How to Obtain Passwords of Online Scammers by Using Social Engineering Methods

This paper addresses three social engineering techniques that vigilante online communities of scambaitersuse for 'Inbox diving': an act of gaining access to internet scammers email accounts. The methods have been gathered by analyzing scam baiting forums and were put on the test in direct email exchange between the author and Internet scammers. By diving into the scammers inboxes, their working methods can be observed, gang structures investigated and potential victims warned. I discuss the moral issues an 'inbox diver' faces and question the ethics of scam baiting communities that prefer social engineering techniques rather than hacking email accounts. The research lead into the creation of the artistic installation 'Password:' and presents an artistic position dealing with password security.