if you cannot tell an impersonator from bad support, treat it as an impersonator until you can
#scam-watch 2025-06-16
Monday20 messages5 participantstimes are UTC
Highlights from this day
- thirty_min_wait — unrelated but anyone recognise this pattern, a discount that expires in an hour 01:32
- gradient_greg — is it worth reporting or does nothing happen 02:16
- gradient_greg — a second payment because the first "did not clear" is the pattern. there is no first payment to clear, for what its worth 02:19
- no_escrow_nate — the lookalike domains almost always differ by one doubled letter, a swapped letter, or an added hyphen 03:05
no escrow here
🧊1
got an unsolicited message offering a discount, is this a known thing
the watchlist is pinned and maintained. add anything you find with a screenshot
screenshot it
advance payment for a "reservation", has anyone seen this pattern
do not engage. do not negotiate. do not send a test payment. screenshot and post it
impersonating a real supplier support desk is the pattern that has cost members the most money
a reply from a different address than the one you wrote to is worth stopping over
unrelated but anyone recognise this pattern, a discount that expires in an hour
🤝7🧊1👀12
read the domain character by character. that is the entire defence and it works
added to the watchlist
is it worth reporting or does nothing happen
📉2⚠️2
a second payment because the first "did not clear" is the pattern. there is no first payment to clear, for what its worth
👍6⚠️1
they asked for a second payment because the first one "did not clear"
relabelling and marking up is retail, not fraud. it is a risk profile question, not a crime
the lookalike domains almost always differ by one doubled letter, a swapped letter, or an added hyphen
somebody is relabelling and marking up, is that a scam or just retail
[edited]thats retail not fraud
ok so the room holds no money and runs no escrow. anybody offering to is speaking for themselves