Disturbing (scam?) emails from Gmail account - traceable?

M

MandM

Senior Member
Joined
Nov 28, 2006
Messages
910
Reaction score
64
Location
Western Cape
A teacher received an email from someone (in Afrikaans) who alleges that she is a learner in the school and that she is depressed and does not want to live amongst other allegations, which also includes rape. This teacher happens to be the teacher responsible for learner care. The e-mail addresses of the school are not listed on any websites. The e-mails are from a gmail account and there is no child in the school by that name. Obviously these emails are very upsetting, but given the statements made in the e-mails it can't just be ignored either. It will of course be reported.

In the meantime, I have googled the e-mail address, but nothing comes up. Is it possible to track the origins?

I'm trying to figure out what the scam could be (perhaps this person will send links later, who knows)... Or maybe this is just a sicko. Any suggestions?
 
It's just about impossible to "trace" a Gmail account if all you have is the account and a Google search doesn't bring anything up.

Have you tried replying to the email and seeing if the recipient will reply and reveal more info about who they are?
 
airborne said:
It's just about impossible to "trace" a Gmail account if all you have is the account and a Google search doesn't bring anything up.

Have you tried replying to the email and seeing if the recipient will reply and reveal more info about who they are?
Click to expand...
Thanks. Yes they have replied, but haven't revealed anything that could help.
 
Can't one try log in what that e-mail into facebook and see if there is a profile associated with it when it shows the facebook profile and that its a wrong password ? I remember I did this once but I think facebook stopped it since from a security point of view not very safe

If you try log into facebook with that email with wrong password then facebook will tell you if it exists or not. Then you will at least know if it is not their real email address or a secondary email.
 
skimread said:
Can't one try log in what that e-mail into facebook and see if there is a profile associated with it when it shows the facebook profile and that its a wrong password ? I remember I did this once but I think facebook stopped it since from a security point of view not very safe

If you try log into facebook with that email with wrong password then facebook will tell you if it exists or not. Then you will at least know if it is not their real email address or a secondary email.
Click to expand...

Thanks good suggestion. The email address doesn't match any account.
 
Pretty much all mail servers record the sending computer's IP address in the message header of the email message. (even Gmail, Outlook etc, they all do)
.

Open the email message + then open the message header + check the IP address next to "Received:" or "Originating:"

** If the user connected via a VPN then you're SOL.
**If the user sent the mail from a non-public server (as-in NOT Gmail) then you'll get the Fully Qualified Domain Name & IP address of the sending mail (SMTP) server. (also easy to trace)


---

Once you have the sending computer's IP address (or SMTP server address) use a free geolocation service (normally?? used for web visitors) to determine the ISP / location.

try these:
https://www.ipligence.com/free-ip-database
https://www.iplocation.net/


if you use a paid-for (API-based) geolocation service then you'll get a Google Maps view with a dot-radius showing the approximate location of the sender. (give or take 1km)

With the free-to-use (non API) geolocation service all you get is the ISP name with a big 5-10km circle on Google Maps.

---

each email client exposes the message header in a different place.
most clients hide it by default.

just find out what email client the teacher is using (Outlook, Gmail, Mail, etc) and do a Google search on how to show message headers in that particular mail client.

In Outlook I always place the "message options" button on the ribbon for fast access.

---


for Gmail - https://www.technologyhint.com/find-ip-address-email-sender/

for Outlook - https://www.extendoffice.com/docume...ook-find-ip-address-of-sender-from-email.html




happy hunting.
 
MandM said:
The teacher invited the sender to speak to her in person, but the reply was that on email the sender doesn't have to look the teacher in the eye.
Click to expand...
It is a difficult one. The kid wants to stay anonymous. It could be a bored kid or could be a kid that needs help but can't speak to anyone about it because of their anxiety but can do so over fake email. Best is to try help the kid or refer the kid to an external help service like childline helpline if they don't want to deal with a teacher.
 
