Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Including typos in the spam messages falls in this same category. If seeing typos in an "official communication" triggers your alarm bells then you probably would not fall for whatever scamola it's a part of. It'd be in their interests to get you to drop off early.


I imagine there still needs to be some balance though. There's likely a set of people who may fall for the scam even if it's ridiculous, but if made slightly more ridiculous they suddenly would become more suspicious.


This reminds me of a lot of malware like fake AVs and ransomware - very poor spelling and grammar throughout (E.g. "You Computer Is Infected!!!" comes up often.) Although in that case, it might actually be the extent of their English skills since most of this tends to come from non-native-English countries like the far East.


Why is it in there best interest for you to drop off early?

You probably won't fall for it, but there is a still a chance...


Opportunity cost. If you can devote a few hours a day to each of, say, three gullible marks, you have a much greater chance of a payout than devoting a minute to each of 500 random marks.


Wait, what? These messages are sent en masse, and they aren't really hard to write up.


That's referring to the time that the scammer needs if the recipient falls for their bait and initiates contact.

You only want the truly gullible to send that first email, or it would be a waste of time for the scammer to talk to all the people who wouldn't wire transfer their money a few days/weeks later.


Right, all contact after the first email has to be tailored to their responses. Even gullible marks usually need hours or days (at minimum) of building rapport before they're actually comfortable enough to be conned into executing a transaction. If conning people into directly handing you cash were automatable like phishing, you'd see a lot more con artists and a lot less of other crimes.


After reading your reply the whole paper made sense to me, thank you.


The initial contact is 'en masse', but the followups are all by hand. Time spent by the scammer to respond to potential marks is, in fact, a scarce resource.


Sending out the initial spams is very automated (and so cheap), but if you respond, they probably have a human handling than (maybe with templates, but still under human control), which isn't nearly as cheap, so they want to avoid wasting time on insufficiently-gullible responders.


This is precisely the point of the linked paper. Maximizing people who are initially attracted to the scam is NOT the best strategy for scammers, because most will likely be rejected at a later point, when it's costlier to the scammers.

The best strategy for scammers is to reject everyone but the most gullible targets as early as possible. Obvious typos would be suitable for this.


It's like how they say certain intro classes for majors are difficult to weed out students who would eventually drop out if they reached harder classes. The logic there is students aren't wasting their time taking classes they won't use when they switch majors, and the classes won't be filled up before students who will make it all the way can enroll.

This way the scammer isn't doing a back and forth for 2-3 emails with those who would eventually realize its a scam. They immediately weed them out so they are spending time on those who will payoff.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: