News for hackers. Stuff that matters.

A comment on Scammed out of $130K via fake Google call, spoofed Google email and auth sync. Parent comment

Re:Scammed out of $130K via fake Google call, spoofed Google... by teraflop on Tuesday September 16, 2025 @04:56PM (#45267947)
So any message from Gmail is treated as legitimate for google.com, and yet Gmail can't do its own checks on outgoing mail to ensure that unauthorized people don't put [email protected] in the From: header? Seriously?
[ Parent | on HN ]
Re:Scammed out of $130K via fake Google call, spoofed Google... by cpncrunch on Wednesday September 17, 2025 @01:01AM (#45271869)
No, gmail will never let you send from an address you don't own.
[ Parent | on HN ]