Moreover, they reportedly registered 14 different trial accounts with commercial services, filed 13 fraudulent tax returns before an online tax filing service and submitted 12 address change requests with the US postal service.

46,52,400) in credits from four banking institutions in the US. As per the findings of security experts, a group of cybercriminals exploited the Gmail dot feature to avail around $65,000 (roughly Rs.

This vulnerability makes the process of scaling up a fraud much easier. The dot variants of a username used to file fake tax returns While many of us have used this Gmail 'feature' to register 'different' emails to the same service provider, such as Netflix, it appears For example, if someone intends to send an email to mistakenly sends it to the email will be delivered to the intended recipient who owns the correct username, or vice versa - if someone intends to send an email to and mistakenly sends it to Gmail is the only major service provider to follow this practice of making these email addresses indistinguishable, service providers continue to treat each dot variant of the email address as a separate one, and indirectly, a different individual. So, how did this happen? The Gmail dot feature ensures that emails intended for a particular recipient reaches them if the sender accidentally adds (or forgets) a dot or period in the username. The Gmail dot feature fraud, that was discovered by security firm Agari and was first reported by Axios, was primarily employed to commit BEC (Business Email Compromise) scams. As per a report, the bad actors have been exploiting the feature to commit a diverse array of scams since early 2018. But cybercriminals are exploiting the same feature to commit crimes such as filing fake tax returns, availing financial benefits from government agencies, extending the trial period of online services, and credit fraud among others. Gmail offers a nifty “dot” feature which redirects all emails to the same account in case users have mistakenly added a dot or a period in the recipient's email address.

Gmail dot com trick