I just got a letter from court saying I made 49 threats to someone I had a problem with three years ago. This person presents "my emails" as evidence. I went through all my emails, and I haven't found a single one. The mail presented as evidence all come from my email address. He asks for 20,000 dollars for moral damage! How can this happen?
|
Is it a scam?First of all, make sure that you actually got the letter from a court. This might very well be a scam - it sure sounds like one. Do this to verify that the letter is real:
If it is not a scamIf it is not a scam, I see three possibilities:
In any case, what you need to do is get some legal advice. |
|||||||||||||||||||||
|
|
(Assuming US) No court is going to pre-emptively demand a settlement of $20K for a misdemeanor(!!!) before you've even had a chance to testify. Furthermore, threats are a criminal matter; this isn't a property dispute-- the police would have questioned you long ago, before this ever went to court. If this letter truly claims to have been issued by a court (and you're not misreading it), it's bogus. Call the magistrate's office for the issuing municipality and verify. If it came from a lawyer's office, it's a shakedown. Don't sweat it. Consult your own-- they may well tell you to just ignore it. The victim/scammer can demand whatever they want; it doesn't mean you're obligated to pay. Either way, someone's targeting you (possibly the "victim") and one of your first steps needs to be filing a police report to document the fact that someone is either making false accusations or committing criminal behavior in your name. It's easy, free, and sets a precedent that you can later point back to if this escalates or happens again. Whether or not this is bogus, under no circumstance should you talk to the (alleged) victim. |
|||||||||||||||||||||
|
|
Given the additional information in comments,
you must secure your email account. Change your password to a strong password you don't use anywhere else. Log out all other sessions. Since you use GMail, set up 2-factor authentication (that is, when someone attempts to log in, Google texts your phone to send a code which is needed to complete that access). Before you do that, in order to preserve access data, use the "Details" link at the bottom right of the GMail screen to show accesses to your account. Screenshot that data: it will change with subsequent accesses and the earliest ones shown will disappear. That's also the screen you use to sign out all other open sessions on your mailbox. Once you have secured as much access data as you can and signed out everywhere else, change your password. You may find that deleted emails are still retained in the Bin/Trash/Deleted folder (although I suspect he will have removed anything relevant from here as well). Unfortunately, if he has gained access to your account, then the emails which appear to have been sent from your account have actually been sent from that account. Forgery protection is useless in this case, and it will be difficult to prove that you did not do that or that you did not delete emails. If your limited access log does not provide proof of access from a location which wasn't yours, then you will need Google to provide server logs, but that will not be easy to achieve. |
|||||||||||||||||||||
|
|
It is actually very easy to send an email and to enter the email you would like it to show as sent from. Here is one that i found on a quick google search I do believe it is a scam like all the others said. But it is very possible for someone to send emails that appear to come from you. |
|||||||||
|
|
Due to the nature of electronic mails, anyone can send a mail with any name from NASA to FBI to your neighbour. You need to raise the court's attention to this. Get the court release the full emails, including its headers. The headers will tell that the emails did not go through your mail server (or the mail server you use). If you are using an email giant like Google, Yahoo, etc., like 99% of other people use, it's pretty easy to prove you're right, because the absence of DKIM is a clear sign of spoofing. If not, you might have to prove that you did not have access to the server the mail is originated from. P.S.: Modern email providers automatically use DKIM and SPF for validating authority, and some of them (Gmail for example) constantly mark emails as spam whose senders don't use these. I think it's by now a widely accepted standard, and exchanging mails without these techniques is just like regular mail where you claim to be yourself just by writing your name on the envelope. |
|||||||||||||||||||||
|
|
This this is on security, I'll ignore the legal questions and go to the e-mail issue: It is absolutely trivial to fake e-mail. Even making a reasonably good fake that stands up to surface scrutiny is not very hard. Inspecting headers may or may not be worth the effort, they can be faked, too. Especially if you have no access to the original mail resting on the original server that is not under the control of the person making the claim, then an e-mail is basically just a text that I can just as well fabricate wholesale. In short: Someone claiming to have mails from you that you didn't send does not mean your mail was hacked. If it had been sent through your (hacked) account, you would most likely find them in the outbox or in the trash can. (of course, the attacker could clean up after himself, but why should he? the mail actually being there makes his case stronger, and you claiming you didn't send it when it's in your outbox is a weak defense) tl;dr: Most likely, nobody hacked your mail, someone just forged one or made up the whole thing. |
|||
|
|
protected by Community♦ 2 days ago
Thank you for your interest in this question.
Because it has attracted low-quality or spam answers that had to be removed, posting an answer now requires 10 reputation on this site (the association bonus does not count).
Would you like to answer one of these unanswered questions instead?