[Home] :: [Support] :: [FAQs]

Common Spammer tricks and tips to avoid them

Here's how you can avoid some of the tricks spammers use to get your email address.

• Common Spammer Tactics
• Tips to Prevent More Spam

Common Spammer Tactics

"Help! My Inbox is being overrun with spam! How do spammers get my address?"

Some of the most common questions we receive from our users are about spam. People feel it is getting worse, and they want to know why. Spammers are employing more advanced tactics and getting more aggressive in their spamming techniques. To understand how to stop spam, you should learn some of the tricks that spammers use to gain access to your Inbox.

Dictionary attacks:

The spammer takes a "dictionary" of common words and names, combines them, and sends email addressed to all different variations such as johndoe1@example.com, johndoe2@example.com, johndoe3@example.com.

Spammers typically do this at leading email providers that have a large base of users. LMi's Spamassassin service can identify and prevent many dictionary attacks.

Email spoofing:

The spammer trick of choice these days, email spoofing, uses a faked email header that makes an email message look like the message came from someone or somewhere other than the spammer. It's fairly easy to make an email appear that it's sent from your own address or a seemingly credible source. Spammers use spoofing to get you to open and respond to their mail. Remember, you should never respond to unsolicited email.

Spoofing LMi

Spammers try to spoof or imitate companies in the hope that you will submit your personal account information. Please be aware that LMi will never ask you to email your personal information such as social security number, credit card numbers, etc.

Social engineering:

This ploy tricks users into opening the spam by pretending to know the person or trying to lure the person with a "personal" subject line. Typical subject lines include "Hey how are you?," "Urgent and Confidential," "We need to meet," "I have money for you," or "It snowed again." Avoid this trick by never responding to unsolicited email.

Mining message boards and chat rooms:

Do not post your email address in public places -- treat it like you would your phone number. If your email address appears on a message board, in a chat room, or any public place, spammers can use automated robots, or "bots," to search the Internet and grab your email address.

Open proxy, third-party servers:

Open proxies are third-party servers that allow spammers to send mail while hiding their true identities and Internet locations (IP addresses). Many spammers use these open proxy servers to help maintain anonymity. LMi's use of internal and third-party open-relay blocklists proactively protect you from this technique.

Web beacons:

An email may contain an image that is invisible to the recipient -- this is sometimes called an "invisible GIF" or "web beacon." Once the email is opened, the spammer is alerted that your address is "live." LMi advises that you don't open email messages if they appear to be spam.

Inserting random strings of text and characters:

To try and get through spam-control filters, spammers will insert random strings of text throughout the email to make the spam appear unique from other email. Sometimes they do this with email headers by adding spaces and characters like this: V_I_A_G_R_A. You can help fight this type of spam by not opening or responding to it.

Chain Letters:

Many of us receive chain letters that invite you to forward the message on to your friends. Sometimes it will say you will get five cents for every email or bad luck if you send to less than five people. These are hoaxes created to promote spam. Never forward these emails thinking you will receive money for each recipient of their email.

Tips to Prevent More Spam

In addition to requesting SpamAssassin for your account, here are some other spam-fighting tips:

• Protect your email address - treat it like your phone number.
• Never send your credit card number or other personal information in an email. LMi will never ask you to send this type of information.
• Don't post your email address in public places (e.g., newsgroups, message boards, chat rooms) where spammers mine for email addresses.
• Never respond to unsolicited commercial email - this can alert the sender that your email address is valid.
• Never click on a URL or web site listed in spam - this will also alert the sender that your email address is valid.
• Never forward spam chain letters.