spam
Addresses to report spam
If you send me spam, I automatically turn around and forward it to the following addresses:
- spam@uce.gov
- spam@barracudanetworks.com
- reportspam@ipswitch.com
- submit@respam.com
- spam@sendusspam.com
- spam@mailpolice.com
- spam@mail-filters.com
- spam@postini.com
- spam@support.trendmicro.com
- junk@brightmail.com
- ...and my secret spamcop.net address
When it also involves phishing, I add the following:
- phishing-report@us-cert.gov
- scams@fraudwatchinternational.com
- reportphishing@antiphishing.org
- fraud@phishfraud.com
- Report@reportphish.org
Then two of the most popular spams I get are stock tips and cialis/viagra junk, so I forward them to enforcement@sec.gov and webcomplaints@ora.fda.gov respectively. Then 419 Nigerian scams to get 12 million dollars of free money for just "borrowing" my checking account, get forwarded to 419.fcd@usss.treas.gov, even though I don't think much can be done about them. If I'm in a particularly bad mood, I forward OEM/cheap software spam to piracy@microsoft.com, spamwatch@symantec.com, and/or piracy@adobe.com, since Symantec, Adobe, and Microsoft are almost always part of their catalog.
Addresses to report phishing
I just got a very good phishing email from someone who registered the domain chase-survey.com only 2 days ago. It was so good, I was actually motivated to report it to someone. With some Google searches, I found to forward an email with full headers as an attachment in Thunderbird, I actually had to be viewing full headers, too, otherwise, it just puts the standard basic 4 headers in the forward. Better yet, drag the phishing message into a new email as an attachment to get the full headers without having to view full headers.
I found the following addresses to forward phishing to:
spam at uce.gov
phishing-report at us-cert.gov
spoof at millersmiles.co.uk
scams at fraudwatchinternational.com
reportphishing at antiphishing.org
fraud at phishfraud.com
phishsubmit at wholesecurity.com
report at reportphish.org
I like to think the .gov addresses would be the most important to send to, but I bet they get a huge volume of emails, have a tiny staff, and are only able to follow up on a tiny percent of actual phishing.
