Live data from Hacker News

Deliveroo users are getting defrauded

newstatesman.com

141–150 of 354 posts

Re: Deliveroo users are getting defrauded

#141

This kind of articles and journalism makes me a bit uneasy. This article only exists because the Journalist was affected. If anyone would contact the this paper saying company X has fraudsters leveraging their service (which is not uncommon), this article would never have been written. That aside, I've been on the other side, resolving cases like this. Sometimes cases are complex, take months to figure out while invo…

This kind of reflex journalism hate makes me uneasy.

> If anyone would contact the this paper saying company X has fraudsters leveraging their service (which is not uncommon), this article would never have been written.

You don't know that. The New Statesman is an excellent magazine and has run plenty of investigations in its time.

Re: Deliveroo users are getting defrauded

#142

Of all the job interviews i've done, Deliveroo stands out as the only company that gave me a trick interview test - said specifically not to write a feature, and when I didn't, they rejected me on that ground. Not surprising their whole business is like this.

I wonder what this says about their company culture or enforcement of ethics.

Re: Deliveroo users are getting defrauded

#143

Earlier quoted context omitted.

I would be very careful on this one. Some providers are interestingly stubborn when it comes to charge backs and can hold on to the (fraudulent) vendors side even if you're clearly right. Monzo in the UK is a prime example for that. An internet vendor charged me more than he should and refused to void the transaction (basically text-book fraud) and I filled for a charge back with monzo. I was extremely confident that…

You didn’t file for a chargeback with Monzo, because they don’t offer credit cards. There’s less protection generally with debit cards. Generally guidance is that you are entitled to a refund from the bank only if you did not authorise a particular transaction.

Does it matter? The simple reason they are there is to protect my interests. If they can't do it for a few quid, how can they do it for larger sums of money?

The Moral of the Story: Money institutes may not cover you like you think they will.

I've learned my lesson.

Again, be -very- careful.

Re: Deliveroo users are getting defrauded

#144
post #63

It sounds very much like this journalist is trying to make a mountain out of a mole hill. The real story is that Deliveroo does not handle fraud properly. This is a much lesser crime than what they are being accused of. The author wants to make it seem like Deliveroo has had a data leak and are trying to hide the fact. There is no evidence of this, but if it did turn out to be true then the author would be able to cl…

Yeah - it boils down to ye olde case of people reusing passwords. Half of the article talking about GDPR and the ICO is irrelevant. What's happened is she has an easy/reused password that's ended up in a breach, fraudster locks her out of the account and offers discounted deliveroo orders to their customers and she gets charged. That's it.

Re: Deliveroo users are getting defrauded

#145
post #140

Earlier quoted context omitted.

No, it's not that clear cut. This is the relevant text: https://gdpr-info.eu/art-6-gdpr/ Specifically, section 1 (b) and all of section 4. Deliveroo clearly needs location data; that they happen to be sending it to Braze is fine if they signed a DPA. So the question is, is the data sent to Braze exclusively for marketing? More critically: If it is collected regardless of consent, does marketing-specific processing st…

> No, it's not that clear cut. ... the question is, is the data sent to Braze exclusively for marketing? I'm not sure you're actually disagreeing with me. See - > Actually, under the GDPR, they must gain permission to process your information for any marketing purposes.

Sorry if I wasn't clear; I'm saying that the data sent to Braze is not necessarily used for marketing, or only for marketing. It's possible (and in my experience not unlikely) that they collect it for multiple purposes including critical ones, and restrict more specific processing based on an optin/optout somewhere else in the app. This is still compliant.

Re: Deliveroo users are getting defrauded

#146

Of all the job interviews i've done, Deliveroo stands out as the only company that gave me a trick interview test - said specifically not to write a feature, and when I didn't, they rejected me on that ground. Not surprising their whole business is like this.

Why would they do that anyway?

Re: Deliveroo users are getting defrauded

#147
post #98

Fun fact about Deliveroo. A lot of your drivers aren't the registered driver. It's really common practice for a citizen or someone with a work visa to register and then rent their phone to someone desperate with no work visa. So your driver is often making almost nothing while someone else sits on their ass and collects cash for doing nothing and then Deliveroo again sits on their ass providing poor service collectin…

> It's really common practice for a citizen or someone with a work visa to register and then rent their phone to someone desperate with no work visa Do humans really have such low morality and ethics? I just can't picture a person who does this to another human being...

What’s immoral here? You know someone who can’t work so you let him rent your phone so he can work. I mean it’s not respecting the law, but it’s no more immoral than companies renting out cars, houses, or tools used by others to earn a living.

Re: Deliveroo users are getting defrauded

#148

This kind of articles and journalism makes me a bit uneasy. This article only exists because the Journalist was affected. If anyone would contact the this paper saying company X has fraudsters leveraging their service (which is not uncommon), this article would never have been written. That aside, I've been on the other side, resolving cases like this. Sometimes cases are complex, take months to figure out while invo…

This kind of reflex journalism hate makes me uneasy. > If anyone would contact the this paper saying company X has fraudsters leveraging their service (which is not uncommon), this article would never have been written. You don't know that. The New Statesman is an excellent magazine and has run plenty of investigations in its time.

It's not journalist hate, and I'm not attacking The New Statesman, I'm criticising this article.

If the article would be about the growing problem of online fraud (which is growing quite steadily), and not only about Delivaroo, I would be happy.

Yes, I do know that, because as I said I've been on the other side and the number of articles covering individual companies being targeted by fraudsters is low compared with the number of cases.

Regardless of the motives that sparked the article, it still brings attention to the topic, which is positive.

Re: Deliveroo users are getting defrauded

#149

Of all the job interviews i've done, Deliveroo stands out as the only company that gave me a trick interview test - said specifically not to write a feature, and when I didn't, they rejected me on that ground. Not surprising their whole business is like this.

Why would they do that anyway?

As they explained it, they wanted people who "went above and beyond"

Re: Deliveroo users are getting defrauded

#150
post #63

It sounds very much like this journalist is trying to make a mountain out of a mole hill. The real story is that Deliveroo does not handle fraud properly. This is a much lesser crime than what they are being accused of. The author wants to make it seem like Deliveroo has had a data leak and are trying to hide the fact. There is no evidence of this, but if it did turn out to be true then the author would be able to cl…

If I recall, there's no distinction between an en masse data leak and someone being able to access your personal info without authority under GDPR. Both are a data breech. It seems like many people have been affected by this too so clearly Deliveroo doesn't have the mechanisms in place to protect user information. The fact unauthorized people can spend your money through Deliveroo is even worse. Deliveroo are respons…

> there's no distinction between an en masse data leak and someone being able to access your personal info without authority under GDPR. Both are a data breech. It seems like many people have been affected by this too so clearly Deliveroo doesn't have the mechanisms in place to protect user information. The fact unauthorized people can spend your money through Deliveroo is even worse

Well, the distionction can be as easy as someone hacking the company vs. guessing your password. What is the company to do to protect against the latter?! After all, the password is the authorisation, so I would even claim it's not unauthorised access...

Post reply on HN