Protonmail - spoofed or improperly forwarded email?

[saffire]

Hello, i was ordering product from one of sponsors here in PA, i put order in email and send details, they will reply me with bitcoin adress and total cash.


I didnt know but there was arrow that you can click and it says:

"This email seems to be from a ProtonMail address but came from outside our system and failed our authentication requirements. It may be spoofed or improperly forwarded!""

What does it mean? Can I do anything about this?

 

[MinuteMaid]

It can mean 2 things :

1) It's a pure scam and somebody just modified the headers to send from their email.

2) They just use a PHP form so the email has been sent not through Protonmail and they don't use their SMTP servers so Protonmail think It's not coming from them, nothing to worry in this case

 

[saffire]

It can mean 2 things :

1) It's a pure scam and somebody just modified the headers to send from their email.

2) They just use a PHP form so the email has been sent not through Protonmail and they don't use their SMTP servers so Protonmail think It's not coming from them, nothing to worry in this case

thanks , but even tho its exactly email adress from sponsor? i never see this on my protonmail

 

[itconsulting]

thanks , but even tho its exactly email adress from sponsor? i never see this on my protonmail

You can send an email from any email address, you don't need access to if for that

 

[pupu]

Originally Posted by MinuteMaid2

That is correct.


They just use a PHP form so the email has been sent not through Protonmail and they don't use their SMTP servers so Protonmail think It's not coming from them, nothing to worry in this case

 

[saffire]

Originally Posted by MinuteMaid2

That is correct.


They just use a PHP form so the email has been sent not through Protonmail and they don't use their SMTP servers so Protonmail think It's not coming from them, nothing to worry in this case

i'm so dump, never seen anything like this and didnt know about it , i already send bitcoin to that adress, goodbye money

 

[saffire]

Originally Posted by MinuteMaid2

That is correct.


They just use a PHP form so the email has been sent not through Protonmail and they don't use their SMTP servers so Protonmail think It's not coming from them, nothing to worry in this case

but what i doesn't get it, how can third person can get to a email with all emails?

as you can see there, "scammer" replied with email i sent to sponsors and he got whole message which i sent to sponsor.

 

[pupu]

You should be ok does not seem to be a scam.

i'm so dump, never seen anything like this and didnt know about it , i already send bitcoin to that adress, goodbye money

 

[rAJJIN]

If you know your source you should know what kind of payment method he uses and how he communicates from past experiences.
If in doubt like that always double triple check before you send money.

There are spoof site that allow these scammers to disguise the email.
They can send you an email and it can look like it was from anyone.
There are a lot of tricky ways they fool you.
If he is reading all the emails he has probably also hacked YOUR email.
they do this with phishing tools.
Its why guys say never click a link in an unkown email.

I had my email hacked somehow a few years ago, it can happen with one slip theyll get ya.

 

[rAJJIN]

send me a pm if you want to talk it over.
Ill contact whoever it is if its a sponsor.

or PM them here just to have them confirm it is them you are talking to by email