News for hackers. Stuff that matters.

A comment on Scammed out of $130K via fake Google call, spoofed Google email and auth sync.

Re:Scammed out of $130K via fake Google call, spoofed Google... by fkskammerz on Tuesday September 16, 2025 @01:41PM (#45265345)
Same exact scam happened to me three weeks ago and I almost fell for it. The guy was very sharp and sounded very authentic.

Ever since then I've been getting hundreds or thousands of Google notifications I've had to decline. Anyone know how people are able to send out hundreds of 2FA gmail notification popups without Google blocking this?

[ Parent | on HN ]
Re:Scammed out of $130K via fake Google call, spoofed Google... by thenickdude on Tuesday September 16, 2025 @06:29PM (#45269084)
This means you should still have the email from legal@, right? In that case you can solve the mystery of how they managed to pass DMARC by sharing the headers from it.
[ Parent | on HN ]