Search

Gmail Dot Feature Exploited to Commit Credit Fraud and More: Report

Advertisement
Highlights
  • The Gmail dot feature was misused for availing financial benefits
  • Cybercriminals even filed for fake tax returns
  • It was also exploited for availing certain online services
Gmail Dot Feature Exploited to Commit Credit Fraud and More: Report

The fraudsters have reportedly been exploiting the feature since early 2018

Gmail offers a nifty “dot” feature which redirects all emails to the same account in case users have mistakenly added a dot or a period in the recipient's email address. But cybercriminals are exploiting the same feature to commit crimes such as filing fake tax returns, availing financial benefits from government agencies, extending the trial period of online services, and credit fraud among others. As per a report, the bad actors have been exploiting the feature to commit a diverse array of scams since early 2018.

The Gmail dot feature fraud, that was discovered by security firm Agari and was first reported by Axios, was primarily employed to commit BEC (Business Email Compromise) scams. So, how did this happen? The Gmail dot feature ensures that emails intended for a particular recipient reaches them if the sender accidentally adds (or forgets) a dot or period in the username. For example, if someone intends to send an email to abc@gmail.comand mistakenly sends it to a.bc@gmail.com, the email will be delivered to the intended recipient who owns the correct username, or vice versa - if someone intends to send an email to a.bc@gmail.com, and mistakenly sends it to abc@gmail.com.

Since Gmail is the only major service provider to follow this practice of making these email addresses indistinguishable, service providers continue to treat each dot variant of the email address as a separate one, and indirectly, a different individual. While many of us have used this Gmail 'feature' to register 'different' emails to the same service provider, such as Netflix, it appears 

Gmail dot scam screenshot Gmail Dot Scam

The dot variants of a username used to file fake tax returns
Photo Credit: Agari

This vulnerability makes the process of scaling up a fraud much easier. As per the findings of security experts, a group of cybercriminals exploited the Gmail dot feature to avail around $65,000 (roughly Rs. 46,52,400) in credits from four banking institutions in the US. Moreover, they reportedly registered 14 different trial accounts with commercial services, filed 13 fraudulent tax returns before an online tax filing service and submitted 12 address change requests with the US postal service. Moreover, the feature was also misused to avail financial allowances such as social security benefits as well as disaster assistance and unemployment benefits under different identities.

Cybersecurity experts identified a total of 56 variants of an email address belonging to a single individual but differentiated by the placement of a dot in the username to bamboozle the service providers. And since all the emails intended for a supposedly different user were delivered to the same account, thanks to the Gmail dot feature, it became very easy for the bad actors to manage their fraudulent activities. 

Separately, Crane Hassold, Senior Director of Threat Research at Agari told ZDNet that the Gmail dot feature is only one of several Gmail features that can be used by scammers, such as the plus sign (where username+randomword@gmail.com redirects emails to username@gmail.com), and the legacy googlemail.com domain. While exploits on these features haven't yet been spotted in the wild, Hassold says they are just as efficient as the Gmail dot feature. 

For the latest tech news and reviews, follow Gadgets 360 on X, Facebook, WhatsApp, Threads and Google News. For the latest videos on gadgets and tech, subscribe to our YouTube channel. If you want to know everything about top influencers, follow our in-house Who'sThat360 on Instagram and YouTube.

Further reading: Gmail, Gmail Dot Feature, Cybercrime
 
Show Full Article
Please wait...
Advertisement

Related Stories

Popular Mobile Brands
  1. OnePlus Nord 5, OnePlus Nord CE 5 Launched in India at These Prices
  2. AI+ Pulse, AI+ Nova 5G With 50-Megapixel Rear Cameras Launched in India
  3. AI+ Nova 5G, Pulse Phones India Launch Today: How to Watch Live Event
  4. OnePlus Nord 5 Review
  5. Amazon Prime Day 2025 Sale: iPhone 15 Discounted Price Revealed
  6. Google Pixel 10 Series Colour and Storage Options Leaked
  7. OnePlus 13 to Get a Price Cut During Amazon Prime Day 2025 Sale
  8. Tecno Phantom Ultimate G Fold Tri-Fold Phone Design Leaked; May Launch Soon
  9. Apple Releases iOS 26 Beta 3 Update for iPhone With These New Features
  10. OnePlus Buds 4 With Up to 45 Hours of Total Battery Life Launched in India
  1. Samsung Galaxy S25 FE to Sport a 6.7-Inch Flexible OLED Display: Report
  2. ChatGPT Could Soon Get a Study Together Feature That Helps Users Learn New Topics
  3. OnePlus Buds 4 Launched in India With Adaptive ANC, Up to 45 Hours of Total Battery Life: Price, Features
  4. Amazon Prime Day 2025 Sale: OnePlus 13 Offer Price Revealed
  5. AiQ Wearbuds Smartwatch With Built-In TWS Earbuds, Blood Pressure Monitoring Launched in India
  6. Apple Loses Top AI Models Executive to Meta’s Hiring Spree
  7. OnePlus Nord 5, Nord CE 5 Launched in India With 50-Megapixel Rear Camera, OnePlus AI Features
  8. Honor X70 Confirmed to Launch on July 15; Battery, Charging Details Revealed
  9. Apple Takes Fight Against $587 Million EU Antitrust Fine to Court
  10. CMF Watch Pro 3 Expected to Launch Soon; Price Leaked Online
Gadgets 360 is available in
Download Our Apps
App Store App Store
Available in Hindi
App Store
© Copyright Red Pixels Ventures Limited 2025. All rights reserved.
Trending Products »
Latest Tech News »