<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Email |</title><link>https://yacinesahli.com/tags/email/</link><atom:link href="https://yacinesahli.com/tags/email/index.xml" rel="self" type="application/rss+xml"/><description>Email</description><generator>HugoBlox Kit (https://hugoblox.com)</generator><language>en-us</language><lastBuildDate>Mon, 31 Mar 2025 22:07:21 +0200</lastBuildDate><image><url>https://yacinesahli.com/media/icon_hu_5a9236d0e06afd2b.png</url><title>Email</title><link>https://yacinesahli.com/tags/email/</link></image><item><title>Best buy email scam Best Buy Notifications</title><link>https://yacinesahli.com/blog/best-buy-scam/</link><pubDate>Mon, 31 Mar 2025 22:07:21 +0200</pubDate><guid>https://yacinesahli.com/blog/best-buy-scam/</guid><description>&lt;p&gt;A few days ago, I received a strange notification email from Best Buy. At first, I assumed it was just spam. However, since it wasn’t flagged by my anti-spam filter, I decided to take a closer look, just to be sure. Upon inspecting the email, everything appeared legitimate—there were no immediate signs of it being spam. This prompted me to investigate further.&lt;/p&gt;
&lt;p&gt;
&lt;figure &gt;
&lt;div class="flex justify-center "&gt;
&lt;div class="w-full" &gt;
&lt;img alt="Screenshot of the phishing email showing the order notification with fake phone number"
srcset="https://yacinesahli.com/blog/best-buy-scam/spam-email_hu_c1bfbc3a8ce10467.webp 320w, https://yacinesahli.com/blog/best-buy-scam/spam-email_hu_3ba82abfbd3fcccd.webp 480w, https://yacinesahli.com/blog/best-buy-scam/spam-email_hu_83a9f7738b6dc0ea.webp 760w"
sizes="(max-width: 480px) 100vw, (max-width: 768px) 90vw, (max-width: 1024px) 80vw, 760px"
src="https://yacinesahli.com/blog/best-buy-scam/spam-email_hu_c1bfbc3a8ce10467.webp"
width="760"
height="665"
loading="lazy" data-zoomable /&gt;&lt;/div&gt;
&lt;/div&gt;&lt;/figure&gt;
&lt;/p&gt;
&lt;p&gt;
&lt;figure &gt;
&lt;div class="flex justify-center "&gt;
&lt;div class="w-full" &gt;
&lt;img alt="Continuation of the phishing email showing more details of the fake order"
srcset="https://yacinesahli.com/blog/best-buy-scam/spam-email-2_hu_dc566c0796c348b0.webp 320w, https://yacinesahli.com/blog/best-buy-scam/spam-email-2_hu_db5b75aa49d914bc.webp 480w, https://yacinesahli.com/blog/best-buy-scam/spam-email-2_hu_89bf62880286371b.webp 760w"
sizes="(max-width: 480px) 100vw, (max-width: 768px) 90vw, (max-width: 1024px) 80vw, 760px"
src="https://yacinesahli.com/blog/best-buy-scam/spam-email-2_hu_dc566c0796c348b0.webp"
width="760"
height="666"
loading="lazy" data-zoomable /&gt;&lt;/div&gt;
&lt;/div&gt;&lt;/figure&gt;
&lt;/p&gt;
&lt;p&gt;After carefully analyzing the sender&amp;rsquo;s email address and the reply-to field, I confirmed that the notification email was indeed authentic and sent by Best Buy. This puzzled me, as I’m based in Belgium and don’t use Best Buy. The unexpected order notification led me to double-check all my credit cards to ensure none had been compromised.&lt;/p&gt;
&lt;p&gt;The objective of this scam email becomes apparent when you spot the phone number included in the address field. The scammer cleverly inserted their contact number with the call-to-action:&lt;/p&gt;
&lt;div class="highlight"&gt;&lt;pre tabindex="0" class="chroma"&gt;&lt;code class="language-fallback" data-lang="fallback"&gt;&lt;span class="line"&gt;&lt;span class="cl"&gt;CONFIRMATION PENDING
