Dr HamFeather

@comicaurora

pain and misery and suffering <3

bonus doodle inspired by server shenanigans below the cut:

You're being targeted by one of the cleverest scams going right now, and the reason it works is uncomfortable: the email genuinely came from PayPal.

The trick is in the subject line, not the email

When most people think "phishing email," they picture sketchy senders, broken English, and links to weird domains. This scam is the opposite. The email passes every authenticity check — SPF, DKIM, DMARC, all green. It comes from PayPal's actual mail servers. The fonts are right. The footer is right. The unsubscribe link works. If you forwarded it to a security expert and asked "is this really from PayPal?" they'd have to say yes.

So how is it a scam?

Scammers have figured out that PayPal lets anyone send small amounts of money to anyone else, and that PayPal will dutifully email the recipient a notification. The scammer sends you a payout of, say, one Hungarian forint — about a quarter of a cent. PayPal's system then automatically generates and sends you a real, legitimate, fully-authenticated email confirming the transaction.

Here's the catch: the email's subject line is whatever the scammer typed when they set up the payout. PayPal doesn't sanitize it. So they write something terrifying like "Pending charge of USD 987.90 — call this number with questions" and PayPal's servers cheerfully deliver that subject line straight to your inbox, wrapped in a perfectly legitimate-looking notification.

Erin!!! "But I thought you were going to do Falst next-" shhhhh...! don't worry about it, he's next, I promise.

I saw a post about someone chiding Millennials for not knowing about JKRowlings transphobia, and asking how it is at all possible that people can exist in the world and the internet and, you know, not know.

Which I mean, I get. It is so present in so many of my online spaces that it seems astounding that someone could simply be ignorant! It feels impossible!

But let me tell you a story:

I went on a girls trip with a bunch of friends. All of us are rather incredibly liberal and all of us are incredibly online.

One girl would not stop talking about Harry Potter.

At one point, another girl asked her why she was ok with supporting it, and she had no real clue that JK Rowling was at all transphobic. She had heard that she likes to support Lesbian causes and thought “oh ok cool!” And that was it. She was AGOG with the news and rather horrified.

I must once again emphasize that she was an incredibly online person. She’s a foodie and a restaurant blogger.

Later in the trip we were picking restaurants and I suggested one I found on Google, and she gasped at me. Actually gasped, asking how I could ever be okay picking that one.

The shock must’ve been on my face, because she then told me all of the shitty things that restaurateur does. He abuses staff. Underpays them. Fires them on a whim. Is known for being one of the worst people to his employees in the entire restaurant business on this coast.

And she was so shocked I had never heard of this. Because in her mind, I was just as online as her. And in her online world, EVERYONE knew about this guy.

So I think the moral of this story is: always approach the other person with some empathy. Even online people, even people you think MUST know about how bad people are, may not have heard. It may truly be just them being on a different sphere of the internet than you.

So be gentle, be kind when letting people know they might not have heard about the cancellation of XYZ person. Don’t assume that everyone knows all the same info as you.