News for hackers. Stuff that matters.

A comment on Scammed out of $130K via fake Google call, spoofed Google email and auth sync. Parent comment

Re:Scammed out of $130K via fake Google call, spoofed Google... by throw_m239339 on Tuesday September 16, 2025 @01:40PM (#45265339)
It's my understanding that emails have headers, just like http responses, and the app might have displayed that fake header instead of verifying the provenance of the email and displaying where it actually came from. So it is a UI/UX issue.
[ Parent | on HN ]
Re:Scammed out of $130K via fake Google call, spoofed Google... by alaithea on Tuesday September 16, 2025 @01:43PM (#45265378)
Why email clients have started hiding/not providing access to headers is beyond me. It seems like an anti-pattern. There have been many times recently where I've wanted to check the headers because an email was suspicious, only to find I couldn't.
[ Parent | on HN ]