Fake phishing?

[the_raingod]

Ok firstly, I'm very new here so sorry if this is the wrong place to post this. Please direct me to a better place for the post if it exists...

I'm doing a PhD on internet crime and looking for ways to collect data on levels of crime and how many people fall for scams, fraud etc.

My idea is that I could set up (perhaps in collaboration with a bank) a typical looking phishing email that asks people to click through to a webpage to give their personal info. There's then a link to a page giving advice on how not to fall for phishing scams, and explaining the research (and maybe asking if they'd be willing to take part in further research).

My questions:

So that I could figure out what % of people clicked through...

Would there be any way to monitor how many people receive the email?
Or a way to prevent the email being forwarded so only the people I directly send it to would be able to get to the website link?

Also, do you think I'd have to talk to the big email providers like hotmail and yahoo so I didn't get done for spamming?

If anyone can help with any of this, or has any other suggestions for collecting data it'd be much appreciated. I'm still at a really early stage with all this so sorry if my ideas sound a little fuzzy!

Cheers

[diablos]

Ask lee elwood he our current phising expert.

[Freddy]

I'm a cynical cunt so won't be helping. Surely your teacher will run through this with you?

[the_raingod]

Thanks diablos - sorry to be a ditz but how do I go about asking lee elwood direct?

Freddy - I come from a criminology background so am totally at sea with the technical side of these issues, I don't have a teacher only a criminology specialist as a supervisor who's as at sea as me... cheers for your honesty though

[Ganty]

Thanks diablos - sorry to be a ditz but how do I go about asking lee elwood direct?

Freddy - I come from a criminology background so am totally at sea with the technical side of these issues, I don't have a teacher only a criminology specialist as a supervisor who's as at sea as me... cheers for your honesty though

You may have to ignore diablos, the Lee Elwood thing is a bit of an "in joke" - see this link for more -

http://www.theregister.co.uk/2005/06...ng_duo_jailed/

Elwood is a member of DF, you could send him a private message, although he's not online as much as he used to be.

It'd be simple enough to create a fake page, although you'll have to be careful in terms of copyright etc... as you'd be using a lot of a ral banks identity.

I'd suggest speaking to our resident lawyer, Legal Eagle, about the legal side of things, although his section requires a VIP membership.

[unclex]

This will also be wrong, as we have some sort of Anti Spam law in the UK.

You and the bank could end up getting nicked....

[Elwood]

Thanks diablos - sorry to be a ditz but how do I go about asking lee elwood direct?

You can pm me here, or send me your msn name if you use messenger. From past experience, sending 10 million emails per day will bring in about 2000 replies, of those probably 500 will be blatant rubbish,like "FU*K YOU" as the name etc. Just let me know what info you need and I'll try and see what I can come up with.