Our comments and trackback policy You Link We Follow, You Comment We Promote

Google yesterday announced that it is going to take more effective measures against ‘Phishing’ mechanism. To achieve their target, they have teamed up with ‘ebay’ & ‘PayPal’. Phishing is a form of spam in which a message is sent to the user in order to deceive him/her and ask them their personal information. e.g. Phishing messages in PayPal improvise  the official message of the service and tries to gather up user’s personal information like account password, etc.

Brad Taylor, Gmail’s Spam Czar, made the announcement by saying:

Well, I’m happy to announce today that by working with eBay and PayPal, we’re one step closer to stopping all phishing messages in their tracks.

According to the deal, Google is going to authenticate each and every email that is related to PayPal or eBay. A lot of online frauds are associated with PayPal or eBay. Google has been using DomainKeys and DomainKeys Identified Mail (DKIM) in order to authenticate senders and point out the forged messages. They’re using the tool for almost 4 years.

Brad added:

Now any email that claims to come from "paypal.com" or "ebay.com" (and their international versions) is authenticated by Gmail and — here comes the important part — rejected if it fails to verify as actually coming from PayPal or eBay. That’s right: you won’t even see the phishing message in your spam folder. Gmail just won’t accept it at all. Conversely, if you get an message in Gmail where the "From" says "@paypal.com" or "@ebay.com," then you’ll know it actually came from PayPal or eBay.

DomainKeys & DKIM tool plays a vital role in keeping the spam away from the inbox of Gmail, but these systems cannot be always effective.

But these systems can only be effective when high volume senders consistently use them to sign their mail — if they’re sending some mail without signatures, it’s harder to tell whether it’s phishing or not.

added Brad.

So far, Google is not blocking the suspicious email ids but from now on they are gona take strong measures by rejecting all the messages which are not authenticated.