The Booking.com scams look better than the actual "Self check and pre payments solutions" links send via the Booking hotels. 1 time I was right it is a scam, 2 times it was wrong. Booking.com should make a proper report payment circumvent button and kick out all hotels who do it.
How do those booking.com scams work?
Thanks FedEx, this is why we keep getting phished
401–410 of 576 posts
Re: Thanks FedEx, this is why we keep getting phished
#402Earlier quoted context omitted.
That sounds like internal verification uses GPS. So in most cases it's going to be the customer's word against the astonishingly lazy driver's evidence.
Can you file a small-claims? You have nothing to lose, it’s not like they could threaten to stop delivering your packages.
It's probably not worth the time and effort. You can get a judgment, but good luck getting them to pay out on it.
Re: Thanks FedEx, this is why we keep getting phished
#403Earlier quoted context omitted.
Is it impressive though? They have about a 50% success rate delivering things to me across multiple addresses and I know other people who have had similar long term issues.
At one of my addresses FedEx will happily sell anyone overnight shipping and then just keep the parcel at the depot for a week until they have a driver who can actually make the trip. I have had like 6 very urgent packages delayed like this. Once my wife ordered something perishable and they pulled this then told her she had to drive into town and pick it up at the airport. I've also been nearly run off the road by F…
That's really unacceptable. If they're going to be that late, they should at least ship it using Jiffy Express:
https://www.youtube.com/watch?v=e134NoLyTug
Re: Thanks FedEx, this is why we keep getting phished
#404Was just dealing with similar nonsense from BMO Harris bank yesterday. I got this text (numbers changed): "FreeMsg: BMO Fraud Ctr: 18774352371 Case 19684358 Did you attempt $4.00 at NYTIMES with card x1234? Reply YES or NO" The 1234 did match the last 4 digits of my card - not the first four, a common trick - but the rest of the message is, as Troy says, Dodgy AF. They then followed up with a similar email, prompting…
The first four are not secrets. The first two digits identify the card issuer, and the next two are the card type. That's how those credit card numbers can show you your card issuer's logo after you type the first two characters.
Right—they're saying it would be easy for a scammer to "prove legitimacy" by showing those first four, given that they're public.
Re: Thanks FedEx, this is why we keep getting phished
#405Earlier quoted context omitted.
Can you file a small-claims? You have nothing to lose, it’s not like they could threaten to stop delivering your packages.
It's probably not worth the time and effort. You can get a judgment, but good luck getting them to pay out on it.
A lien is a claim upon a part of another's property that arises because of an unpaid debt related to that property and that operates as an encumbrance on the property until the debt is satisfied.
Re: Thanks FedEx, this is why we keep getting phished
#406FedEx may have the worst and least secure digital platform for a major company. Some examples I’ve noticed: 1. I moved into a 10-unit apartment building and wanted to set up FedEx Delivery Manager. I just put in my new address, no verification whatsoever, and I was immediately given access to the previous tenant’s delivery instructions which included the buildings private garage code. Any thief could have done the sa…
Re password reset workflow issues: I had an account at a bank where password reset always failed. I had to go through a VERY convoluted process with customer website support to get it fixed. It turned out that the problem was that my registered email address was just two characters (my initials) to the left of the "@", e.g., ab@mydomain.com. They allowed me to enter and use it throughout the system without any error…
After 50 years of software crud, eventually a civilisation ending bug occurs and it can't be fixed (like how Telstra couldn't fix their phone system because the phone system was down). That's why we are all alone in the universe. Enjoy life while civilisation still works!
Re: Thanks FedEx, this is why we keep getting phished
#407Earlier quoted context omitted.
This is more restriction than necessary, and unkind to users who may be technically unsophisticated, distracted, sick that day, or just kinda dumb. Include a link, make it a part of the core domain, short, and prominent: https://example.com/contact . If the user isn't logged in, lead with a login flow explaining "If you received a message from us, login for details", and include a contact form, phone number, and if t…
> This is more restriction than necessary, and unkind to users who may be technically unsophisticated, distracted, sick that day, or just kinda dumb. Couldn't disagree more. By sending outbound links in notifications we're only perpetuating the idea that it's OK to click those in the first place. It's hardly any more difficult to just open your browser yourself. I also don't like the idea that we're not willing to ac…
It's a mild inconvenience to you, to some number of your customers, it will mean they never follow-up on whatever presumably important message you were sending them.
Keep telling people not to click on links, ever. The ones who listen, and are paranoid about taking that advice literally, will look the company up on a search, or copy-and-paste the link instead of clicking it.
If I get a link from a company I have an account with, and the link is from their URL, I'm going to click it. I'll also check to make sure there wasn't some kind of redirect or Punycode involved.
But you're not helping your customers by refusing to provide them with an important affordance just because scammers might do something similar. That kind of logic doesn't help anyone, because "anyone" breaks down into two groups: the ones who click, and the ones who don't. The ones who click get to resolve the problem, the ones who don't have to do a search first, exactly what you're suggesting forcing everyone to do.
Re: Thanks FedEx, this is why we keep getting phished
#408Earlier quoted context omitted.
https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A...
Putting aside the fact that the conclusion of this text is not at all what GP said... You do realize that this is not a law, not even a court decision, but that it is a prosecutor's opinion / suggestion to the court?? Yes, if two people are going to answer with the exact same link and nothing else, I'm going to answer both with the exact same comment.
It is a court decision. Citing the actual law and context for it.
Re: Thanks FedEx, this is why we keep getting phished
#409The URL part of this particular drives me insane, and it's not particularly Fedex's fault. But When every online retailer seems determined to keep me in their website (or a branded third party website) when I click a tracking number.
"Track Package" sure, keep me on the website.
But if you present me with a tracking number that you are making a link yourself, just send me to the shipper company. Bonus points when they then make it really hard to find the actual link I want on that random website they send me too. I already bought from you and will soon have your product in my hands, do I really need to be kept on a branded site that offers no extra value?
Emails seem to be the worst for this.
I feel like these companies are setting up people to be phished, when the idea that you can only track Fedex on Fedex.com is no longer true.
Re: Thanks FedEx, this is why we keep getting phished
#410Earlier quoted context omitted.
> For some things, you must use paper Do you have a source backing that up? Aside from the local tax collector, which insists on snailmailing me a copy of all correspondence even though they also sent everything to me digitally, I can't even remember the last time I received any documents on paper, and I'm in the EU.
5 words: Google search eu durable medium. https://www.fca.org.uk/firms/durable-medium https://www.lexology.com/library/detail.aspx?g=788714a1-d7b6... Why did you need a source for this?
Neither of those sources back up your claim that paper (or a USB drive, for that matter) is required in certain cases. The court case cited in your second link even lays out the conditions under which a website can be considered to satisfy the requirements.