PSA: 86technie E-commerce Scam Awareness Thread

  • Have you been Scammed?
    Follow this advisory from National Crime Prevention Council (NCPC) or call ScamShield Helpline 1799. More info
H

honda599

Member
Joined
Jun 2, 2013
Messages
218
Reaction score
86
86technie said:
This is a awareness thread.

Many of you know I have legit issues with Carousell platform.
Things have been moving vey slowly that I have quite a number of stuff left unsold
for many months.

Recently I wanted to sell a Desktop PC on FB marketplace than this buyer message me.
Charleigh Calabrese is the user name at first sound very legit.
I am in the IT, how would I not know how to spot if there's a bot or scammer behind
the scam.

I ask him few questions like what is he using the PC for.
As well as where he stay even gave me a legit postal code 600371.
What give away this user is a scammer is when I ask him how is he going to make payment.



To me is fishy than after buyer send me a Lalamove link to get the money.
There are few things to spot here:

1) The URL link doesn't look phishing, hosted with spoofing URL with Lalamove suffix.
So very difficult to spot.
2) After clicking the Get funds it direct to a page to choose your bank.
There's no POSB/DBS proably they know POSB/DBS can block very easily.
When I choose POSB/DBS, was asked to enter my Debit card details.
Than after the URL redirect to a DBS banking page than I realize something very wrong.
When I tried to enter the DBS ibanking page, I got denied twice proably either
my PC or DBS side block the connection.
3) Than after when i notice that I could not log in as well as a agent appear out of nowhere
telling me that my userID and passcode is wrong.
I cancel and call DBS immediately, DBS immediately cancel my ibanking and card details.

I also ask DBS did anyone access my bank account money or not.
DBS told me no one have touch it and access to my bank will be restored later this week.
To all please do not use FB marketplace there are scammers lurking around.
Click to expand...

i kena the exact same thing from FB marketplace. I was careless and I went to their link which look exactly the same as my bank login page and out of habit, I mindlessly entered my credentials. Then the page jammed. I only realized it was a scam after a while and changed my password.
 
whatheheck

whatheheck

Great Supremacy Member
Joined
May 18, 2012
Messages
63,952
Reaction score
16,696
honda599 said:
i kena the exact same thing from FB marketplace. I was careless and I went to their link which look exactly the same as my bank login page and out of habit, I mindlessly entered my credentials. Then the page jammed. I only realized it was a scam after a while and changed my password.
Click to expand...
I'm no expert ,but you leaked your own username , imo you should go click forget user and change it ( even if it is not urgent anymore and nothing seemingly is amiss) . If that's a fake site ,what you type, the scammers can see.
Best is reset username + password again.

https://www.dbs.com.sg/personal/support/bank-digibank-reset-uid-pin.html
 
8

86technie

High Supremacy Member
Joined
Jun 8, 2006
Messages
40,672
Reaction score
6,133
ThinkMe said:
"I am in the IT, how would I not know how to spot if there's a bot or scammer behind the scam."

He claimed as such
Click to expand...

No joke, cuz I just check the url I click doesn't give any hint of a phising.
I will update in first post.
 
H

hwsstx

Master Member
Joined
Sep 26, 2016
Messages
4,879
Reaction score
3,559
honda599 said:
i kena the exact same thing from FB marketplace. I was careless and I went to their link which look exactly the same as my bank login page and out of habit, I mindlessly entered my credentials. Then the page jammed. I only realized it was a scam after a while and changed my password.
Click to expand...
Fortunately you didn't approve the login via the Token
 
8

86technie

High Supremacy Member
Joined
Jun 8, 2006
Messages
40,672
Reaction score
6,133
TBH many of you know I just been scam, my bank details, debit card number was expose to scammer.
That I just came back from Police station and quite piss off.
I will be very blunt as this group of scammers want to target me but they don't know who I am.

Many of you know I am in the IT sector but after this scam case.
I will investigate the first issue is how they able to spoof a Lalamove website.
Many of you know many company including Gov outsource IT to different vendors or SI.

There been cases of data breach as well as today incident of sensitive information leak.
Many have complain that the state court real issue is outsource to a vendor who hire foreigners.
TBH foreigners don't really care about royalty or performing well in your company.

What most foreigners come to SG want is money nothing else.
My recent scam involving Lalamove so I will launch a enquiry how scammers able to spoof their website.

"<Malicious link removed by moderator>”

I will look into where this website IP address is at and see where it piggyback to.
There are tools online to check if this domain is legit, when I look up this domain it was recently
created.

Quite piss off what happened today losing my personal info because I not only let my guard down.
But also fail to do checks like use tools online to check if the link is legit.
Since this scammer target a IT professional, I hope not only to expose this group of people.

Proably will find ways to properly identify website spoofing as well as how it can happened.
To this group of scammer, I am coming for you in full force.
 
Last edited by a moderator:
Kenzo88

Kenzo88

Supremacy Member
Joined
Jan 25, 2008
Messages
8,266
Reaction score
647
I encountered these kind of scam msg very often. I usually replied "No Lalamove, Self Collection only - Paynow or Cash". Those scammers seen n mia...
 
Nakedtoes

Nakedtoes

Great Supremacy Member
Joined
Dec 9, 2002
Messages
60,284
Reaction score
3,662
TS... I also kana. But I kudo to u that u dare to click the link to recieve money.. Lol... Mine is wait until a while sent me the lalamove page.. Said will arrange payment to courier and collect parcel.. I straight away give her the middle finger... Either u paynow else no deal... Lol

Few thing I notice and alert me.. First the address show in and postal code wrong. 2nd thing deliver address so near mine place why dun come collect ownself... Really dumb scammer.
 
Geminiboy

Geminiboy

Arch-Supremacy Member
Joined
Apr 26, 2017
Messages
15,810
Reaction score
10,651
Most of IT everywhere, including government boards, employ or are outsourced to foreigners. Long ago I already said there are a lot of inducements from crime syndicates to these foreigners to steal data and make money out of it.

Most of those induced see it as low risk. Come Singapore, make as much as you can, and get out. They know their acts will not be discovered for a good one to three years, if ever. They can get out and disappear into their motherlands in time.
 
You must log in or register to reply here.
Important Forum Advisory Note
This forum is moderated by volunteer moderators who will react only to members' feedback on posts. Moderators are not employees or representatives of HWZ Forums. Forum members and moderators are responsible for their own posts. Please refer to our Community Guidelines and Standards and Terms and Conditions for more information.
Top