If the kid is telling the truth which it seems to be then the teacher will know the kid is probably in her class. Narrow it down from there by communicating with the kid. What is the kids gender, how old is the kid, who does the kid live with. Sooner or later you she will have a good enough guess that you will know who the kid is and she might have the kids trust by interacting with him over email.
 
skimread said:
If the kid is telling the truth which it seems to be then the teacher will know the kid is probably in her class. Narrow it down from there by communicating with the kid. What is the kids gender, how old is the kid, who does the kid live with. Sooner or later you she will have a good enough guess that you will know who the kid is and she might have the kids trust by interacting with him over email.
Click to expand...
Thanks. Yes this is where it is at today. Hopefully we can get to the bottom of this.
 
If mail was sent through the browser you will not see any client IP at all. If it was sent with the gmail App on a phone you might see an client IP, but that will be zero use to you as well. So effectively no, you can't do anything to trace it
 
irBosOtter said:
If mail was sent through the browser you will not see any client IP at all. If it was sent with the gmail App on a phone you might see an client IP, but that will be zero use to you as well. So effectively no, you can't do anything to trace it
Click to expand...

Thank you
 
skimread said:
Can't one try log in what that e-mail into facebook and see if there is a profile associated with it when it shows the facebook profile and that its a wrong password ? I remember I did this once but I think facebook stopped it since from a security point of view not very safe

If you try log into facebook with that email with wrong password then facebook will tell you if it exists or not. Then you will at least know if it is not their real email address or a secondary email.
Click to expand...

Very handy, even shows the last 2 digits of the recovery phone number, is there any other sleuthing you can do via Facebook of you have a contact number or email address, accurate location/suburb?

ThatOtherDude said:
Pretty much all mail servers record the sending computer's IP address in the message header of the email message. (even Gmail, Outlook etc, they all do)
.

Open the email message + then open the message header + check the IP address next to "Received:" or "Originating:"

** If the user connected via a VPN then you're SOL.
**If the user sent the mail from a non-public server (as-in NOT Gmail) then you'll get the Fully Qualified Domain Name & IP address of the sending mail (SMTP) server. (also easy to trace)


---

Once you have the sending computer's IP address (or SMTP server address) use a free geolocation service (normally?? used for web visitors) to determine the ISP / location.

try these:
https://www.ipligence.com/free-ip-database
https://www.iplocation.net/


if you use a paid-for (API-based) geolocation service then you'll get a Google Maps view with a dot-radius showing the approximate location of the sender. (give or take 1km)

With the free-to-use (non API) geolocation service all you get is the ISP name with a big 5-10km circle on Google Maps.

---

each email client exposes the message header in a different place.
most clients hide it by default.

just find out what email client the teacher is using (Outlook, Gmail, Mail, etc) and do a Google search on how to show message headers in that particular mail client.

In Outlook I always place the "message options" button on the ribbon for fast access.

---


for Gmail - https://www.technologyhint.com/find-ip-address-email-sender/

for Outlook - https://www.extendoffice.com/docume...ook-find-ip-address-of-sender-from-email.html




happy hunting.
Click to expand...



Venomous said:
The extended header can provide a lot of info, including the senders IP
Click to expand...



irBosOtter said:
If mail was sent through the browser you will not see any client IP at all. If it was sent with the gmail App on a phone you might see an client IP, but that will be zero use to you as well. So effectively no, you can't do anything to trace it
Click to expand...

I tested this on Gmail, looks like you just get Gmail server ip.
 
I tested this on Gmail, looks like you just get Gmail server ip.[/QUOTE]

Yes ja that's what one would see unfortunately.

And then even if you get the client IP... going to the police to open a case just so that you can try and get whom that IP belonged to on lets say vodacom's network... well, we are still waiting 4 years later for that info, from a few ISP's... you never really get anywhere trying to track someone by IP address in this country
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X