Deliveroo users are getting defrauded • Hacker News Board

Re: Deliveroo users are getting defrauded

#61

Post by scrollaway » Thu, Jan 24, 2019, 1:48 PM UTC

K0nserv wrote: post #35

scrollaway wrote: post #28

Earlier quoted context omitted.

> I can't remember every giving explicit consent for this and AFAIK under GDPR just covering this in a Privacy Policy is not enough. I don't believe Deliveroo is obligated to tell you who they send such information to. They are however obligated to tell you that they gather such information and, should they share it with a third party, ensure that said third party is GDPR compliant and sign a data processing agreemen…

Doesn't GDPR require explicit cosent[0] for collection of sensitive private information? This is what many website has implemented as popups with "I accept" or "Manage Settings" options. I don't remember going through such a flow with Deliveroo and if I did I would have disabled the "marketing" category for sure. 0: https://www.i-scoop.eu/gdpr/explicit-consent/

Hm, I tried to create an account to check the signup flow but it looks like you need to place an order to create an account (and I'm not that hungry) (also, that's a really fun and interesting way of massaging growth numbers…).

To add to what detaro was saying; even if explicit consent were required for sharing your location data, Deliveroo most likely got it; they after all need it to know where your order is going to go. When such functionality is core to the app, an opt-out is not necessary.

What they might not have gotten, or at least not clearly, is your consent to send that data to a third party, explicitly and exclusively for marketing purposes. I don't know how this would play out.

Realistically, GDPR and its enforcers err on the side of caution (you need good justification to gather the data and share it, including consent and a reason to gather it in the first place). So if you care about this and wish to see it corrected, as I said an email to their dpo@ will likely go a long way. In case it doesn't, your national enforcement agency may be interested. Extremely-accurate location data is pretty creepy, especially if they get it very often and doubly so if they store it for a long time.

The #1 thing I would look at here is what they actually need it for. They may need it for security reasons (eg. anti-fraud measures) and happen to be storing it in Braze which is probably okay if Braze respects GDPR and Deliveroo signed a DPA with them (you'd be surprised the amount of companies storing security data in GA).

But you wouldn't have a very hard time making a case that they're using this for marketing purposes and are gathering an unreasonable amount of accuracy. So now the question is, do you care about this enough to follow up on it? :)

Re: Deliveroo users are getting defrauded

#62

Post by Cthulhu_ » Thu, Jan 24, 2019, 1:50 PM UTC

martinald wrote: post #2

I can't understand this fraud - surely getting something delivered to your door is the silliest way to defraud something? Also what are they doing with the £100s of takeaway food they are ordering? I must be missing something here.

What if the restaurants being ordered at are part of the scam? Steal from a Deliveroo customer, order at restaurant X, the restaurant puts it in their books, then splits the money with the party that broke into the account. As long as there's no proof the two are working together it's a great money laundering scheme.

Re: Deliveroo users are getting defrauded

#63

Post by vivan » Thu, Jan 24, 2019, 1:50 PM UTC

It sounds very much like this journalist is trying to make a mountain out of a mole hill.

The real story is that Deliveroo does not handle fraud properly. This is a much lesser crime than what they are being accused of.

The author wants to make it seem like Deliveroo has had a data leak and are trying to hide the fact. There is no evidence of this, but if it did turn out to be true then the author would be able to claim that they broke the story.

Re: Deliveroo users are getting defrauded

#64

Post by dkersten » Thu, Jan 24, 2019, 1:52 PM UTC

stuff4ben wrote: post #47

dkersten wrote: post #13

Earlier quoted context omitted.

That was my first thought too. Yes, I'd contact Deliveroo, but also my bank. If I didn't get a refund (some people waited months ?), I'd sue them in a small claims court if the amount is low enough for small claims and if its not, I'd at least talk to a legal adviser. Waiting on Deliveroo for months after being defrauded thousands of pounds is crazy.

Apparently you have waaay more time than I do to sue people in small claims court. Charge back via calling up my CC company is much easier and quicker.

At least where I am, a small claims claim is a matter of filling out a form and paying the fee. I may be contacted for more information, but don't need to otherwise do anything unless I'm unsatisfied with the outcome, in which case the appeals process goes through a proper court.

Besides, I said that I'd only do this if I didn't get a refund through Deliveroo/bank/CC chargeback. I certainly wouldn't start with small claims court.

Re: Deliveroo users are getting defrauded

#65

Post by zaarn » Thu, Jan 24, 2019, 1:53 PM UTC

Waterluvian wrote: post #18

entity345 wrote: post #5

Perhaps worth mentioning, since it's nowhere in the article, that the first thing to do is not to spend hours on the phone with Deliveroo (or whoever else) but to call your bank to report the transactions as fraudulent and to block your card. That will probably get you a refund quicker (the transactions will likely be held until clarified) and will stop any further fraud. As for Deliveroo's support team... Not very g…

This is basically the sole "feature" of credit cards I value. Any time I'm buying something from somewhere that might act poorly, I use a credit card for the free leverage I have in a disagreement. Had an old phones screen repaired at a store inside a Walmart. They fixed it but half the screen had no touch capability. They were highly resistant to doing anything about it until I said I would just do a charge back. To…

SEPA offers chargebacks on debit charges as well, same effect if you use it (and I prefer it over a CC).

Re: Deliveroo users are getting defrauded

#66

Post by himlion » Thu, Jan 24, 2019, 1:55 PM UTC

fredley wrote: post #55

I thought this was going to be about ordering food from one restaurant, only to have it prepared in another 'sublicensed' kitchen, sometimes a shipping container: https://www.theguardian.com/business/2017/oct/28/deliveroo-d...

Is this actually shady? When doing takeaway you are not really paying for the ambiance of the restaurant anyway and IF the quality is the same I wouldn't necessarily have a problem with it.

Re: Deliveroo users are getting defrauded

#67

Post by pbalau » Thu, Jan 24, 2019, 1:58 PM UTC

skh wrote: post #60

kitbrennan wrote: post #51

I'm not surprised by this response from Deliveroo. Their focus lately has definitely moved away from customer satisfaction. I discovered recently that drivers are allowed - without penalty - to reject an order when they reach the pickup location if they see the receipt and decide it is too far to travel [1]. As a customer you just see your food go: `Assigning Driver -> Driver En Route to Pickup -> Driver Arrived at P…

I think I’m old fashioned but I just don’t understand the appeal of these food delivery services. My friend’s son uses Postmates to order fast food and it seems absurd to me. I must be missing something about theses services given their popularity. Do you mind explaining why you use them?

I think you are just trying to be that guy. I go to this website, pick what I want, pay and some time later what I ordered gets delivered to my door. What's there to get?

Re: Deliveroo users are getting defrauded

#68

Post by maaaats » Thu, Jan 24, 2019, 1:59 PM UTC

entity345 wrote: post #54

nickspacek wrote: post #45

Earlier quoted context omitted.

They may have been embellishing that claim; however, I think what they were getting at is that in some situations using the chargeback mechanism can have wider repercussions. For example: if you are "ripped off" through Steam on a particular purchase and use a chargeback, they may shut down your account. In that case, you would lose access to all of your games purchased through Steam. Similarly, if you use a chargeba…

Ah so not "most vendors" would ban you for reporting fraud to your bank, then.

What are you trying to achieve here?

Re: Deliveroo users are getting defrauded

#69

Post by anonknowsaguy » Thu, Jan 24, 2019, 2:00 PM UTC

Fun fact about Deliveroo. A lot of your drivers aren't the registered driver. It's really common practice for a citizen or someone with a work visa to register and then rent their phone to someone desperate with no work visa. So your driver is often making almost nothing while someone else sits on their ass and collects cash for doing nothing and then Deliveroo again sits on their ass providing poor service collecting even more cash.

Re: Deliveroo users are getting defrauded

#70

Post by joering2 » Thu, Jan 24, 2019, 2:01 PM UTC

Waterluvian wrote: post #18

entity345 wrote: post #5

Perhaps worth mentioning, since it's nowhere in the article, that the first thing to do is not to spend hours on the phone with Deliveroo (or whoever else) but to call your bank to report the transactions as fraudulent and to block your card. That will probably get you a refund quicker (the transactions will likely be held until clarified) and will stop any further fraud. As for Deliveroo's support team... Not very g…

This is basically the sole "feature" of credit cards I value. Any time I'm buying something from somewhere that might act poorly, I use a credit card for the free leverage I have in a disagreement. Had an old phones screen repaired at a store inside a Walmart. They fixed it but half the screen had no touch capability. They were highly resistant to doing anything about it until I said I would just do a charge back. To…

Just so you know - charbegacks are reported to credit burreaus. Sometime they will show on your report for few months sometimes they don’t. Just letting you know if you ever be wondering why you have good credit score but bank doesnt approve your loan or doesnt want to extend your credit.