Phishing attempt

  • @miranda
    Administrateur

    516 messages

    Belgique

    Hi everyone,

    There is an ongoing phishing attempt. The accounts used to contact you were closed yesterday night.

    The emails that were sent claimed to be from a "Felt" employee and it looked like this:

    "Hello, this is your Felt Staff employee speaking with you Due to an update to our payment system and global security update, order processing for your account is currently suspended! You will need to identify your account. As soon as this is done, it will be back up and running normally. Please fill out this form to verify your account".

    This e-mail is an attempt at phishing. This fraudulent technique is designed to lure you into providing personal data by pretending to be Delcampe. Under no circumstances should you reply to these e-mails or click on the links.

    We strongly advise you to delete this message and not to follow any instructions it contains.

    Kind regards,
    Miranda

    Delcampe.net
  • sammlerkalle

    873 messages

    Allemagne

    Luckily, the phisher obviously wasn't able to access any data. But as you can see, he somehow managed to get himself a green hook ( = verified account). So there seems to be a weak point here. What will Delcampe do to return to relying on the hook as a quality feature?
  • Roterosen

    122 messages

    Thaïlande

    Luckily, the phisher obviously wasn't able to access any data. But as you can see, he somehow managed to get himself a green hook ( = verified account). So there seems to be a weak point here. What will Delcampe do to return to relying on the hook as a quality feature?
    • Posté le 17 mai 2024 à 03:08
    • #1745057
    I asked this DC several times in the past, seeing a day old, new account, with 100+ of positive feedbacks. How is this possible? In my opinion, this is advanced hacking and DC seems to be unable to close this security gap. See the post here, Lien (https)

    It's NOT about creating accounts again and again - That's NOT hacking!
    But if someone can have 102 positive feedbacks in one day and/or a verified badge - Then surely it is.

    What do you think?
  • @miranda
    Administrateur

    516 messages

    Belgique

    Luckily, the phisher obviously wasn't able to access any data. But as you can see, he somehow managed to get himself a green hook ( = verified account). So there seems to be a weak point here. What will Delcampe do to return to relying on the hook as a quality feature?
    • Posté le 17 mai 2024 à 03:08
    • #1745057
    The verification system (the green icon) is available to everyone with a phone number.
    It allowed members to contact other members; even though they never carried out transactions on the website. This was already the case with the previous verification system we had in place (the postal verification which no longer exists).

    As of today, a member can only contact another member if they have had at least one transaction together. It doesn't matter if their account is verified or not.
  • sammlerkalle

    873 messages

    Allemagne

    The verification system (the green icon) is available to everyone with a phone number.
    It allowed members to contact other members; even though they never carried out transactions on the website. This was already the case with the previous verification system we had in place (the postal verification which no longer exists).

    As of today, a member can only contact another member if they have had at least one transaction together. It doesn't matter if their account is verified or not.
    • Posté le 17 mai 2024 à 05:45
    • #1745213
    You didn't answer my question.

    Why does someone like this phisher be classified as verified on your platform on the first day of registration? As you can see, every phisher, every fraudster and anyone who otherwise has bad intentions can get this green hook if he only has a phone. Then this procedure is worthless and you should switch to a procedure that really says something about whether it is a serious member.

    You just want to make it easy for members to get a green hook. But as you can see, the simple way is not always the best and not the one who really has a value. This also makes my green hook worthless.
  • Compte supprimé
    Compte supprimé

    0 message

    Suède

    You didn't answer my question.

    Why does someone like this phisher be classified as verified on your platform on the first day of registration? As you can see, every phisher, every fraudster and anyone who otherwise has bad intentions can get this green hook if he only has a phone. Then this procedure is worthless and you should switch to a procedure that really says something about whether it is a serious member.

    You just want to make it easy for members to get a green hook. But as you can see, the simple way is not always the best and not the one who really has a value. This also makes my green hook worthless.
    • Posté le 17 mai 2024 à 15:10
    • #1745516
    Les informations ne sont plus disponibles car le compte de cet utilisateur est supprimé (Règlement RGPD)
  • stampmall

    31 messages

    Australie

    Nice to see the spam has stopped, but it has also turned off a needed contact avenue.
    When a buyer makes an offer and you need to communicate with them about their offer. There is now no way to do this.
  • sammlerkalle

    873 messages

    Allemagne

    Nice to see the spam has stopped, but it has also turned off a needed contact avenue.
    When a buyer makes an offer and you need to communicate with them about their offer. There is now no way to do this.
    • Posté le 22 mai 2024 à 04:47
    • #1748219
    At least customers still have the opportunity to ask questions (Questions tab). But as far as I know, this is then displayed publicly with a username. And I don't think anyone here wants to conduct negotiations in a publicly visible manner. Delcampe is apparently not missing out on anything this year to chase away every last customer.
  • mjocovers

    466 messages

    Royaume-Uni

    Nice to see the spam has stopped, but it has also turned off a needed contact avenue.
    When a buyer makes an offer and you need to communicate with them about their offer. There is now no way to do this.
    • Posté le 22 mai 2024 à 04:47
    • #1748219
    That is not good. When someone makes a lower bid, which is too low, and I send a counter offer, I also message them as well, as I found that increases the acceptance of the counter offer.
  • grahamshanghai

    39 messages

    Royaume-Uni

    At least customers still have the opportunity to ask questions (Questions tab). But as far as I know, this is then displayed publicly with a username. And I don't think anyone here wants to conduct negotiations in a publicly visible manner. Delcampe is apparently not missing out on anything this year to chase away every last customer.
    • Posté le 22 mai 2024 à 05:23
    • #1748228
    Indeed ! However when this happens I simply write to their email via Messages in the usual way and delete the question. Never had any issues doing that.
  • mjocovers

    466 messages

    Royaume-Uni

    Indeed ! However when this happens I simply write to their email via Messages in the usual way and delete the question. Never had any issues doing that.
    • Posté le 22 mai 2024 à 12:29
    • #1748447
    Will that now be possible if the potential buyer hasn't yet bought anything?
  • grahamshanghai

    39 messages

    Royaume-Uni

    Will that now be possible if the potential buyer hasn't yet bought anything?
    • Posté le 22 mai 2024 à 17:48
    • #1748501
    Why should it not be ? If they are registered member, they can ask a Q. Or am I missing something ? :(
  • Servitel

    399 messages

    Suisse

    Why should it not be ? If they are registered member, they can ask a Q. Or am I missing something ? :(
    • Posté le 22 mai 2024 à 18:50
    • #1748504
    Since some days it's impossible to contact an user.
    Just tried with you, and I receive this error message:


    You have not yet made any transactions with this member. For security reasons, it is not possible for you to contact them directly.
    You have two options:

    If you have a question about an item listed for sale by this member, you can ask them by going directly to the "Question" tab to be found on the item page.

    That's RIDICOULUS. :d-unhappy:
    I'm also courious for the option 2 never mentioned on the error message :D
  • mjocovers

    466 messages

    Royaume-Uni

    Why should it not be ? If they are registered member, they can ask a Q. Or am I missing something ? :(
    • Posté le 22 mai 2024 à 18:50
    • #1748504
    They can ask you a question on a specific item, which will then be publicly visible on the listing, but you can no longer contact them direct via Messages
  • grahamshanghai

    39 messages

    Royaume-Uni

    Ah right. But that has not been my experience. I have had quite a few queries that start as a question, from someone I have not transacted with before. And I delete the Q and message them back as normal and they get that message.

    Maybe them asking the Q counts as "a transaction" ?

Rejoignez la communauté des collectionneurs !

S'inscrire Se connecter