You're not helping
We've all seen those hilariously bad scam emails that make you wonder what kind of idiot would be fooled by them. Of course, no real email would be spelled incorrectly or reference odd third-party domains, and they definitely wouldn't ever get my name wrong, would they...?
Erm... yeah, they do. A lot. And frankly they're just as much a part of the problem as the scams themselves. I've had random text messages from withheld numbers claiming to be from my bank, asking me to confirm some arbitrary piece of information so they can send me an important message, and after calling the bank from a different phone to report it, it turns out that the message was in fact completely genuine. I've had emails from companies with which I've had dealings, in which my name is not only spelled incorrectly, but completely wrong (Adam, anyone?) Some have even expected me to click a link within the email to a domain I've never visited before. Again, turned out to be completely genuine. My personal favourite was the email I received some years ago now which had no plain text section other than a message saying "please turn on Javascript to read this email". I've no idea if it was genuine or not, but I deleted it anyway.
Come on. As the internet continues its plummet into entropy, I'm pretty sure more than half of the world's email traffic consists of phishing scams these days. So, if you do happen to send genuine emails that you expect to be read, then the least you can do is take a bit of time to ensure your spelling and grammar are above average, the recipient's name is correct, and the email doesn't look like a scam. Don't forget, if you're sending an email to someone you don't know personally, then you should expect a smart person to assume your mail is a scam unless you can convince them otherwise. The whole point of training people in computer security is to ensure as many people as possible can tell a real email from a scam, and sending legitimate emails that fit the textbook definition of what a scam looks like actually makes it harder to do this, essentially aiding and abetting the scammers. We really can do better than this.