&lt;/span&gt;&lt;/span&gt;&lt;span class="line"&gt;&lt;span class="cl"&gt;QUESTION&amp;#39;S CALL US
&lt;/span&gt;&lt;/span&gt;&lt;span class="line"&gt;&lt;span class="cl"&gt;(888) 929-5742
&lt;/span&gt;&lt;/span&gt;&lt;span class="line"&gt;&lt;span class="cl"&gt;Salt Lake City, UT 84105
&lt;/span&gt;&lt;/span&gt;&lt;/code&gt;&lt;/pre&gt;&lt;/div&gt;&lt;p&gt;Clicking on the link in the email to view the order status reveals that the order has already been cancelled. It’s likely that the scammer exploited Best Buy’s free cancellation policy. They placed an order, used the notification to send the scam email, and then cancelled the order shortly afterward.&lt;/p&gt;
&lt;p&gt;
&lt;figure &gt;
&lt;div class="flex justify-center "&gt;
&lt;div class="w-full" &gt;
&lt;img alt="Best Buy order details page showing the order as cancelled"
srcset="https://yacinesahli.com/blog/best-buy-scam/order-details-page_hu_34fad25267dfff8b.webp 320w, https://yacinesahli.com/blog/best-buy-scam/order-details-page_hu_7b40fb5ab8681019.webp 480w, https://yacinesahli.com/blog/best-buy-scam/order-details-page_hu_5496ce5d7e308eeb.webp 760w"
sizes="(max-width: 480px) 100vw, (max-width: 768px) 90vw, (max-width: 1024px) 80vw, 760px"
src="https://yacinesahli.com/blog/best-buy-scam/order-details-page_hu_34fad25267dfff8b.webp"
width="760"
height="399"
loading="lazy" data-zoomable /&gt;&lt;/div&gt;
&lt;/div&gt;&lt;/figure&gt;
&lt;/p&gt;
&lt;h3 id="why-this-scam-works"&gt;Why this scam works&lt;/h3&gt;
&lt;p&gt;This scam is particularly effective due to the following reasons:&lt;/p&gt;
&lt;ol&gt;
&lt;li&gt;
&lt;p&gt;&lt;strong&gt;Address Field Exploitation&lt;/strong&gt;&lt;br&gt;
There is no validation to ensure the address is legitimate. This allows scammers to insert any content they want in the address field.&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;&lt;strong&gt;Lack of Email Verification&lt;/strong&gt;&lt;br&gt;
Best Buy doesn’t verify the buyer&amp;rsquo;s email address. This makes it easy for scammers to send order notifications to any email address, even if they don’t own it.&lt;/p&gt;
&lt;/li&gt;
&lt;/ol&gt;
&lt;p&gt;By leveraging a genuine order notification from a trusted company like Best Buy, this scam easily bypasses most email spam filters.&lt;/p&gt;
&lt;hr&gt;
&lt;h2 id="how-to-avoid-falling-for-this-type-of-scam"&gt;How to Avoid Falling for This Type of Scam&lt;/h2&gt;
&lt;p&gt;Simply verifying the sender&amp;rsquo;s email address won’t be enough in this case. To stay safe, follow these steps:&lt;/p&gt;
&lt;ol&gt;
&lt;li&gt;
&lt;p&gt;&lt;strong&gt;Stay Calm and Think Critically&lt;/strong&gt;&lt;br&gt;
Don’t rush to call the first phone number you see in the email.&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;&lt;strong&gt;Double-Check Your Accounts&lt;/strong&gt;&lt;br&gt;
Carefully review your credit card and bank statements to confirm whether there’s been any unauthorized transaction.&lt;/p&gt;
&lt;/li&gt;
&lt;/ol&gt;
&lt;hr&gt;
&lt;h2 id="conclusion"&gt;Conclusion&lt;/h2&gt;
&lt;p&gt;Stay vigilant and cautious when receiving unexpected notifications, even if they appear to be from trusted sources. Always verify the details and think twice before taking any actions suggested in the email. Scammers are becoming increasingly sophisticated, so awareness is your best defense.&lt;/p&gt;</description></item></channel></rss>