BT "phishing@bt.com" rejecting forwarded phishing e-mails MODS ATTENTION, PLEASE!!

[Scotsail]

Apologies. Should have proof read. "requirement", "official"

[RobbieMac]

Good morning guys,

I am really sorry for these problems.  Let me reach out to the team about this and when I have an update I'll post here again.

Cheers,

Robbie

[jjgraphics]

Hi Robbie,

Thanks for taking ownership of this again . . . I'm sure we would all appreciate a once-and-for-all resolution to this irritating issue.

John

[RobbieMac]

Hi everyone,

Thanks for flagging the problems you are having forwarding emails to phishing@bt.com. We’re currently investigating this and hope to be able to update you as soon as possible.

Until this is resolved, please continue to report suspicious emails via phishing@bt.com, as reports are still coming through. It is important that you continue to report these emails so we can do what we can to stop them.

The bounce back error you are seeing is the system working as it should. This is because there is malicious content included in the reported email and it is being blocked from coming through to us. If you get a bounce back, please delete the email and treat it as malicious. We’re working to ensure that instead of a bounce back response, you receive confirmation that the email is a phishing email.

We’re sorry for any inconvenience caused by this and thanks for your patience while this is looked into and fixed.

Thanks,

Robbie

[Scotsail]

Thanks Robbie for the explanation and advice. Rather than leaving the malicious content in the ether is it not possible for BT to receive such mail into a "safe area" and analyse the content? If not, there is no way of BT knowing how much such mail is being generated and is a fairly sure way for the scammers to avoid being tracked.

I have  this morning received telephone calls from BT in Ireland responding to my complaint, not sure whether your contribution has any connection to that. The ultimate irony is that the link I was sent to infrom me  https://www.bt.com/help/email/email-security/what-is-a-phishing-scam--is-the-email-i-have-received-g...   prompted a 404 error response.

[licquorice]

Only in the Kafkaesque world of BT could an email address reject the very emails it requests people to send. Unbelievable!

I had suspected that this might be the problem but couldn't quite believe that even BT could be that crazy.

[Troy-Tempest]

I’ve had the this problem for a couple of months now.

A previously mentioned workround of forwarding the email from a non btinternet account does not work for me.

[elmslie67]

Thanks to Rob the moderator for providing a reply on behalf of BT. Thanks also to the many forum members who have conformed that this is a general problem. The phishing emails look remarkably authentic and the worry is that some BT customers will be duped. I expect the phishers are reading the forum posts and realise that they are successful in  getting past BT security. So a fix from BT should be a priority for their IT team.

[Eclectic]

Thank you Robbie.

Please can we remove the 'solved' tag from this, as it isn't.

Ta

[MovingFingerOfFate]

I've had the same problem beginning in June 2021. Latest phishing email was this weekend...

I've dealt with the @BT_UK twitter team and they have tried to help but not produced a solution, they directed me here this time.

I cant see how the 2 emails I have recieved have any kind of malicious payload in them... they are just text with a link to a malicious website, the same emails have been happily accepted at

report@phishing.gov.uk

so I think the malicious content is a red herring - its not the right answer - not worth spending more time on really... also wouldnt BTs email filters detect malicious payload before it ever gets into my mail account. I've also got other scanning and filtering products none of which picked up anything malicious in the email but blocked the malicious website (I trust my security and used sandboxing so expected them to stop anything malicious loading and but the browser protection warned that it was a fraudulent site ahead so I didnt see the actual site).

The twitter team had me reset my hub to factory settings to try and get me a new IP address in case it was that that was the problem (which I did and wished I hadnt as my connection got distinctly "lumpy" afterwards), I tried sending using different browsers, direct from logging into my BT mail server and forwarding from there instead of my mail app on my machine (so a different ip and a different mail app using the web interface... nothing worked, the mail was rejected every time. But report@phishing.gov.uk cheerfully took the forwarded emails and responded with an acceptance email.

The problem seems to be with BTs systems - either its bouncing on our (BT supplied) IP addresses (if I read this right other bt customers are forwarding the same phishing emails and they are getting through) or our email addresses. Its also different postmaster@ addressed bouncing the forwarded email.

I had no problem with forwarding to BT from my Mail app previously, just since June.

Hope you get this sorted soon for the affected customers.
Cheers

BobP