Signed response to an abusive email account owner and provider systems and methods

A method comprising:

• receiving an email from a first email account on a second email account, wherein the email contains malicious content;
• determining that a trust relationship exists between a first email server corresponding to the first email account and a second email server corresponding to the second email account;
• and
• transmitting, using a hardware processor of the second email server, an alert email to the first email account corresponding to the trust relationship, wherein the alert email includes a digital signature and a secure field having an abusive category descriptor in an email header.

A non-transitory computer readable medium comprising a plurality of machine-readable instructions which when executed by one or more processors of a server are adapted to cause the server to perform a method comprising:

• receiving an email from a first email account on a second email account, wherein the email contains malicious content;
• determining that a trust relationship exists between a first email server corresponding to the first email account and a second email server corresponding to the second email account;
• and
• transmitting an alert email to the first email account corresponding to the trust relationship, wherein the alert email includes a digital signature and a secure field having an abusive category descriptor in an email header.

A system comprising:

• a non-transitory memory storing user account information, wherein the user account information comprises email account information;
• and
• one or more hardware processors in communication with the non-transitory memory and configured to:
• receive an alert email from a first server;
• determine that a trust relationship exists with the first server;
• verify the alert email is from the first server using the trust relationship;
• and
• identify an email account corresponding to the alert email.