Live data from Hacker News

I'm a scam prevention expert and I got scammed

lupinia.net

191–200 of 562 posts

Re: I'm a scam prevention expert and I got scammed

#191

Here is an interesting story in which a scammer almost got me but failed because he knew me "too well": One morning in college I was awakened by a call after staying up all night working on some project. The caller claimed to be from my home country's embassy and was investigating a fraud case I was involved in. He started by confirming my personal information such as DOB and passport number and he had them all corre…

Crazy, was it someone you knew?

Re: I'm a scam prevention expert and I got scammed

#192

There was one time I thought I was being scammed, but it turns out there was an actual issue with my bank account. Sitting at my desk at work, I get a phone call from my bank on by cell phone. "Mr. Anechoic, there appears to be a security issue with your bank account. We can resolve it for you. For security purposes, can you give your checking account number and the last four of you SSN"? This is clearly a scam, righ…

"Cool cool, could you go ahead and close my account, please?"

Re: I'm a scam prevention expert and I got scammed

#193
Sure. I've been scammed. It felt really bad. And I consider myself quite knowledgeable. On the other hand, I noticed what was happening before greater harm could have been done. Perhaps that's what distinguishes so-called experts from the regular folks. Because an expert would know sooner, without being impervious.

Long story short, I could have ended up with a subscription on a set of questions for 20 dollars a week, which was given only after a set of legitimate surveys were given on behalf of Apple. I of course notified Apple of this, but I never got the 20 first dollars back, before cancelling the "subscription" I had apparently signed up for.

I really wanted to track the guys down, but they had been very careful in covering their tracks with proxies and mailbox addresses, so in the end I considered it too much work. But I did spam them. Perhaps I could have even used their mail for even more spam, but I suppose they just use throwaway mails anyway.

Not sure how they got through the cracks of Apple, though. IMHO it's pretty damning for the reputation of Apple to work with guys like that.

Re: I'm a scam prevention expert and I got scammed

#195
post #142

Earlier quoted context omitted.

Amazon today is a street side flea market. You really don't know what you'll get. I've started ordering more stuff from traditional retailers. Their online operations these days are really good, and at most a few dollars more than Amazon. Clothes from macys.com, home goods from homedepot.com and target.com, and so on. You're not flooded with choices with these stores that are mostly garbage, instead you get only 1-3…

I think ordering on amazon has become a little like getting your car towed. Towing companies appear to be a large shell game where your $200 tow is handled my one or more middlemen who eventually get some poor independent towtruck driver to tow you for $75 Amazon should do something that would allow partnering with decent brands. Customers would be happy, brands could keep their reputation, amazon could get a reasona…

Tow drivers make a lot of money. They do a lot of subcontracting and mutual aid type arrangements.

Re: I'm a scam prevention expert and I got scammed

#196
post #21

There's one easy rule that could have avoided all of this - never give out any info on incoming calls. If I get a call or text about fraudulent transactions, I'll keep them on hold while I log into the bank website. If I get a call about a late payment, I'll thank them for the info and ask them to stay on while I pay online. If I get an inbound call with a more complex request, I'll ask them for their employee info a…

That's good advice. I'm also wary of providing information over a customer service chat. A recent example that comes to mind was when I was price matching a product on Best Buy's website over a chat session. The rep confirmed the price match was valid and began to initiate it. And then he started asking for all of my personal details including, phone number, address, and credit card. When I politely refused, he thought I didn't want the price match anymore. I confirmed I still did, and he said he needed all of the info to place the order for me. I had assumed I would be sent a personalized link to order the product, or it would just be added to my cart (since I was signed in). But no, he needed personal info which would live in a chat log. I ended up ordering from the other retailer.

Anyways, maybe there was nothing wrong with providing those details. Maybe they were already available to him on his screen. But the act of asking for that info and making it commonplace for people to just provide it is how so many scams are successful. I don't know how we get away from bad security practices being the norm.

Re: I'm a scam prevention expert and I got scammed

#197
post #71

I expected some crazy new attack vector that was so sophisticated it could fool this Scam Prevention Expert, but this post is laughable. They fell for textbook "scamming 101" that my grandma knows to avoid. Here's one tip for this expert – if you get a 2FA code over text or email that clearly has the line "we will never contact you for this code over phone or text" right under it, DON'T give it to a "support agent" o…

Anyone can fall for these attacks in the moment, even experts. That was the point of the article.

What makes us vulnerable is that we are human: we get tired, caught up in the urgency of the call and our logical thinking stops working.

The actual story of the article is that we need to design systems that are robust even when people are getting scammed. Able to identify and reverse scamming soon after it happens with easy ways to report it.

Re: I'm a scam prevention expert and I got scammed

#198
post #28

Earlier quoted context omitted.

I bet your Amazon rep just searched for Reolink and clicked on a Google ad that happened to belong to the scammers.

Well this initiated a rant, not directly related to ads, but Google in general. This is an internet literacy issue I’ve noticed more and more. People will refer to Google listings as an authoritative source even if the data comes from some third party. “Is this Jordan’s Tiles?” “No. This is Patrick. You have the wrong number.” “It says on their website this is the number!” “Their website is wrong, this isn’t Jordan’s…

I think this might just be a people thing? I've had the same experience (some one calling for the YMCA, I inform they have the wrong number, they proceed to argue and berate me) but they probably just misdialed.

Not that I don't also feel like Google search results have gone down hill.

Re: I'm a scam prevention expert and I got scammed

#199
ehhhhhhhhhhhh I always call back. Isn't that one of the 1st laws of not getting fucked online/over the phone? I go to the company web page (https only of course) and get a phone number. I mean suppose it's possible for an employee to screw you over, but at least it's (call metadata) probably being logged somewhere. Also if I was into security my blog page would be on https, even if that's not entirely necessary for webpages. It throws up a yellow flag to me.

Re: I'm a scam prevention expert and I got scammed

#200

Earlier quoted context omitted.

It's really hard recognizing the image Amazon have in the US compared to my personal experience with amazon.de . The service is stellar, shipping both ways is free as long as you buy products covered by prime. Refunds are with no questions asked (as long as you don't start abusing it i guess). As soon as you go into 3rd party sellers the experience gets muddled, though I've had plenty of good experiences with those a…

Amazon US used to be as you describe. But now its mostly just cheap knockoff stuff. I hardly purchase there anymore. Its really sad because they used to have such a wide selection.

> just cheap knockoff stuff.

By that you mean overpriced dropshipping from aliexpress.

Post reply on HN