The Better Business Bureau (BBB) announced last week that a new phishing scam could be hitting an e-mail inbox near you!
False e-mails are being sent from what appears to be ticketing sales site, StubHub (you know, the Ryan Secrest endorsed ticket site), and are tricking many victims into turning over personal information.
Apparently it’s been reported that the e-mail usually claims that an expensive purchase is pending on the victim’s account that usually involved boxing tickets in Neveda. It then tells the victim that they must log on to their account using the provided attached link in order to cancel the order.
This e-mail scammer is counting on the victim’s initial gut reaction, adrenaline and/or fear of a big purchase being unknowingly made to their account that they are likely to jump right on the provided link and follow any instructions without checking the validity of the e-mail or the link provided.
The link actually takes the victim to a fake site designed to steal one’s username and password information after entered. After the victim tries to log in their personal information is sent to the scammer and they now have access to all of the victim’s account and account information.
StubHub announced that these e-mails were not sent by the company or its affiliates. They also assured customers that their credit cards were not charged for a large boxing purchase in Neveda unless they had purchased such tickets.
StubHub warns: “Please DO NOT click on any link in the email… If you have clicked on these links, you may need to check your computer for a virus or malware and should log into your StubHub ‘My Account’ to change your StubHub password” – Source.
The scam has been running since 7 am on October 27, 2011 and hundreds have been reporting it across the country.
“Scammers seem to be getting progressively more difficult to track,” said Carrie A. Hurt, president and CEO of BBB serving Central, Coastal, Southwest Texas and the Permian Basin. “Fortunately, in this case, they sent the scam directly to BBB. We are hoping to get the word out in order to minimize the number of victims” – Source.
How the scam aworks:
- The email asks you to login to your StubHub account to confirm the order.
- DON’T login. A computer program may steal your password, giving thieves access to your StubHub account where valid credit card info may be stored.
- Change your account password if you have an account at StubHub right away. Go directly to the StubHub site to do that, not through the email.
- Send a copy of the email you receive to firstname.lastname@example.org, so StubHub can investigate.
- If you concerned about false credit card charges, go directly to the StubHub website and follow their instructions about how to contact the real business – Source.
If you have been scammed and would like to file a scam report, please click here.