Scam Email - Sender demanding BitCoin
Last modified on 14 May 2019 07:36 AM
StartMail takes the prevention and management of spam seriously. It has come to our attention that some users have been receiving emails stating that their StartMail account has been hacked, video content of them has been recorded, and ransom money has been demanded in Bitcoin. Based on the content we believe the message is a scam, also known as ‘spoofing’ – a tactic commonly used by spoofers in phishing and scam campaigns to trick recipients. More information on spoofing can be found here.
The spoofed email may look similar to, or be a variation of, the one below;
Additional research confirms this type of message to be a scam claiming the recipient’s email account has been hacked for extortion purposes.
*Article explaining scam email:
The reason why it may appear as if the email is sent from your inbox is that the sender has most likely spoofed your address (firstname.lastname@example.org) in the email header. Scammers can namely manipulate email headers to mimic a real email address. There is unfortunately not much we can do from our end to prevent these types of messages from being sent.
If you find that you have received a similar type of email, we recommend refraining from submitting any funds to the sender’s Bitcoin wallet. Instead, you can safely disregard the email as being authentic and mark the message as spam before deleting it.
As a safety measure you could considering changing your StartMail Account password, deleting and recreating your IMAP connections, setting up two-factor authentication (2FA) as an additional layer of security, and running a system scan of your computer using an anti-virus.
Information on how to complete these actions can be found in the following Support Center articles;
*Change Account Password:
*Delete and recreate IMAP connections
*Setup two-factor authentication (2FA):
If you are uncertain about a specific email, please feel free to forward the email to email@example.com.
Still haven't found the answer to your question? Click here to contact support.