What it is
Messages that imitate banks, companies, government agencies or someone you know to ask for payments, personal data or clicks on links. This also covers anonymous emails with threats, blackmail or defamation. The technical header of an email holds important clues about where it came from.
How it works
- We analyze the technical header and the sending servers.
- We check domains, links and attachments without putting you at risk.
- We cross-check addresses and domains against other incidents.
- We deliver a technical report with the evidence we found.
What we will need from you
- The original email forwarded as an attachment, or the message source code (we explain how)
- Screenshots of the message
- Links and attachments mentioned (do not open them again)
- Date it was received
- What happened next: whether you paid, clicked or replied
- Boletim de ocorrência (police report), if you have already filed one
We never ask for passwords, verification codes or access to your accounts.