EarthLink provides its customers with as much protection as it can from e-mail abuse. However, if you ever notice an instance of e-mail abuse, we encourage you to report all counts of the abuse and take the steps listed below to help prevent it from happening again. This article discusses Email Abuse related terms and solutions to help protect your account from compromise.
Spam
Spam is the common term used for junk mail. It is unsolicited e-mail sent to a large number of people who would normally choose to not receive them. If you've received spam in your Inbox, you can report it as spam by logging into EarthLink Web Mail, selecting the message and clicking the Spam button.
spamBlocker
EarthLink's Web Mail offers spamBlocker, a program designed to protect your Inbox from spam. SpamBlocker will help protect your email from spam even if you do not use EarthLink Web Mail. For help on configuring your spamBlocker settings, visit Adjusting spamBlocker Settings.
Email Address Spoofing
Spoofing is an act of forgery where a spammer alters an e-mail address and header information to make an e-mail appear that it is coming from another source. Many of these e-mail addresses are inactive and respond with a “bounced” undeliverable error. This error is returned to the e-mail address listed as the sender in the spoofed message. As a result, you may receive dozens or even hundreds of bounced messages for an e-mail you never sent. This issue usually clears up after the initial batch of bounces. If you receive an email pretending to be you, report it as spam in EarthLink Web Mail or forward the original email as an attachment to thisisspam@earthlink.net.
Fraud Emails
Fraudulent e-mails may contain links to phony websites or request you to share your personal or financial information. If you receive an fraud email, report it as spam in EarthLink Web Mail or forward the original email as an attachment to thisisspam@earthlink.net.
Phishing Emails
Phishing is a scam that tricks you into revealing personal or confidential information that the scammer can use illicitly. Usually, scammers will send e-mails with a link from a trustworthy Web site that you frequent to gain this information. The link will take you to a clone of this trustworthy Web site and once you have entered your personal information (login, credit card, etc.), then the scammers know your information and have access to your account. Phisher emails often try and trick you into confirming personal information like a password or account number. Please keep in mind that EarthLink will never ask you for your password.
If you believe you have been a victim of phishing, treat it as a fraudulent e-mail, report them as spam in EarthLink Web Mail. Also visit FTC Identity Theft and contact your financial institution(s) if you believe your financial information has been accessed.
Compromised Accounts
If a malicious third party gains access to your account, it is considered a compromised account. If EarthLink believes your account has been compromised and is being used to send spam or fraudulent emails, your account will be locked out until you call and reset your account security settings. Accounts most commonly compromised by replying to phishing emails, viruses or using a weak password.
Prevention
Use VERY Strong Passwords that consist of at least 8-12 (or more) characters including uppercase, lowercase, numbers and special characters.
Set the settings of your virus program to automatically update. Run a virus scan of your computer frequently.
Scan the attachments in your e-mail with your virus program. Most e-mail accounts have a built in virus program that automatically scans the attachments before they are downloaded onto your computer.
When signing in or giving a Web site your personal information, make sure that the URL says "https" in the beginning of the URL address and/or have a closed, or locked, lock in the address bar.
- NEVER e-mail your password, credit card number, secret word, PIN, or any other pertinent identifying information about you. E-mail is not encrypted and should not be considered 100% secure.
- Choose your password(s) carefully and keep them safe. A Web site only confirms that a password is correct, not the identity of the person using it. Create alphanumeric passwords that contain capital and lowercase letters, numbers, and symbols (if possible). The more complex your password is, the harder it will be for someone to guess it. Do not reuse passwords for multiple accounts. For more information on creating secure passwords, visit: https://help.earthlink.net/portal/en/kb/articles/how-to-change-your-earthlink-password
- NEVER click on a link in an e-mail that requests personal information because criminals can redirect a link to an address other than the one shown. To visit a Web site, always type the address directly into your Web browser.
- The safest way to update your account information is to go directly to the company's account maintenance Web site. Typically, you can visit the company's home page and link it from there.
- If you believe that your information may have been compromised, visit FTC Identity Theft and contact your financial institution(s)