why there is nothing like a “verified checkmark” for E-Mails of real companies like PayPal to distinguish their E-Mails from scams

1.91K views

why there is nothing like a “verified checkmark” for E-Mails of real companies like PayPal to distinguish their E-Mails from scams

In: 7499

69 Answers

Anonymous 0 Comments

There is. DMARC and DKIM are both ways to verify that the sender of an email with a certain domain (let’s say PayPal.com) actually owns that domain. Most current email clients will also display a warning if an email doesn’t verify.
But this is technology that was added on to email later, so it’s not watertight and not universally used. Email is also not controlled by one central company, so verification is limited to the domain name(of which ownership can be verified). Someone could still send you ‘valid’ phishing mails from visually similar domain names (something like peypal.com).

Now, verified profiles with centralized platforms can also have issues. In the case of Twitter, it is simply a question of money. If you pay $8/month, you’re verified. With other platforms, it’s usually down to people checking accounts. Which can take time, people can make mistakes, ‘parody’ accounts can get missed, etc. So it’s still worth it to be vigilant.

You are viewing 1 out of 69 answers, click here to view all answers.