Fraud or Spoofed email?

Yashy
Yashy used Ask the Experts™
on
hi guys

We've had an email that looks like it has come from a bank claiming that one of their customers have had a fraudulent transaction on their card from one of our stores. I'm almost certain it is a phishing email of some sort.

I wanted to verify with you guys whether it is likely that the email address has been spoofed.

I won't be able paste the email address it is coming from. But as it claims to be from a bank, the sending server was the following:

Connection  Accepted
Sending Server
40.107.10.89 (mail-eopbgr100089.outbound.protection.outlook.com)
Sending Server HELO
gbr01-lo2-obe.outbound.protection.outlook.com
Connection Started
28 Sep 2018 5:45:45 PM GMT+01
Connection Finished
28 Sep 2018 5:45:45 PM GMT+01

Am I right to assume that any 'Bank' that is using Outlook as its sending server is using spoofing tactics?

Thanks
Yashy
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Distinguished Expert 2018
Commented:
You've provided too little. I recommend copying & pasting the full headers (obvious you should redact sensitive information, but you need provide enough information for us to analyze).

Author

Commented:
Yeah, i have requested for that. In that case, I'll close this off and re-open it once i have the headers.
Distinguished Expert 2018

Commented:
I usually ask people to simply send the message as an attachment, then you should get everything you need.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial