Author Topic: Fraud alert! (Read 3113 times)

ckmk47 · « **on:** January 11, 2022, 03:34:56 PM »

I got a text from +1 (959) 214-2807:
You have just sent a payment of $6.38 USD to Jack Winchester. You can view or manage these payments at:"https://bit.ly/3qfkyYO" CASE-ID-AATNDI

I clicked the link and it sent me to PayPal and asked me to log in.
Since I didn’t know the person in the text, I went to the PayPal app to sign in.
Sure enough, I hadn’t sent him, or anyone else unknown, any money.

I checked out the link they sent me to :
https://verify.payp.alcomsupportcenter.online/signin

Of course had I signed in at their link they would have my PayPal login information.

AsherO · « **Reply #1 on:** January 11, 2022, 03:37:54 PM »

Classic case of Phishing

ckmk47 · « **Reply #2 on:** January 11, 2022, 03:42:08 PM »

Yup
Their link looked great. But I’ve heard of such things so I was cautious.

AsherO · « **Reply #3 on:** January 11, 2022, 03:46:50 PM »

Quote from: ckmk47 on January 11, 2022, 03:42:08 PM

Yup
Their link looked great. But I’ve heard of such things so I was cautious.

You can report this to Bitly though I doubt they’ll track down all their links unless the scammers are using the same link for all targets/victims. Chances are the scammers are lazy, but it’s advantageous to use different links so you know who bit (that’s why it’s called bit.ly

) and who didn’t.

AsherO · « **Reply #4 on:** January 11, 2022, 04:01:19 PM »

D*mn these schm*cks are nefarious, when you put in a login/password combo (obviously not legit) they first tell you:

Continue

Then

And more

They keep asking if you want to “add more cards”, until you say no, then:

After which they redirect you to PayPal.com

PayPal would be smart if they tracked referrer (which page a visit came from) so they could link logins to flagged phishing sites and require a password reset. Wishful thinking.

Yo ssi · « **Reply #5 on:** January 11, 2022, 04:09:20 PM »

I can't seem to switch my settings

AsherO · « **Reply #6 on:** January 11, 2022, 04:18:08 PM »

Quote from: Yo ssi on January 11, 2022, 04:09:20 PM

I can't seem to switch my settings

Yeah, some things are funny there like them requiring an email address (IME they surface an error when you try to log in with a phone number) and requiring a 4-year DOB.

ckmk47 · « **Reply #7 on:** January 11, 2022, 04:19:10 PM »

WOW!! AsherO.

Yehuda57 · « **Reply #8 on:** January 11, 2022, 04:24:39 PM »

Anyone who thinks someone else is an idiot for falling for a phishing scam just doesn't realize how many times they've fallen for it already.

https://gimletmedia.com/shows/reply-all/rnhoww

aygart · « **Reply #9 on:** January 11, 2022, 04:26:18 PM »

No legit financial institution would hide their link by using bitly.

AsherO · « **Reply #10 on:** January 11, 2022, 04:29:39 PM »

Quote from: Yehuda57 on January 11, 2022, 04:24:39 PM

Anyone who thinks someone else is an idiot for falling for a phishing scam just doesn't realize how many times they've fallen for it already.

https://gimletmedia.com/shows/reply-all/rnhoww

TLDR?

AsherO · « **Reply #11 on:** January 11, 2022, 04:41:55 PM »

Quote from: aygart on January 11, 2022, 04:26:18 PM

No legit financial institution would hide their link by using bitly.

Yeah, many have their own shorturl.

AsherO · « **Reply #12 on:** January 11, 2022, 04:42:24 PM »

Quote from: ckmk47 on January 11, 2022, 04:19:10 PM

WOW!! AsherO.

wdym?

etech0 · « **Reply #13 on:** January 11, 2022, 04:50:29 PM »

Check out the url at the bottom of those screens

Yo ssi · « **Reply #14 on:** January 11, 2022, 05:15:08 PM »

Quote from: Yehuda57 on January 11, 2022, 04:24:39 PM

Anyone who thinks someone else is an idiot for falling for a phishing scam just doesn't realize how many times they've fallen for it already.

https://gimletmedia.com/shows/reply-all/rnhoww

As with anything if someone is specifically looking to get you, it's a lot harder to stop them.