I have been receiving email that appear to be from some that I know. The first part of the email addressed to me is some one in my contact list Like Barb Smith. The second part of the email has the form VSmith@vaccsssaa.com. This is a made-up example.
The formal email address appears to be fake.
The email always suggest I open a link to some pictures.
I have never clicked on any of the links.
What kind of fraud is this?
From Gemini:
“This technique is known as Display Name Spoofing. It is a targeted form of phishing designed to trick you into dropping your guard by leveraging familiar names.
How the Scam Works
- The Setup: Email applications typically show the sender’s display name prominently, while hiding the actual email address behind it. Scammers change their account’s display name to a contact’s real name (e.g., “Barb Smith”), while using an unrelated, random email address (e.g., VSmith@vaccsssaa.com).
- The Trap: The invitation to view “pictures” is a lure. Clicking the link usually leads to a malicious website designed to infect your device with malware or prompt you to enter credentials on a fake login page.
- How They Got the Names: Scammers scrape publicly available information, data breaches, or compromised contact lists to pair your email address with names of people you may know.
Key Safety Steps
- Do Not Click Links: Your instinct to avoid clicking the links is completely correct.
- Verify the Full Address: Always check the text inside the angle brackets or tap the display name on mobile to inspect the actual domain (@domain.com).
- Report and Block: Mark these emails as “Phishing” or “Spam” in your email client so your provider’s security filters can block similar attempts in the future.”