"Your files are nearly ready to be uploaded"

[tcragnolini]

I got an email supposedly from dropbox. with the subject "ATTN: We recommend completing your Dropbox setup ASAP", and then saying "Your files are nearly ready to be uploaded", followed by a dropbox.com link, with the following format https://www.dropbox.com/l/XXXX0x_xxxxxxxxxxxxxx_xxxxxxxxxxxxx/h (characters are different). This seems like it could be legit, but also could be some kind of scam ? Any way I can confirm what it is without clicking the link? I tried searching for it on google and got no results back.

[adrianxw]

I have made the screen shot, (I think, it looks right).

[Walter · Accepted solution]

Hey @adrianxw, sorry to jump in here, but I just wanted to mention that since this email came from an official Dropbox domain, it's possible that the email was sent out in error, since this is usually an email sent out when you first create a Dropbox account.

Feel free to ignore the email and let us know if you receive any similar emails in the future.

[adrianxw]

The mail always looked genuine, but weird. It is not bothering me, if it is a simple mistake, well, mistakes happen. No trouble.

[adrianxw]

Another slightly odd thing is the box on the right, in there, it says I am a new member, which I'm not. The mail and the status in that box demonstrate commonality. Database glitch perhaps?

[mickeyroo]

> since this email came from an official Dropbox domain,

How do you know? Is there a digital signature.  

Are you unaware that email headers contain whatever the sender wanted them to?

You are just going to believe the sender is whoever they say they are? 

A bit concerning that Dropbox is hiring people to manage security with manifestly inadequate training. 

[adrianxw]

"Walter" a dropbox official had no doubts, I don't see any reason to dismiss his opinion.

[mickeyroo]

He seemed to be basing it on the purported "from" address in the email.

If you are going to look at anything in there, it should be the URL they are wanting you to click. 

It does not seem to be malicious.

[adrianxw]

I, obviously..., look at the url a link in a mail is suggesting I click, I have done so for years.