Web Hosting Talk







View Full Version : Wow, these guys are persistent


vito
02-11-2003, 11:28 PM
Some people are pretty stubborn. I watched someone come onto my site today and order $400 worth of tutorials in about 2 minutes flat. Unusual. Normally someone will look around for a while first. So the online order is approved. :mad:

He also uploads a logo to put into the movies. Totally different logo compared to the company name/site on the order. I look at the address of the credit card holder, it is in Yuma Arizona. I do a whois on the domain name, it is in Latvia. Hmmm. Fraud.

I send an email to him asking to explain the discrepancies. No reply.

6 hours later, I get an identical order. Identical logo sent in. But now it's using a credit card from a guy in Reno Nevada. I look up the domain on this order - Belarus. Totally smacks of fraud.

On both occasions I try to call the cc holder. The first one is out of service. The second one, an 888 number, I get through. The guy is stammering through every lie. I tell him to take his business elsewhere.

An hour later, I get a call (on my toll free line) from his "interpreter" trying to get the order through. I end up having to hang up on him. He's a worse liar than the first guy. An hour after that, I get a call from his "accountant". A half hour after that, a call from his "banker".

Man, these guys sure are persistent. Dumb as a bag of hammers, but persistent.

Vito

Acroplex
02-11-2003, 11:30 PM
Unless you hear from the prime minister of Belorussia, don't budge :D

ub3r
02-11-2003, 11:33 PM
I really really think you should post the IP address in this thread.

Acroplex
02-11-2003, 11:40 PM
ban the subnet?

vito
02-11-2003, 11:48 PM
Hmm. Interesting turn of events. I just got an email from the guy on the second order claiming that the first guy from Latvia misrepresented himself as a reseller of DemoDemo, and tried to grab him for $400.

This guy just sent me his full credit card details by email. But brand new name, brand new address. :eek:

Will have to wait until tomorrow morning to report them to my cc processor.

I just hope they stop running up my phone bill... :mad:

Vito

Acroplex
02-11-2003, 11:50 PM
No no no!!!
That's a known scam!!!

Establishing trust through the revelation of a successful handling of an alleged scam. Only they are both the same person or accomplishes.

vito
02-12-2003, 12:03 AM
Ha! Here's the email he sent:

Hello mr. Ceniti,
There was some misunderstanding between us, you and [first order]. We just want to by your product, with
our Credit card, for our company. The card info is:
[name] MasterCard xxxxxxxxxxxxxxxx xxx 2/2006 [address] reno, NV 89502
We don't know anything about [first order] operations, because they have denied our order to this demos,
and we have no further business with them.
Are they really your resellers ? They are saying so...
If no, we begin to understand why you are think this is a fraud.
But we are honest company, this is real Credit Card, all domains are registered to my name,
and I'm sure that all needed verifications will be passed. I'm actualy confused, because we
are fighting fraud ourselfs, writing anti-fraud software for our site, etc. I will write abuse
about [first order].
We are very concerned about reputation of our company, because we just starting.
I believe that this conflict will be successfully solved.
Thanks.
---
With Best Regards,
[name]

Kills me to refund $400 orders, but sure beats having chargebacks a month later...

Vito

JeremyV
02-12-2003, 12:09 AM
lol, just from reading the broken and poor english in that email, with all of the rest of your evidence, steer clear.

Acroplex
02-12-2003, 12:10 AM
Me love u long time :D

pattox
02-12-2003, 01:15 AM
Hmmm, Smells like fraud from here :D

pcsteve
02-12-2003, 01:34 AM
Here's what i would do:

1) Send the client an email stating that "service has been denied" for their account due to blah blah blah.

2) Issue a refund (let them know about it)
3) Block the IPs/subnet used when ordering.

....problem solved.

:cartman:

akashik
02-12-2003, 02:15 AM
If thieves were smart, they wouldn't need to be thieves. Jail is full of 'smart thieves' after all :)

Greg Moore

luxline
02-12-2003, 02:54 AM
Use .htaccess to block ALL AND I MEAN ALL ips from:

.cz .pl .sk .ro .ru .lv

You'll still get a few through, and a few via proxy services, but that should put paid to the bulk of East European credit card fraud.

I live in one of the above countries, and have a very good knowledge of these activities.

Goto apache.org to get the details of how to use .htaccess etc. or pm me.


And for good luck, put in .se .fi aswell, I get lots of fraud from there too.

Chachi
02-12-2003, 07:52 AM
If thieves were smart, they wouldn't need to be thieves. Jail is full of 'smart thieves' after all

That's a great quote, I'll plaugerise it :)