Scam emails often pretend to come from law firms or large corporations. One recent example claimed to be a “Final Legal Notice” from Cravath, Swaine & Moore LLP about copyright infringement. It threatened litigation over a Facebook video featuring Lewis Capaldi’s song Someone You Loved.
The email looks convincing at first glance, but it is a phishing scam. Below we break down the signs, explain how copyright enforcement really works, and outline what you should do if you receive something similar.
What Are the Red Flags in This Email?
Key warning signs include:
Sender address: The email came from buicats83927@gmail.com. Real law firms use official domains such as @cravath.com.
Mismatched firms: The message claimed to be from Cravath but listed Sullivan & Cromwell’s address and email domain.
Incorrect legal references: It cited statutory damages of “up to $50,000”. In reality, U.S. copyright law sets statutory damages between $750 and $30,000 per work, or up to $150,000 if willful.
Suspicious links: The message contained a Facebook video link that could be a phishing trap.
Copy-and-paste template: The same text has been reported in other scam campaigns, down to the same “reference number”.
Key Red Flags
Claim in Email
Why It’s Wrong
Sent from Gmail
Law firms use official domains
Mixed up law firms
Cravath and Sullivan & Cromwell confused
$50,000 damages claim
Not supported by U.S. copyright law
Urgent 72-hour demand
Typical phishing pressure tactic
Facebook video link
Potential phishing or malware
How Does Real Copyright Enforcement Work?
When copyright holders want to remove infringing content:
They file a DMCA takedown notice with the platform (e.g. Facebook, YouTube).
The notice must include specific statements under penalty of perjury.
The platform removes the content and notifies the account owner.
Communications come through official channels, not Gmail.
If you were genuinely facing litigation, a registered solicitor or attorney would contact you formally, not through an informal email with spelling inconsistencies and mismatched details.
Why Do Scammers Send Legal Threat Emails?
Scammers send fake legal threats because:
Fear creates urgency: Legal jargon and high-value fines scare people into reacting quickly.
Click bait: Links in the email may lead to phishing pages or malware.
Data theft: Replying gives scammers your details and confirms your email is active.
By mimicking well-known firms and music labels, scammers hope recipients will panic and comply.
What Should You Do if You Receive One?
Do not click links or download attachments.
Mark the email as phishing in your email client.
Delete the message from your inbox.
If you manage a Facebook or Instagram page, check your content manually and remove anything that might genuinely infringe copyright.
If in doubt, verify by contacting the firm through its official website, not through any contact details in the suspicious email.
How Can Businesses Protect Themselves from Email Scams?
Train staff to spot phishing signs such as odd sender addresses, urgent demands, and inconsistent details.
Keep social media and website content free of unlicensed music, video, or images.
Use security tools that flag suspicious emails before they reach your inbox.
How Do You Spot a Fake Legal Notice Email?
Real law firms do not use Gmail accounts.
Genuine copyright claims go through the platform’s DMCA process.
Inconsistent details and inflated legal threats signal a scam.
Always verify through official channels.
