E-card Security

Sending an e-card to a given recipient invariably involves giving that recipient's email address to the e-card service – a third party. As with other third-party email services (such as mailing-list companies), the operator has the chance to misuse this address. One example of misuse is if the e-card service sends advertisements to the recipient's address. Under anti-spam rules used by major ISPs, such advertisements would be spam, since the recipient never asked ("opted in") to receive them. The e-card sender as well as the service could be held responsible for the act of spamming, since while the service sent the spam, the e-card sender provided the address.

In some cases, it may be illegal for an organization or business to use an e-card service to send greetings to its customers. For instance, data privacy laws may forbid a business from disclosing information about customers to a third party – including names and email addresses.

In late June 2007 a spate of emails with the subject line "You've received a postcard from a family member!" and other similar subjects, was seen making their way across the internet. Unfortunately most of these emails contained links to malicious web sites where Javascript was used to exploit the browser in order to compromise a system, or contained a link to a malware file masquerading as an e-card.