Hijacking inactive accounts in order to scam buyers is a common issue on forums. This post is from January of this year on the Xenforo support forum:
"We've had a few recent problems with old accounts being hacked for the purpose of "selling" goods (ie, scamming) in our member-to-member marketplace using these stolen identities. (The amounts are in the low thousands of dollars each, so it's serious.) Our forum has been around for 17 years (although only on XF for 3; before that on vBulletin), so I'm positive that we've got thousands of accounts with weak passwords that are going to be easy pickings for this approach in the future."
I have installed a software add-on that will security lock inactive accounts when a login is attempted. Any account that has not had a login within 180 days will prompt the member to reset their password.
The add-on description: This small addon will help you ward off the spammers using old accounts that have been breached. What this does is set the accounts security lock to "reset" which means the user will have to reset their password before they login. The way to reset the password is the standard Xenforo reset password function, they will get an email with the password reset.
I have set this to 180 days but can change it to another time limit.
"We've had a few recent problems with old accounts being hacked for the purpose of "selling" goods (ie, scamming) in our member-to-member marketplace using these stolen identities. (The amounts are in the low thousands of dollars each, so it's serious.) Our forum has been around for 17 years (although only on XF for 3; before that on vBulletin), so I'm positive that we've got thousands of accounts with weak passwords that are going to be easy pickings for this approach in the future."
I have installed a software add-on that will security lock inactive accounts when a login is attempted. Any account that has not had a login within 180 days will prompt the member to reset their password.
The add-on description: This small addon will help you ward off the spammers using old accounts that have been breached. What this does is set the accounts security lock to "reset" which means the user will have to reset their password before they login. The way to reset the password is the standard Xenforo reset password function, they will get an email with the password reset.
I have set this to 180 days but can change it to another time limit.
JohnGellings
Well-known
I didn’t see any follow up and he said he opened a case. Not sure if he did that online or not. This would need urgency imo.I believe the OP has taken this action, and the conversation has turned towards methods to prevent scam ads on RFF.
I was surprised that Paypal did not reverse charges when my wife reported Fraud, just after the data breach, and it was her Credit Card company that ended up reversing the charges. Paypal opened a dispute case, but was very, very slow. So slow- the credit card company fixed the problem. Paypal would not let my wife close the account while the dispute was open. A few months went by, guess Paypal figured they were not going to get to keep their fees, dispute over- then she closed it.
WoodallP
Pragmatist Barnack lover
There are so many layers in this discussion but one is the sense of false security we have in our niche. I got scammed on a Nikon Coolscan 9000 a few years back. I felt secure as it was in my realm; it wasn't luxury goods or stuff in demand, it was just something special to someone who knew what they were looking for. I think we feel a bit hurt when someone knows enough to sell us that sort of stuff scams us. Caveat emptor!
trix4ever
Well-known
I hear you but try a password manager. Then you only have to remember one password, everything else gets auto-filled on demand. Bitwarden is great and free but there are others.
Sounds good but how does this work across 2 desktops, 1 laptop and a phone?
Genuine question
Oh and they are not necessarily online at any given time.
KismetSky
Established
The customer service line corrals you into opening a dispute just like the online option which I've already done. There's nothing else I can currently do at this time.OP, why not just:
Call PayPal Customer Support
1-888-221-1161 and your credit card and be done with it.
Joerg
Dilettant
This ad was a sure scam.
M10 plus two lenses ( one being aspherical) for the price is too good to be true.
Caveat emptor.
Best
M10 plus two lenses ( one being aspherical) for the price is too good to be true.
Caveat emptor.
Best
Joerg
Dilettant
Any updates?
raid
Dad Photographer
When you plan to spend thousands of Dollars on a buy, it is prudent to contact the seller and to look into this person's information. Can you trust him? Should you move on? Ask some friends for their advices. Think it over.
KismetSky
Established
It was a long drawn out process but PayPal has finally closed the dispute claim in my favor and refunded the funds back to my credit card. It involved back and forth between me, my cc, and PayPal and submitting statements, screenshots, etc multiple times but at least I now have my money back.
raid
Dad Photographer
Excellent outcome! Good for you.
Excellent news!
ChrisPlatt
Thread Killer
A bit of fun to celebrate your good news!
Youtube link : Flight of The Conchords - Internet scam
Chris
Youtube link : Flight of The Conchords - Internet scam
Chris
Joerg
Dilettant
Great news!!
ChrisPlatt
Thread Killer
Share:
-
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.