|
Post by CertainHuman on Jan 31, 2023 10:13:44 GMT
For my baits I use Mail.com. I use this service because it allows me to setup email alias very quickly without having to setup an entire new email address. I never considered any potential security risks. Does anyone think it is safe to use mail.com or would I be better off using Gmail or something else? The big problem with Gmail is I think you need another email account or phone number to set one up.
I am not too knowledgeable in this area. Perhaps I should be. I don’t want any scammers somehow discover my irl location and details.
|
|
|
Post by headshotlv on Jan 31, 2023 21:59:33 GMT
@mail.com and their custom email domains sadly give away your IP. I don't think it's even possible to register an email with @mail.com using an VPN. I've in past gotten scammer IP's from their email headers from @mail.com's custom email domains. I would say its safe as longest you don't have an Static IP. Most of ISPs give out Dynamic IPs that have and will be reused by other people. There is a security risk is for scammer to trace back email headers (most of them are not that smart, unless you bait the new generation that could know about the trick or the more smarter ones that have deeper IT knowledge) but you can easily check yourself by tracing if it leads directly back to you. If the email headers doesn't lead anywhere near you, then you should be safe. Scammer can only use it to 'scare you' or raise suspicions that you are not located right where you claim to be but then it would be an very very very smart scammer because an average 419 scammers will not dig that deep into details and they don't know that these headers exist.
|
|
|
Post by CertainHuman on Feb 1, 2023 10:33:05 GMT
@mail.com and their custom email domains sadly give away your IP. Do you know of any email providers that do not do this? Essentially which email provider is best for baiting?
|
|
|
Post by Pricky on Feb 1, 2023 11:28:43 GMT
The big, free providers hide one's IP and host attachments on their servers. gmail and yahoo, for eg. I like gmail because of its huge, free storage allowance and extras like Google Drive.
|
|
|
Post by headshotlv on Feb 1, 2023 15:24:26 GMT
Gmail, Yahoo, iCloud, Yandex they hide your IP but ask for phone number. Outlook hides too but it doesn't ask for phone number as far I as know.
|
|
|
Post by CertainHuman on Feb 1, 2023 19:45:39 GMT
Thank you for this advice. I tried to create an outlook email account. They ask for the "Are you a robot" tests and I pass but it always just reloads or just doesn't work. I'll try again some other time.
|
|
|
Post by Pricky on Feb 2, 2023 12:37:10 GMT
There are ways around the request for a phone number.
|
|
|
Post by CertainHuman on Feb 3, 2023 11:57:57 GMT
So I managed to set up an account with outlook. I have sent a few emails to a few scammers and after a few days my account has been locked for suspicious activity. They want me to send a code to a phone number to unlock it. I’m glad a system like this is in place if I’m honest.
I don’t want to use my real phone number at all. Is there another way around this. Please excuse all these questions but I still consider myself new to all this.
|
|
masterbaiter
Yahoo Boy
Mentee of the Month
“My mum used that on her lips. You want me to put that on my todger?” Duke of Sus-sex
Posts: 47
|
Post by masterbaiter on Feb 3, 2023 21:11:20 GMT
I'm trying to think of free ways, but all would need some form of pay with a credit card online. If you wanted a phone not tied to you at all it would be to buy a prepaid phone like tracfone. If your in the US it looks like a cheap plan and phone is going to run $60 online at walmart. If you go in store and spend in cash you wouldn't have a name attached. I'm just wondering if they would have to sign up with an email on the phone once it's active. If you pick this I would make a few emails in gmail and outlook. Give yourself plenty of characters/genders all that. I thought that once the phone number was verified you could remove it from an account but maybe not on outlook or gmail.
|
|
|
Post by LittleBrat on Feb 3, 2023 22:42:18 GMT
Try Proton mail, it's free and hides your ID from what I've read
|
|
|
Post by CertainHuman on Feb 6, 2023 10:29:38 GMT
^^ Late reply. I will try this. The problem with outlook is that it locked me out of my account after a week of emailing scammers. A good feature for sure but not helpful for me.
