Tech firms, lawmakers target spam, e-mail fraud

Unsolicited messages steal recipients' time, money

October 18, 2004|By Tricia Bishop | Tricia Bishop,SUN STAFF

Marci De Vries, a Baltimore marketer, won't open her e-mail in front of clients, fearful that they'll think she's a pervert when they see some of the subject lines on her screen.

Shamik Ghosh, a Laurel business developer, has to delete junk mail from his wife's account when she's out of town so the deluge of spam doesn't crash the inbox.

And Deborah Tillet, president of a Hunt Valley gaming company, is so fed up with spam, she's considering not giving her e-mail address to "anyone ever again."

Rife with spam and scams, e-mail has reached the point of surrender for many. When Bill Gates proclaimed this year that spam would be gone by 2006, raised eyebrows and much skepticism greeted his prediction.

But that target might not be so far off, industry executives say. Technology companies began joining forces this year to develop a counterattack. Recent government actions, including an anti-spam law in Maryland that took effect this month and is regarded as one of the nation's toughest, also point to a growing recognition of the need for a solution.

"I think you'll see some real changes within three years," said Deborah Fallows, a researcher with the Pew Internet and American Life Project in Washington.

Just as phone solicitations mushroomed after the telecommunications reform act of the mid-1990s, interrupting dinners and forcing the advent of a national Do Not Call list a year ago, e-mail is reaching a "crisis," as one member of the Federal Trade Commission put it.

E-mail spam and fraud are harder to corral than telemarketing, however. The volume of messages is much greater, and it's easier for senders to conceal their identities or addresses.

The trade commission decided last summer not to pursue a "Do Not Spam" list. It concluded that spammers would use the list as verification of real e-mail addresses to which they could send solicitations for everything from real estate loans to erectile dysfunction drugs.

"The volume of spam is growing at astonishing rates," FTC Commissioner Orson Swindle has said. Though estimates differ, experts generally agree that spam -- the nickname given to most unsolicited electronic pitches, including illegal scams -- now makes up between 70 percent and 80 percent of all e-mail, up from about 10 percent just three years ago and about 30 percent last year.

Forged e-mail has also become more prevalent and sophisticated. By using fake Web sites and logos that resemble familiar financial services companies, e-mail "phishers" have become more convincing in luring consumers to respond with their personal financial information, which is then used to raid their accounts. While many people have learned to be skeptical of messages in their inboxes, 1.4 million people divulged confidential information in cases of e-mail fraud last year, according to the Gartner Group research firm.


Phishing has increased 17-fold since December, to nearly 2,000 different scams, according to the Anti-Phishing Working Group, an industry association fighting cyber crime. Among corporate targets, New York financial giant Citibank has been hit hard, with nearly 700 false requests for data purporting to be from the company popping up in July.

Two main factors have fed the spam explosion: the global nature of the Internet and greed. As more nations have become Internet-savvy, their spammers have joined the pool. And e-mail crime too often pays. It costs less than a penny to send an e-mail, and about one-third of e-mail users respond to the unsolicited ads, the Pew Internet and American Life Project reported.

Filters to block spam, installed by businesses or individuals on their computers, have provided some help, but they have spawned their own problems by rejecting legitimate e-mail, such as receipts for online transactions, newsletters or advertising from companies with which consumers have a relationship. John Karpovich, president of Port25 Solutions Inc., an Ellicott City technology company working on a solution, estimated that nearly one-fifth of legitimate e-mail is accidentally blocked by anti-spam filters.

"I use a spam software package that is 99 percent accurate at detecting spam and puts it into a special folder, but I still have to look at each [one] to ensure that it isn't from an associate or sales prospect," Jason Hardebeck, chief executive of WhoGlue Inc., a Baltimore software company, wrote in an e-mail. "I still end up spending an extra 45 minutes to an hour a day verifying that I'm not throwing the baby out with the bath water."

Several Internet service providers -- including Microsoft, Yahoo Inc. and America Online Inc. -- are working on developing ways to verify the identity of an e-mail sender so spammers can be found and prosecuted. But devising universal remedies is difficult: The Internet Engineering Task Force, a standards-endorsing body, rejected a Microsoft proposal as a global remedy last month partly because the company wanted to keep the intellectual property private.

Baltimore Sun Articles
Please note the green-lined linked article text has been applied commercially without any involvement from our newsroom editors, reporters or any other editorial staff.