Live data from Hacker News

Tracking Down the Bulgarian Marketplace Scams

sy1.sh

11–20 of 48 posts

Re: Tracking Down the Bulgarian Marketplace Scams

#12
post #7

It's so easy to spot marketplace scams that I'm baffled people still fall for them. Are you going to show up with cash on my doorstep (or another agreed upon location)? If yes, we can continue talking. If not, you are blocked and reported. End of story.

> It's so easy to spot marketplace scams that I'm baffled people still fall for them. That's survival bias. There are some you can't spot.

You missed their point. It's cash on the barrel head or counterparty is presumed to be a scammer. If you follow that rule you'll never be scammed.

Re: Tracking Down the Bulgarian Marketplace Scams

#13
post #9
post #6

Earlier quoted context omitted.

I missed something: why do you as a seller have to enter your bankdetails?

That is the thing - you don't. In Czechia, something called bank ID is commonly used to authenticate. The point is to verify it is you, for example when you sign a contract online, fill in tax returns online... stuff like that. The way it works is that you are on some site, you get redirected to your internet banking, you log in (that's what I meant by "bank details", I am sorry about expressing myself so clumsily),…

Login page redirects have become a big user security hazard it would seem - and OAuth is basically the culprit.

Re: Tracking Down the Bulgarian Marketplace Scams

#15
I got several people wanting to send a courier last time I listed something on Facebook. Checking their pages, they were all from eastern Europe with no obvious connection to my city. Good to know the mechanics of the scam, I wondered what they were up to. Don't understand why Facebook couldn't have auto detected the messages though - seemed like a pretty major failure of marketplace that the majority of the messages I got were scams.

Re: Tracking Down the Bulgarian Marketplace Scams

#16

Earlier quoted context omitted.

> It's so easy to spot marketplace scams that I'm baffled people still fall for them. That's survival bias. There are some you can't spot.

You missed their point. It's cash on the barrel head or counterparty is presumed to be a scammer. If you follow that rule you'll never be scammed.

> If you follow that rule you'll never be scammed.

until you get robbed, kidnapped or forced to do a bank transfer.

Re: Tracking Down the Bulgarian Marketplace Scams

#18
post #9
post #6

Earlier quoted context omitted.

I missed something: why do you as a seller have to enter your bankdetails?

That is the thing - you don't. In Czechia, something called bank ID is commonly used to authenticate. The point is to verify it is you, for example when you sign a contract online, fill in tax returns online... stuff like that. The way it works is that you are on some site, you get redirected to your internet banking, you log in (that's what I meant by "bank details", I am sorry about expressing myself so clumsily),…

Holy crap. What a terrible system and I hope my part of the world never implements such forms of tech.

Re: Tracking Down the Bulgarian Marketplace Scams

#20
post #9
post #6

Earlier quoted context omitted.

I missed something: why do you as a seller have to enter your bankdetails?

That is the thing - you don't. In Czechia, something called bank ID is commonly used to authenticate. The point is to verify it is you, for example when you sign a contract online, fill in tax returns online... stuff like that. The way it works is that you are on some site, you get redirected to your internet banking, you log in (that's what I meant by "bank details", I am sorry about expressing myself so clumsily),…

Canada checking in. We have the same system for authenticating with government services. https://www.interac.ca/en/verification/personal/sign-into-go...

I dislike this as well, as this is conditioning people to not second guess why a third party website is sending you to your bank to login. As well as scam websites I've come across that mirror the authentication process down to every step you would have when using it for legitimate purposes. Scam website>Scam Interact login parter>Scam web banking login> stolen bank credentials.

Post reply on HN