I wonder what the scammers do in this situation. They must face the same problems. Perhaps they use their own phones??
|
|
booniestomper
Yahoo Boy
I finally won the lottery, and have avaliable free medic alert, 0%APR 50K loan, debt elimination, ,
Posts: 18
|
Post by booniestomper on Feb 10, 2023 14:04:58 GMT
Noobie here (and also somewhat a troglodyte though more street wise than DM who won't touch anything Google, but also leaves doors unlocked, and password written down close to her PW protected computer she pays bills with....)(But to her I'm just paranoid, pessimistic and cynical when I tell her yes, there's a gazillion dishonest scammers out there all trying to get at all of us!) ...I am contemplating using an antiquated email @netzero.com which I set up in the 1980's (right after @bigfoot.com) originally used for dial-up connection and so old it has no verification and if it by some chance does leak my listed address, it's been 30-40 years since I lived there. Also, thinking a good way to stat wound be to forward recent stuff in my yahoo spam folder (a.k.a. scam folder) to the netzero, then use 'reply', doctor the header info toget rid of the yahoo and the forwarding traces, and bcc myself back at yahoo. Any thoughts on if this might be good, albeit painfully lethargic (v e r y s l o oo w website)? Oh, and certainly the scammers use stolen/black market phones, unlocked and cloned, and burner phones and SIM cards!
|
|
|
Post by Admin on Feb 10, 2023 15:11:47 GMT
I've only looked through what this email provider claims and it looks pretty good. Free (there are paid plans but the basic one is free), no phone number needed, strips IP. tutanota.com/
|
|
|
Post by CertainHuman on Feb 10, 2023 19:25:28 GMT
^^^Thanks for this suggestion. (you're welcome! - JC)
I am trying out Proton Mail for the moment. If that fails I will fall back on this.
I just hope I will be able to get back into baiting properly without having to worry about this again but it is what it is.
|
|
|
Post by headshotlv on Feb 10, 2023 22:25:39 GMT
Yeah it was problem with outlook/hotmail when I started too. They have some anti abuse system that locks you out, last guyman I baited that had it got locked out of it too for many times.
I don't know about baiting with tutanota or protonmail. I've avoided them because smarter guyman sometimes suspect and notice that its not usual email address like @outlook.com, @gmail.com, @yahoo.com, etc.
Its an trend that email providers move to phone verifications, you either have to find an email provider that doesn't require verification or get an pre-paid sim. What you could try is to get an email address from another country. Some of them still don't have phone verifications, but their interfaces isn't in English. Like I said earlier in my posts, IP is smallest thing you need to worry about if you don't break local laws and abide by rules and ethics. Scammers cant trace your real life identity just with your IP, its coincidences that give them your location away like using your work IP that will most likely point bounce back. Most of the IPs in service are dynamic ones that don't point directly at your location as they get rotated as its expensive for ISP's to give every user an unique static IP.
|
|
|
Post by CertainHuman on Feb 10, 2023 22:42:07 GMT
headshotlvI always found Mail.com easiest for me. The email alias are very useful. I was using a super generic address @email.com or something. No scammers I baited ever had an issue with it. I think I'll stick to Proton mail for now (unless it locks me out again) because I have one or two baits in the works already. I'm just not too keen for a scammer to potentially obtain my IP. I really don't have much knowledge on this subject so I appreciate all this help. Also, I'm not keen on getting a phone and sim just for an email. I don't want to call scammers so it wouldn't be useful for me. Maybe I'm trying to have my cake AND eat it.
|
|
|
Post by therealswordy on Feb 16, 2023 16:47:45 GMT
I use protonmail as my main admin account - I have baited with it in the past but if you forget your encryption key you are screwed. I have the Protonmail Plus paid account and that gives me I think 10 email addresses, and a choice of domains. Most characters I use have gmail or Yahoo accounts. I get round the phone numbers by having PAYG sim and a spare handset for initial verification etc, or use authenticator keys on my computer, I prefer computers to phones anyway as I find phones intrusive. I do have one with it's own complete "character" account set up so I can use that number if needed. I do have to remember not to give out to too many scammers as I sometimes bait the same scammer with two characters at the same time, and it would be odd if they had the same number. I also have a couple of additional Skype numbers which are geo located to my main characters JIC, I can use the US number to receive texts as well.
I also run a couple of VM's as well as virtual android phones if I need to use additional whatsapp installs - again this is rare for me or my characters.
|
|
|
Post by CertainHuman on Feb 17, 2023 13:38:57 GMT
^^^ therealswordyHonestly, I'll probably use Proton until it asks me for a phone number. If/when that happens, I'll consider moving back onto Mail.com despite the IP issue. I never had a problem with it before. Also, I don't want to pay for an account.
|
|
|
Post by LittleBrat on Feb 17, 2023 17:16:28 GMT
^^ I'm glad proton mail was helpful, I've seen scambaiters suggest it, so i thought it would be good one. I LOVE free apps and programs and try to use them as much as I can, helps the creators out as well as me.
|
|
|
Post by therealswordy on Feb 25, 2023 19:09:11 GMT
^^^ @certainhuman - Proton will ask for a phone number or email for account recovery purposes, in common with most other accounts - even free ones. You are required to have at least one account recovery method (email and/or phone), and at least one data recovery method (recovery phrase and/or recovery phrase). If you can't recover your data then there is no way of decrypting historical emails.
|
|