Where Did That Scammer Get Your Email Address?
Summary: Krebs on Security describes how 419 and advance-fee scammers obtain email lists, citing bots that scrape addresses from millions of websites, sellers on underground cybercrime forums, and open-air markets selling lists by the million at roughly a penny per 1,000 addresses. One such operation, LeadsAndMails.com (also BuyEmails.org), based in New Delhi, advertises lists as "100% opt-in and 100 percent legal to use" and sells offerings including 6 million work-at-home USA addresses for $99 and 1,041,977 USA Seniors for $325, while its homepage directs Nigerian clients to pay via local bank deposits rather than Western Union or Moneygram.
Bottom line: A list of 6 million prospective money mules costs $99 and a million insurance agents $250, so the barrier to reaching your employees or customers is measured in hundreds of dollars, not capability.
Read the original at Krebs on Security ↗
- Topics
- Fraud & Scams
- Related
- ArcticRAT Cybercrime Gang Profiles Victim Finances With AI Cyber Risks · Nov 13, 2026Three People Arrested for AI-Enhanced Impersonation Fraud Cyber Risks · Nov 11, 2026Medicare scam calls, texts and ads: What to watch for this Open Enrollment Cyber Risks · Oct 14, 2026