Website Security

I am perplexed by the fact that it's still possible to create a fraudulent account like "Classique 100% (102x)" on the DC website. This level of manipulation, where an individual can insert 102 fabricated positive reviews to entice prospective buyers, appears to involve sophisticated hacking techniques. DC seems to only respond reactively instead of proactively addressing such issues.

Additionally, if someone falls into this deceptive scheme and proceeds to make a payment, does DC provide any form of coverage? Kindly provide an explanation. Thank you.

Plus, why are these items still displayed in the top ads section?

It appears that DC has shown little interest to address this matter. Today, their website's security has been compromised once more, as has occurred frequently in the past, and it appears that DC has been unsuccessful in rectifying this security vulnerability.

In addition, a purchaser who paid for fraudulent items and received nothing in return has posted feedback.

I had previously inquired of DC whether they would consider reimbursing the buyer in such circumstances, but, after two weeks, no response has been provided.

DC, it is imperative that you respond promptly and appropriately to such issues, including this post, in order to foster trust and demonstrate professionalism.

Personally I do not think it is up to Delcampe to reimburse someone who has been scammed by a fraudulent seller. The buyer should have used a payment method (like Paypal or a credit card) to make payment as the money can be charged back in the event of non performance.

Also when buying items that are highly priced the buyer needs to do a little research before parting with their money. As the seller was recently registered and had feedback from the same source and apparently no track record of selling the items listed that should have been a red flag.

I would agree, but here is also DC at fault, as it seems they have a security gap they can not close. It's one thing that someone can open a DC account and scam people, but it's a complete different story when a hacker can open a DC account again and again with dozens of positive feedbacks. THIS IS ADVANCED HACKING!

Sadly, DC keeps quiet on this issue - as before.

Why this forum, then? Of course, they don't need to comment on any input. But surely they should follow up on such a serious one!

Hello "RareTravelDocuments",

Thank you for your message.

We apologise for only replying now. But our team is currently reduced in size which means that our response time is longer than usual.

We understand the concerns you have raised.

We’d like to point out that the security of our website is not being compromised as there’s no breach in security.
Hacking a system means that you gain unauthorized access to data in a system or computer. It is not the case here.
None of those closed accounts have had access to our system.

We have security systems in place to prevent fraudulent registrations.
Unfortunately some people can slip through the net. Indeed, ill-intentioned people are becoming increasingly professional on marketplaces. They manage to change their VPNs which makes them almost "invisible" to be detected by our system. We're constantly improving our systems to ensure we are prepare for any contingency.
The accounts that slip through the net are closed as soon as we spot them. But it's impossible to control or verify everything. Even though we keep enhancing our system, a flawless system does not exist.

That's why the help of our members is invaluable, and we thank them very much for all their valuable help, whether it’s through the Report an item feature or when they directly contact us through our Contact form.
We also invite each buyer to pay attention to some important things when they are going to pay for an item, especially when the seller is a new seller.
Members need to be cautious when they get a real bargain from a seller who is pretty new.
We have written an article on this matter which we recommend our members to read :
Lien (https)

Have a good day,
Miranda
Delcampe Customer Service

Thank you for the reply, Miranda.

Ongoing Security Efforts: We have robust security systems in place to prevent fraudulent registrations, but some individuals can evade detection by changing VPNs. We continually improve our systems to address these challenges.

1. When someone can establish an user account again and again, including dozens of fake positive feedbacks, then it is an advanced hack and has nothing to do if someone is using a VPN.

This issue is ongoing for years now and it seems DC can't close this security gap.

2. I am missing your statement on a reimbursement for DC members in such a fraudulent case like this.

3. After canceling the fraudulent listings and closing the fraudulent account, the items still show up for some days. Can you elaborate why?

4. The link you refer to has no statement on reimbursement for such a case.

Cheers, Tom

Hi again Tom,

Please find here below the answers to your questions

1. It is not hacking. Creating accounts again and again and gaining unauthorized access to data in a system or computer are two different things. These actions do not fall under the definition of hacking.

2. Sometimes and depending on the case, Delcampe may block the funds and/or refund the money. This is always a case-by-case. Any member who has purchased from one of these accounts is invited to contact us through our contact form Lien (https)

3. Yes, it’s linked to the cron jobs that are used on the website. Items that belong to closed accounts (whether the account was closed by Delcampe or by the member) might still appear on the website for a certain amount of time, until a crob job cleans them.

4. Same answer as answer #2

Regards,
Miranda

Hi Miranda,

Just saw your reply now, 4 weeks later, as I did not get any notification of your reply - even my community setting on answers from the forum is ON.

Yes, hacking and unauthorized access are two different things.

The issue here is that this person obviously can generate plenty of positive feedbacks on a new account. Can you explain how this is not hacking?

Quick different question:

For how long are SOLD items in general search visible? Unsold items are not displayed?

Cheers, Tom

P.S. Please delete the double post, if you can.

Hello Tom,

As my colleague explained, creating accounts again and again is not hacking. They create several accounts to buy items from one fake account to another fake account and then add fake feedbacks, but this is not hacking. None of those closed accounts have had access to our system.

As far as sold items are concerned, they are visible in the search engine for as long as the data is available in our system. Closed unsold items are not visible in the search engine.

Have a nice day.

Kind regards,
Cecilia

Hello Cecilia,

Now the case is properly explained by you and understood. Agree, that's not hacking. Thanks for following up, also on the database search question. Case closed.

Cheers, Tom