Is this possible? :alert: :alert:

I received an email from a bank confirming that payment had been made into my account. Now it turns out that the payment wasn't made. The bank says that that email address isn't one of theirs e.g. xxx@ybank.com. However, when I look at the message source it definately states that the "From" is @ybank.com.

The @ybank.com is definately their address and when I hit reply it comes up with xxx@ybank.com as the return address, so what I need to know is this

Is there a programme that can be used to disguise an email as coming from a different address than it actually is?

:alert: :alert:

It is not too difficult to fake an email address. I mean, In OUtlook or whatever, you just manually type in the your email address. It can be anything you want, so long as you are going through valid SMTP servers. That is the key. Look in the email's header and see if you can get the IP address or server (ie, mail1-23.mindspring.com or something). If you can get that, then you can see where the email went through, unless they were really clever. . . Anyways, to answer your question, it is not difficult to fake an email address at all. But, the servers it passes through will often give it away. Many times it will even have the sender's ip address, but if they have a clue what they are doing, it would not. If you need more info, please reply. But please do not post any IP's here if you find them. It is against the rules. :)

Hope this helps.

-Zack

http://www.mindshatter.com/zack/smanback1.gif

There are stacks of GUI 'Anonymous Mailers' out there...

Many of them are not anonymous, as they still reveal your IP but as long as you can input the valid SMTP server then you can send emails, for example, 'From: Bill Gates (BGates@Microsoft.Com)'.

If the banks servers are configured to allow connections to the smptp port then somebody could send the mail to you through the banks smtp server and change the email address to make it look legitimate, and im not 100% on this but maybe untraceble to.

uk_trader is right -

But, any bank that is that careless with their network security, well, I don't know if I would want them handling my money! :D

I mean, disallowing SMTP relaying is a very basic security precaution. I doubt they allow that, but if they actually do . . . Well, their admin doesn't have a clue in that case.

-Zack

LOL :D

They could have used a fake emailer bomber (or something like that do do it)