Re: [Evolution] Forwarding a mail to action fraud that is potentially fraudulent

[Steve T <stevetucknott yahoo co uk>]

On Thu, 2022-09-15 at 12:22 +0100, Pete Biggs wrote:
> OK. A few observations.  
>
> The mail must be using different SMTP servers. It's unlikely that an
> SMTP server would treat mail differently from different clients.
>
> The fact that the SMTP service used by Evolution detects the phishing
> email, but it's not being detected before it got delivered to you
> indicates that they are two different providers - it's not sensible
> that it would only detect it on outgoing mail!


> Personally, if it is detected by the outgoing SMTP server, and not the
> incoming one, then I would have a serious look at your mail provider
> and ask some questions. It may need some configuration setting to
> reject or spam bin known spam/phish - things are complicated in this
> respect if you use POP

I'm not sure that's  the case. I tend to allow spam through from the EMail services I use and I then deal 
with it within
whichever EMail client I use (usually Evolution). The EMail had had its Subject line altered to reflect that 
it was
'suspect' presumably by some server along the way. It was that modified mail that I tried to forward.
 
> Since the phishing attempt is detected by SANE, it's clearly a known
> phish, so sending it to Action Fraud is not a priority. There is
> guidance from NCSC about how to report phishing - including what to do
> if your mail provider blocks it.  See:
>
>  https://www.ncsc.gov.uk/collection/phishing-scams/report-scam-email
>
> Two things to note: they don't need to see spam binned stuff & if in
> doubt use a screen shot.
>
> P.
Thanks for that.