VERIFICATION OF SELECTED INBOUND ELECTRONIC MAIL MESSAGES
An email verification system is described. The email verification system stores names and associated email addresses. An email is received that has a sender name and a sender email address. If the email verification system determines that the sender name matches a stored name but the sender email address does not match with an email address associated with the stored name, the email is prevented from being transmitted to its recipient unless the email is verified as being legitimate. The email verification system transmits a request to verify the email via a configured verification method. If a response is received that verifies the email as legitimate, the email is delivered; otherwise the email is blocked.
1 . A method, comprising:
storing, at an email verification system, a plurality of names and a plurality of email addresses, wherein each name of the plurality of names is associated with an email address of the plurality of email addresses;
receiving, at an email verification system, a first email having a first sender name and a first sender email address;
determining that the first sender name of the first email matches a first name of the stored plurality of names, and that the first sender email address of the first email does not match with a first email address of the stored plurality of email addresses associated with the first name, and responsive to this determination, preventing the first email from being transmitted to its recipient unless the first email is verified as being legitimate;
transmitting a first request to verify the first email as being legitimate via a first configured verification method;
receiving a first response to the first request that verifies the first email as being legitimate;
transmitting the first email to its recipient responsive to the receiving the first response;
receiving, at the email verification system, a second email having a second sender name and a second sender email address;
determining that the second sender name of the second email matches a second name of the stored plurality of names, and that the second sender email address of the second email does not match with a second email address of the stored plurality of email addresses associated with the second name, and responsive to this determination, preventing the second email from being transmitted to its recipient unless the second email is verified as being legitimate;
transmitting a second request to verify the second email as being legitimate via a second configured verification method;
receiving a second response to the second request that indicates that the second email is not legitimate; and
blocking the second email from being sent to its recipient.
2 . The method of claim 1 , wherein determining that the first sender email address of the first email does not match with the first email address of the stored plurality of email addresses associated with the first name includes comparing a value in an envelope from field with the first email address.
3 . The method of claim 1 , wherein determining that the first sender email address of the first email does not match with the first email address of the stored plurality of email addresses associated with the first name includes comparing a value in a from header field with the first email address.
4 . The method of claim 1 , wherein the first request to verify the first email as being legitimate includes one or more of: an IP address of the first email, an autonomous system number (ASN) of the first email, a value in an envelope from field of the first email, a date and time of the first email, and a subject of the first email.
5 . The method of claim 1 , wherein the first request is transmitted to a device associated with the first email address.
6 . The method of claim 1 , wherein the first configured verification method is one of: email verification, text message verification, authentication application verification, and phone call verification.
7 . The method of claim 1 , wherein the first request to verify the first email as being legitimate includes a third email being sent to the first email address.
8 . A non-transitory computer-readable storage medium that provides instructions that, if executed by a processor, will cause said processor to perform operations comprising:
storing, at an email verification system, a plurality of names and a plurality of email addresses, wherein each name of the plurality of names is associated with an email address of the plurality of email addresses;
receiving, at an email verification system, a first email having a first sender name and a first sender email address;
determining that the first sender name of the first email matches a first name of the stored plurality of names, and that the first sender email address of the first email does not match with a first email address of the stored plurality of email addresses associated with the first name, and responsive to this determination, preventing the first email from being transmitted to its recipient unless the first email is verified as being legitimate;
transmitting a first request to verify the first email as being legitimate via a first configured verification method;
receiving a first response to the first request that verifies the first email as being legitimate;
transmitting the first email to its recipient responsive to the receiving the first response;
receiving, at the email verification system, a second email having a second sender name and a second sender email address;
determining that the second sender name of the second email matches a second name of the stored plurality of names, and that the second sender email address of the second email does not match with a second email address of the stored plurality of email addresses associated with the second name, and responsive to this determination, preventing the second email from being transmitted to its recipient unless the second email is verified as being legitimate;
transmitting a second request to verify the second email as being legitimate via a second configured verification method;
receiving a second response to the second request that indicates that the second email is not legitimate; and
blocking the second email from being sent to its recipient.
9 . The non-transitory computer-readable storage medium of claim 8 , wherein determining that the first sender email address of the first email does not match with the first email address of the stored plurality of email addresses associated with the first name includes comparing a value in an envelope from field with the first email address.
10 . The non-transitory computer-readable storage medium of claim 8 , wherein determining that the first sender email address of the first email does not match with the first email address of the stored plurality of email addresses associated with the first name includes comparing a value in a from header field with the first email address.
11 . The non-transitory computer-readable storage medium of claim 8 , wherein the first request to verify the first email as being legitimate includes one or more of: an IP address of the first email, an autonomous system number (ASN) of the first email, a value in an envelope from field of the first email, a date and time of the first email, and a subject of the first email.
12 . The non-transitory computer-readable storage medium of claim 8 , wherein the first request is transmitted to a device associated with the first email address.
13 . The non-transitory computer-readable storage medium of claim 8 , wherein the first configured verification method is one of: email verification, text message verification, authentication application verification, and phone call verification.
14 . The non-transitory computer-readable storage medium of claim 8 , wherein the first request to verify the first email as being legitimate includes a third email being sent to the first email address.
15 . An apparatus, comprising:
a processor; and
a non-transitory computer-readable storage medium that provides instructions that, if executed by the processor, will cause the apparatus to perform the following operations:
storing, at an email verification system, a plurality of names and a plurality of email addresses, wherein each name of the plurality of names is associated with an email address of the plurality of email addresses;
receiving, at an email verification system, a first email having a first sender name and a first sender email address;
determining that the first sender name of the first email matches a first name of the stored plurality of names, and that the first sender email address of the first email does not match with a first email address of the stored plurality of email addresses associated with the first name, and responsive to this determination, preventing the first email from being transmitted to its recipient unless the first email is verified as being legitimate;
transmitting a first request to verify the first email as being legitimate via a first configured verification method;
receiving a first response to the first request that verifies the first email as being legitimate;
transmitting the first email to its recipient responsive to the receiving the first response;
receiving, at the email verification system, a second email having a second sender name and a second sender email address;
determining that the second sender name of the second email matches a second name of the stored plurality of names, and that the second sender email address of the second email does not match with a second email address of the stored plurality of email addresses associated with the second name, and responsive to this determination, preventing the second email from being transmitted to its recipient unless the second email is verified as being legitimate;
transmitting a second request to verify the second email as being legitimate via a second configured verification method;
receiving a second response to the second request that indicates that the second email is not legitimate; and
blocking the second email from being sent to its recipient.
16 . The apparatus of claim 15 , wherein determining that the first sender email address of the first email does not match with the first email address of the stored plurality of email addresses associated with the first name includes comparing a value in an envelope from field with the first email address.
17 . The apparatus of claim 15 , wherein determining that the first sender email address of the first email does not match with the first email address of the stored plurality of email addresses associated with the first name includes comparing a value in a from header field with the first email address.
18 . The apparatus of claim 15 , wherein the first request to verify the first email as being legitimate includes one or more of: an IP address of the first email, an autonomous system number (ASN) of the first email, a value in an envelope from field of the first email, a date and time of the first email, and a subject of the first email.
19 . The apparatus of claim 15 , wherein the first request is transmitted to a device associated with the first email address.
20 . The apparatus of claim 15 , wherein the first configured verification method is one of:
email verification, text message verification, authentication application verification, and phone call verification.
21 . The apparatus of claim 15 , wherein the first request to verify the first email as being legitimate includes a third email being sent to the first email address.