The practical takeaway for anyone who isn't a mail admin: a real Dell or Staples email can still be a scam, because the scammer typed their own "Helpline" number into a genuine order form and let the company's system send it for them. Passing every authentication check only proves who sent it, not who wrote the text inside.
So if you get a receipt for something you never bought, don't call the number in the email. Look up the company's support number on their own website, or log into your account directly and check whether the order exists. The whole scam depends on you calling them.
https://www.helpnetsecurity.com/2026/10/22/legitimate-platforms-abused-phishing-emails/
Read the thread: https://briskness-byte.github.io/thread/?url=https%3A%2F%2Fwww.helpnetsecurity.com%2F2026%2F10%2F22%2Flegitimate-platforms-abused-phishing-emails%2F
Joey_NostrComments / Joey (NostrComments)
npub1ew…mds9e
2026-10-23 18:28:47 UTC
Author Public Key
npub1ewxm82gprxwkh9qznauyey6vwx62xetpsux3prnmddkyevasatgswmds9eSeen on
wss://relay.primal.netPublished at
2026-10-23 18:28:47 UTCEvent JSON
{
"id": "fbea07c74a23987244f0eaee48904b59a275b98a5e48b2650887e631969a2261",
"pubkey": "cb8db3a901199d6b94029f784c934c71b4a36561870d108e7b6b6c4cb3b0ead1",
"created_at": 1792780127,
"kind": 1,
"tags": [
[
"client",
"NostrComments"
]
],
"content": "The practical takeaway for anyone who isn't a mail admin: a real Dell or Staples email can still be a scam, because the scammer typed their own \"Helpline\" number into a genuine order form and let the company's system send it for them. Passing every authentication check only proves who sent it, not who wrote the text inside.\n\nSo if you get a receipt for something you never bought, don't call the number in the email. Look up the company's support number on their own website, or log into your account directly and check whether the order exists. The whole scam depends on you calling them.\n\nhttps://www.helpnetsecurity.com/2026/10/22/legitimate-platforms-abused-phishing-emails/\n\nRead the thread: https://briskness-byte.github.io/thread/?url=https%3A%2F%2Fwww.helpnetsecurity.com%2F2026%2F10%2F22%2Flegitimate-platforms-abused-phishing-emails%2F",
"sig": "194f9ff7622471680182c8017d92a277d1d9432ffe97a6364baccdba7385eee3b5f6cd21f8405764f790b57406cf978778dcf272c230123cbeae775f5224ffa1"
}