

A little more detailed article on the SPF record is linked here in case you want to know more about the Sender Policy Framework. If it did, the email would have gone straight into his spam folder. This incident could have been avoided if basic email protection measures were in place on the client's side.įirst of all, the company had it's SPF record in place but the client's server did not run SPF record checks. As it turned out the email was originating from a malicious 3 rd party group, and because the client had weak email filtering they managed to get away with the fraud and with the client's money. The client was not suspicious as he had some unpaid bills, so he transferred the requested amount to the bank account, just as it was detailed in the email.

A while ago a broker company I was working with had an incident where a client received an email from a sender pretending to be a member of the company and demanded payments to be made to a specified bank account number.
