Elliott C. Back: Internet & Technology

GMail Blocking Chase Emails as Spam

Posted in Google, Spam by Elliott Back on September 23rd, 2011.

For whatever reason, Gmail keeps blocking my account alert emails from Chase. In my spam folder, guess which are really spam, and which are legit?

When I move them to my inbox and/or mark them as spam, I get warned that “Warning: This message may not be from whom it claims to be. Beware of following any links in it or of providing the sender with any personal information.”

How do I get Google to believe that my emails from Chase are real? I keep marking them as not spam, but that doesn’t help! Ridiculous that Gmail is hurting Chase Bank’s ability to conduct business and manage their fraud/risk. I highly suspect that account fraud alerts would get thrown into the same bucket…

Update 1:

The message headers seem to indicate a failure between Cornell and Google’s servers on SPF (Sender Policy Framework):

Delivered-To: XXXX@gmail.com
Received: by 10.231.53.18 with SMTP id k18cs6777ibg;
Sat, 24 Sep 2011 05:13:22 -0700 (PDT)
Received: by 10.52.93.112 with SMTP id ct16mr4101007vdb.423.1316866401115;
Sat, 24 Sep 2011 05:13:21 -0700 (PDT)
Return-Path: <Chase@alerts.chase.com>
Received: from limestone3.mail.cornell.edu (limestone3.mail.cornell.edu. [128.253.83.163])
by mx.google.com with ESMTP id bz6si11946296vdc.126.2011.09.24.05.13.20;
Sat, 24 Sep 2011 05:13:21 -0700 (PDT)
Received-SPF: fail (google.com: domain of Chase@alerts.chase.com does not designate 128.253.83.163 as permitted sender) client-ip=128.253.83.163;
Authentication-Results: mx.google.com; spf=hardfail (google.com: domain of Chase@alerts.chase.com does not designate 128.253.83.163 as permitted sender) smtp.mail=Chase@alerts.chase.com; dkim=hardfail header.i=@alerts.Chase.com

X-CornellRouted: This message has been Routed already.

Update 2: A helpful Googler/blog reader said this:

It appears to be a problem specifically with Cornell. It’s a known issue when Cornell is forwarding e-mails to GMail. The Cornell IT admins [are fixing] their exchange server. In the meantime you can fix this with either:

- have Chase send info direct to @gmail.com
- create a filter to “never mark as spam” for that address.

My solution is to change my old rules to email directly to gmail rather than forward through Cornell’s servers.

The Independent is Malware

Posted in Google, Spam by Elliott Back on November 27th, 2010.

At least, if you’re using Chrome. While I’m not the only one to notice this, no action has yet been taken by either The Independent or Google. Here’s the problem, as seen on The Independent home page:

As you can see, they show a yellow toolbar across the top of their site with the text: “The Independent now has a Google Chrome Extension. Get the latest news on the topics you like, direct to your browser.” There is an install button and a grey x to hide the bar. However, this is mimicking the kosher Chrome UX for extensions. For example, when extensions crash, they display a similar bar:

I’m not sure what’s to be done; the marketing is deceptive and shady, tricking people into thinking that Google/Chrome/their browser is encouraging them to install a new/cool/shiny extension for The Independent’s website. The extension itself, which I am not installing ever, seems relatively innocuous.

Credit Card Fraud at Zoosk.com

Posted in Crime, Finance, Spam by Elliott Back on October 17th, 2010.

I received the following warning from Chase bank via email and a series of harried transactions. Apparently someone decided to try to use my Chase British Airways BA Visa card to signup for an e-dating site. The baddie was doing this from London, Ireland, and had tried four times today with different expiration dates and CSV confirmation codes:

URGENT: Confirmation of Recent Transaction
Your Account Ending in XXXX

Dear ELLIOTT:

As part of our ongoing effort to protect your account and our relationship, we monitor your account for possible fraudulent activity. We have recently attempted to contact you by phone and/or text message but we have been unsuccessful in reaching you. We need to confirm that you or someone authorized to use your account made the following transaction on your British Airways Visa account ending in XXXX:

Transaction for $54.94 at ZOOSK.COM was declined on or around 10/17/2010 in LONDON, Ireland.

Zoosk is some kind of scammy online dating site that I definitely did not sign up for. Currently, it looks like this:

Apparently a lot of people think Zoosk itself sucks. I wonder if it’s the company itself is behind this. I can’t really see people using stolen credit cards to sign up for a dating service. Maybe it’s just a test run? Or an accident?

Next Page »