On 8/2/2022 at 5:07 PM, Crossy said:

I was worried too, not a new article but ...

 

https://www.khaleejtimes.com/uae/emirates-warns-jobseekers-about-fake-jobs

 

" No money transfers or payment of any kind will be asked to be made by the job applicants, including no advance for travel expenses or travel visa/work permits.  The best way to recognise a fraudulent email is by checking the mail id of the sender. Official emails from the Emirates group will always end with @emirates.com."

Maybe to add, even if address is something @emirates.com, that could still be fake. While not normally visible, there is actually an email header which some mail programs can show - the headers show the entire path of where email was sent from and how it routed to your server. Usually there's IP address for the computer sending email. You can check where IP originates from, so if it claims to be from Emirates office in Bangkok but you find out it's sent from another country, you should worry. Sometimes there could also be spellings in the name, like [email protected]... now that I is not I but a small L. Or sender could make name Emirates HR <[email protected]> instead of just Emirates HR. In this case your email software could show this address but in reality it could be some garbage that it only shows when you hover over it. Lots of scams online, so it pays to be vigilant. But as many say before - scams are designed to relieve victim of money or gather financial data or something that allow them to get that later, or maybe get personal data to enable identity theft.

 

Easiest to see is - did she apply? If she did, did they address her with her full name as in application? Or did the message say Dear [email protected] or Dear Applicant? Did they request any payments for anything up-front, or to provide any documentation which was already submitted? Did the terms just change? We need to inform you of slight change. Please resend information to another email address? If they booked her flight, was it on Emirates? I know, stupid question, and I can't imagine anyone could be stupid enough to try to scam someone with Emirates job offer then book them flight on another airline... But you never know, some scammers are dumb. Did the contact details (usually when informed you've been approved, you need to accept offer, right?) change from official ones?

 

I know this goes too far and it's most likely all good for her, but given how many times we read of scams succeeding, I thought it just may give a few additional bits that were seen very recently, and were stopped at last moment or even succeeded.

 

Ah, last one - if you see a combined email with inconsistent fonts (like contents being combined from different threads, different paragraphs in different fonts or sizes), that's also usually a clear give-away. Saw that a lot.

 

Admin - if this is inappropriate, please wipe it.

I believe she flies today and I'm confident all will be fine.

I'm told she applied through the correct channels and has parted with no money. She was invited to Chiang Mai for workshops etc.

She's tall, attractive, bilingual, good with people and has experience in hospitality and a bachelor's degree.

I'm hoping to report good news within 24 hours. ????????

Thanks for all comments thus far. ????????

UPDATE

It's all good. ????????????????????????????????????

She flew yesterday and (with a brief visit to the A380 First Class lounge) is the safe hands of Emirates.

Thanks anyway to all those who offered worthwhile input. ????????????????????????

Beware of this email scam .....   looks like it went to my junk box about one week ago ....

 

I'm calling this fake ....

2 minutes ago, steven100 said:

Beware of this email scam .....   looks like it went to my junk box about one week ago ....

 

I'm calling this fake ....

 

  now I know it's fake .....  lol

105.65.78.10 IP Location, Morocco | MAROCCONNECT

https://whatismyip.live › IP Tools › IP Lookup

Jul 27, 2565 BE — IP location: 105.65.78.10 located in Casablanca, Morocco. ISP is MAROCCONNECT, registered with AS36884 ASN number. Find more information.

 

 

You don't really need skills or experience to get trough that training and do that job. It is all about looks and some language skill.

 

Essentially is like working at a catering company but then in the air, aside of a few other procedures that are repeated each flight.

8 minutes ago, ChaiyaTH said:

You don't really need skills or experience to get trough that training and do that job. It is all about looks and some language skill.

 

Essentially is like working at a catering company but then in the air, aside of a few other procedures that are repeated each flight.

Spelling too I guess! 

They are still recruiting in Thailand with interviews in Bangkok.

 

https://www.emiratesgroupcareers.com/cabin-crew/

 

 

RAZZ

Outgoing email addresses can be very easily spoofed by using an open relay SMTP server.

On 8/4/2022 at 9:20 AM, tomazbodner said:

Maybe to add, even if address is something @emirates.com, that could still be fake. While not normally visible, there is actually an email header which some mail programs can show - the headers show the entire path of where email was sent from and how it routed to your server. Usually there's IP address for the computer sending email. You can check where IP originates from, so if it claims to be from Emirates office in Bangkok but you find out it's sent from another country, you should worry. Sometimes there could also be spellings in the name, like [email protected]... now that I is not I but a small L. Or sender could make name Emirates HR <[email protected]> instead of just Emirates HR. In this case your email software could show this address but in reality it could be some garbage that it only shows when you hover over it.

There are several methods of protection against spoofing an email, such as SPF, DKIM and DMARC records - a properly configured mail servers (both the sender and recipient) will not allow such fake emails.

However emirates.com domain has a half of the UAE's IP addresses in their SPF record, including third parties such as Salesforce, Outlook and Amazon AWS, and I bet many of these IPs do not belong to emirates already so a persistent hacker could spoof the emails e.g. by finding a suitable server on Amazon. Also they have a broken DMARC record, and I didn't see their DKIM header which could be broken as well.

 

1 hour ago, zoltannyc said:

Outgoing email addresses can be very easily spoofed by using an open relay SMTP server.

it's not 2007 anymore...