[anti-abuse-wg] broken contacts

On Nov 5, 2011, at 2:14 am, Lou Gogan wrote:

[…]

> You are missing the point entirely.
> 
> Firstly, it is not the job of the Bank of Ireland to persue fraudsters all 
> around the world merely because they are pretending to be the BOI.

I don't know how you came up with that one. At the very least, a responsible bank should work with the relevant law enforcement agencies.

> This is an attempt to steal money from people. It is a crime. The only main 
> contact with the criminals is the ISP. They will know the acual contact details 
> of the criminls, hopefully, and can act on that, or at the very least shut that 
> link down pronto.

You're assuming the baddies bought accounts instead of just hacking someone else's server.

> Secondly, there are many scams out there trying to con people into giving 
> details of their credit cards etc with no direct connection to any bank - thus 
> the abuse contact details still should be easy to obtain so a report can be 
> sent from anyone aware of a fraud attempt, even a Lou Blogs.

Abuse contact details are only useful when there is a there is a properly resourced set of people behind them. Without that they are at best worthless and and at worst dangerously misleading. I'm all in favour of ISPs doing the right thing abut ISPs are only part of the story and they each only see a small slice of the picture. The kind of abuse described in this thread needs to be addressed by the brand owner as well as the ISP because the brand owner will want to minimise its association with fraudsters.

Regards,

Leo