Patent ID: 8271588
Filing Date: 2012-09-18
Classification: G06Q,H04L

Abstract:
1. A method, comprising: a computer system receiving fraudulent email messages from a known email provider, wherein the fraudulent email messages misrepresent their origins as being from the email provider, and wherein the email provider is a subscriber to an anti-fraud service associated with the computer system; the computer system receiving, from the email provider, information specifying a first set of characteristics present in valid email messages of the email provider and a second set of characteristics that are never present in valid email messages of the email provider, wherein the second set of characteristics specify that a uniform resource locator (URL) in a body of an email message has a host name that differs from a host name of the email provider; and based on the fraudulent email messages and the first and second sets of characteristics, the computer system creating a first filter specific to the email provider, wherein the first filter is usable to determine whether a subsequently received email message is an email message that misrepresents its origin as being the email provider.