Go to the U of M home page

Monday, June 11, 2018

Example 220: Email xxxx@umn.edu De-Activation

Personalized "warning" of email account closure

Message text:

From: <administrator@mail.com>
Date: Mon, Jun 11, 2018 at 4:48 AM
Subject: Email xxxx@umn.edu De-Activation
To: xxxx@umn.edu

Server Message

*Dear xxx@umn.edu
Our record indicates that you requested to close your recent email:
xxxx@umn.edu. This requires that we verify with you as soon as possible.
If the request was accidentally made and you have no knowledge of it, you
may now cancel the request below
*Cancel Request*
Note: Failure to cancel this request within 24 hours will result to Email
Service De-Activation (ESD) and all email data will be permanently lost.
*Email Administrator*
This message is auto-generated from E-mail security server, and replies
sent to this email can not be delivered.
This email is meant for: *xxxx@umn.edu <xxxx@umn.edu>*

Web forms:

fake login form to keep account from being "canceled"
fake login form to keep account from being "canceled"\
Claims of "success" in keeping account active
Claims of "success" in keeping account active

Things to note:

  • Email is personalized to individual recipient
  • Web form link carries ID info so webforms have account name
  • No UMN branding in forms
  • Email does not come from a UMN.EDU address
  • Email has no contact information
  • Filling in the form "fails" and makes you try again
  • Filling in the second time "succeeds" then redirects you to a real umn.edu page.