Deliveroo users are getting defrauded • Hacker News Board

Re: Deliveroo users are getting defrauded

#191

Post by ams6110 » Thu, Jan 24, 2019, 4:19 PM UTC

iagooar wrote: post #98

anonknowsaguy wrote: post #69

Fun fact about Deliveroo. A lot of your drivers aren't the registered driver. It's really common practice for a citizen or someone with a work visa to register and then rent their phone to someone desperate with no work visa. So your driver is often making almost nothing while someone else sits on their ass and collects cash for doing nothing and then Deliveroo again sits on their ass providing poor service collectin…

> It's really common practice for a citizen or someone with a work visa to register and then rent their phone to someone desperate with no work visa Do humans really have such low morality and ethics? I just can't picture a person who does this to another human being...

It's no more immoral than the business model of Deliveroo, Uber, etc. themselves. In fact it's almost exactly the same.

Re: Deliveroo users are getting defrauded

#192

Post by resca79 » Thu, Jan 24, 2019, 4:23 PM UTC

I did one order in Milan with deliveroo, from that day I receive kind of emails and phone calls from different call centers.

Re: Deliveroo users are getting defrauded

#193

Post by entity345 » Thu, Jan 24, 2019, 4:25 PM UTC

coroxout wrote: post #178

entity345 wrote: post #7

Earlier quoted context omitted.

I once asked for delivery to a pub's car park. No problem and the delivery guy did not ask for any ID or anything.

This is relevant to my interests: I live a few minutes' walk outside the delivery radius for my town, and the nearest identifiable location within the radius is a pub car park. I've heard of people getting deliveries to the middle of the park in summer, or even to a boat waiting beside a road bridge...

That's exactly what happened: I was too far so I set the delivery location to a place they accepted after a few trials and errors.

Re: Deliveroo users are getting defrauded

#194

Post by ams6110 » Thu, Jan 24, 2019, 4:27 PM UTC

anonknowsaguy wrote: post #106

rubyboss wrote: post #91

Earlier quoted context omitted.

So are you saying there are bands of Deliveroo riders in England who are here on 6-month tourist visas? Or are you saying they are in the country illegaly?

I've only seen this happen to people on student visas that permit little or no working hours.

Students will do all kinds of "harmless" under the table stuff to get/save a little extra spending money. That's different to me than an person desperate for money to pay rent or buy food.

Re: Deliveroo users are getting defrauded

#195

Post by jdietrich » Thu, Jan 24, 2019, 4:29 PM UTC

rubyboss wrote: post #91

anonknowsaguy wrote: post #69

Fun fact about Deliveroo. A lot of your drivers aren't the registered driver. It's really common practice for a citizen or someone with a work visa to register and then rent their phone to someone desperate with no work visa. So your driver is often making almost nothing while someone else sits on their ass and collects cash for doing nothing and then Deliveroo again sits on their ass providing poor service collectin…

So are you saying there are bands of Deliveroo riders in England who are here on 6-month tourist visas? Or are you saying they are in the country illegaly?

If you're working on a tourist visa, then you're in the country illegally - your visa becomes invalid the minute you start work and you're liable to be deported.

Re: Deliveroo users are getting defrauded

#196

Post by snowwolf » Thu, Jan 24, 2019, 4:29 PM UTC

vivan wrote: post #137

jwdunne wrote: post #123

Earlier quoted context omitted.

If I recall, there's no distinction between an en masse data leak and someone being able to access your personal info without authority under GDPR. Both are a data breech. It seems like many people have been affected by this too so clearly Deliveroo doesn't have the mechanisms in place to protect user information. The fact unauthorized people can spend your money through Deliveroo is even worse. Deliveroo are respons…

Do you have a source for that? If that is the case then pretty much every major website is in breach. Credential stuffing is rampant and very easy to do these days. It's not the website's fault that the user gave out their password. However, I do agree that Deliveroo needs to do more to protect users against this. 2-factor authentication, email confirmation from a new IP, re-entry of card details when ordering to a n…

In the UK, the ICO guidelines are

"A personal data breach means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data."

