Saw this in action today
This hoax made it to the PA of my Managing director. They were about to pass it on to the legal department, until deciding to consult IT first.
The email address used is firstname.lastname@example.org, which to the untrained eye appears legitimate because of the domain. However, no one seems to question why an email would come from the "abuse" recipient??
Also, why would the DoJ email direct to a UK company? Wouldn't they use a UK based authority?
Name used for the complaint was "Mr Henry Stewart", if anybody was after more identity traits.