>I get 3 or 4 emails a year from clients asking to transfer large sums..
I'm surprised you allow ANY account requests by email.
>The email addresses are always valid as the client's account has been hacked.
The email addresses shown by your email client mean absolutely nothing, nada, zilch. They can be anything the email sender wants them to be. I could send you an email from potus@whitehouse.gov if I wanted. The only way to see where an email has actually come from is to check the headers. Even then you have to trust that the originating machine and any relay hasn't messed with them before they reach you. I'd bet that very few email users know how to even view the headers never mind interpret them.
|
Strange email. 
Strange email.