The key part being "unauthorised disclosure of, or access to, personal data."

So does credential stuffing qualify - In my opinion yes, as it is unauthorised access to personal data.

They then go on to say "When a personal data breach has occurred, you need to establish the likelihood and severity of the resulting risk to people’s rights and freedoms. If it’s likely that there will be a risk then you must notify the ICO;"

And again, the ability to place orders and deliver them to a new address charging the existing credit card I think qualifies as a severe and likely risk.

https://ico.org.uk/for-organisations/guide-to-data-protectio...

Edited to add: In the absence of any legal precedent I’d challenge you to find any lawyer who’d confidently say that credential stuffing definitely doesn’t meet the criteria.

Re: Deliveroo users are getting defrauded

#197

Post by ams6110 » Thu, Jan 24, 2019, 4:31 PM UTC

entity345 wrote: post #7

conradk wrote: post #4

Earlier quoted context omitted.

From my experience with Deliveroo, you can pretty much order at any address, wait for the delivery person at the doorstep and retrieve your order without actually living there.

I once asked for delivery to a pub's car park. No problem and the delivery guy did not ask for any ID or anything.

A long time ago I used to deliver pizza. We'd never take an order like that, it was an easy way to get robbed (business was pretty much all cash in those days so the drivers always had cash on them).

We'd only deliver to an actual numbered street address or apartment.

Re: Deliveroo users are getting defrauded

#198

Post by lotsofpulp » Thu, Jan 24, 2019, 4:32 PM UTC

stronglikedan wrote: post #171

e40 wrote: post #71

Earlier quoted context omitted.

I've been using this feature with my Citi CC for 10+ years. And with Citi, I don't need to give my CC to a 3rd party.

Same with BoA MC's ShopSafe feature.

ShopSafe works with BoA Visa cards too.

Re: Deliveroo users are getting defrauded

#199

Post by moftz » Thu, Jan 24, 2019, 4:33 PM UTC

thoughtpalette wrote: post #188

moftz wrote: post #169

Earlier quoted context omitted.

There are certain things that really don't make sense for delivery, like McDonald's. I could drive there, go through the drive-thru, and be home by the time someone else is picking it up. Most other restaurants do make sense for online ordering and delivery. Most of the time I just go and get the food myself as I'm usually just too cheap to pay the delivery fee and tip and longer wait. I'll order pickup and can go ge…

A lot of people in cities don't own transportation and it's quicker getting delivery than getting on a train/bus.

Right, in cities it makes the most sense for delivery of almost anything. Even if you have a car, trying to find parking at certain times just so you can run in and grab your pizza is probably not worth it. A guy on a scooter can park almost anywhere so it quickly becomes worth the fees to have it delivered. These services have started creeping out to the suburbs where I live and it doesn't always make a lot of sense for some of them. I'd imagine delivery services are even harder to do in rural areas where you would be waiting for quite a long time to get your pizza although I could see things like grocery delivery making sense.

Re: Deliveroo users are getting defrauded

#200

Post by ramigb » Thu, Jan 24, 2019, 4:33 PM UTC

iagooar wrote: post #98

anonknowsaguy wrote: post #69

Fun fact about Deliveroo. A lot of your drivers aren't the registered driver. It's really common practice for a citizen or someone with a work visa to register and then rent their phone to someone desperate with no work visa. So your driver is often making almost nothing while someone else sits on their ass and collects cash for doing nothing and then Deliveroo again sits on their ass providing poor service collectin…

> It's really common practice for a citizen or someone with a work visa to register and then rent their phone to someone desperate with no work visa Do humans really have such low morality and ethics? I just can't picture a person who does this to another human being...

I use a number of services in Sweden and they all do the same thing, the picture of the person who gets you the food is never the same as in their website. Also errors in orders is so common.