Let’s get the important stuff out the way first:
Do not: use this company and do not submit your details to them.
Do: Fill in fake details and submit them. Most importantly, make them look totally plausible.
This morning, another spam text message arrived on my phone. Allegedly sent from a number 07752902112
£2612.84 is waiting in your name, its compensation for the accident you had, to get it sent out ASAP fille out the form at http://www.personalinjurysource.mobi.
As a commenter on my previous post UkSpeedyCash Spammers, Dodgy as Hell kindly commented, this sort of marketing is illegal:
The Privacy and Electronic Communications (EC Directive) Regulations 2003 http://www.legislation.gov.uk/uksi/2003/2426/contents/made
In sections 22(1) says:
“Except in the circumstances referred to in paragraph (3), a person shall neither transmit, nor instigate the transmission of, unsolicited communications for the purposes of direct marketing by means of electronic mail unless the recipient of the electronic mail has previously notified the sender that he consents for the time being to such communications being sent by, or at the instigation of, the sender.”
and section 2(1) says:
““electronic mail” means any text, voice, sound or image message sent over a public electronic communications network which can be stored in the network or in the recipient’s terminal equipment until it is collected by the recipient and includes messages sent using a short message service;”
So what are they lying about? Well, look at the text at the foot of the screen:
These details will be sent over a verified secure connection-there are NO FEES or charges for using our personal injury claim service.
Contact Us: firstname.lastname@example.org
When you send information over a secure connection, you send it via a page with security enabled. This is via a site that starts with https and has a verified digital certificate. Your browser should display a padlock image of some sort. I’ve use the RBS site to demonstrate a safe and trusted secure connection:
Not all https sites are safe. if there is an issue, your browser ought to pick up on this:
But some don’t have it at all. PersonalInjurySource.mobi are just such a site:
This means if you submit your details, it will be subject to malicious interception and leave you prone to identity theft:
They state that there are “No fees or charges”. Sorry? What? This company is not acting in the public good. You will incur a charge in some way, just not maybe the most transparent way.
Who are they?
Their whois record (the record of who registered the domain name) references a privacy protection service. This prevents the details of who owns the name from being published.
Legitimate companies have no reason to hide this. The only reason to hide this is to hide the true source, and the inevitable trail of deception. In my previous email UkSpeedyCash Spammers, Dodgy as Hell, I highlighted what can be inferred from tracing a whois record. We find out that the company itself is linked to a text spamming company.
It’s simple – they spammed you, you spam them back by submitting fake but plausible details. If you’re on twitter, use the hashtag #SpamThemBack to highlight this.