Longshadow wrote:
ALWAYS!
If one looks at the header information in an email, one can see that the "emails" from suposedly "local/US" companies are being sent from servers in India, Russia, Romania, Thailand, Bulgaria, and a host of other places.
Unfortunately also from servers in the US, but not the "company" server account.
The "FROM:" can be spoofed..... Usually with bogus non-valid email addresses.
One thing that I need to add is that even if the email doesn't report that the situation is urgent you should never click on any link in that message. One should always search for the contact information, verify that information, and then contact the alleged sender using that information. As you point out the bad guys can spoof email addresses and disguise them to look authentic.