene enlargement and international dating offers?
2. Use challenge-response systems instead. You’ve seen this system at work, I’m sure. You send an e-mail to someone and, right away, that person’s system e-mails you back asking you to click a link to confirm that a real person with good intentions sent the e-mail.
The idea is that many of the robots used to send spam out won’t have enough “sense” to open the e-mail and click the link. What’s more, many of the reply e-mail addresses for spam are non-operational anyway, so the challenge e-mail won’t even be received.
Many people think this puts a barrier between you and someone who is trying to communicate with you. Not so. Many people are used to these systems by now, and since you only have to click once, it’s not really a bother. The reality is, people who really want to be in touch with you will take the time to click a link; those who don’t, won’t. Simple.
An example of a good challenge-response e-mail service is Spam Arrest. (BIG Hint: If you’re not a technical person, have someone walk you through the setup. The software is great, but setup is not exactly intuitive and the e-mail support stinks. You can purchase priority support for 10 bucks . . . which puts you at the front of the e-mail queue. Yes, I’m serious.)
3) Use first name-initial, full surname e-mail address conventions. It’s much easier to spot spam that’s addressed to “Dear LWest” than it is to “Dear Lena.” So rather than using lena.west@somecompany.com as your e-mail address convention, use LWest@somecompany.com and whenever you receive e-mail addressed to LWest, you know you can toss it because people who know you–or even people who don’t–would never refer to a real person that way . . . they would use your first name.
4) Never, ever, ever reply to spam. Not even to bail off their list(s). One reason for those seemingly genuine unsubscribe links is to get you to reply or click. The spammers then know that your e-mail address is a “live” e-mail account (meaning actually working, because they really don’t know whether an account is operational when they send the e-mail). They then take your name and e-mail address, move it to a “live” e-mail address list and sell your information to other, more advanced spammers for money. Sick, I know.
And . . .
5) If you’re ever unsure about a link, type it yourself. If you think that your bank has sent you an e-mail, take the time to pick up the phone and call to ask or open a new browser window and type in the website address yourself to log into your account to see if there’s a problem. Never click a link contained in an e-mail you don’t know. Not only can it lead you to a phishing website, but it can also possibly invisibly launch/install viruses and trojans onto your system. Not a good look.
Remember, spam is a business designed to put you out of business. You and your employees are your company’s best defense.