for the archive a fake tracking number that resolves on no carrier at all is conclusive. one that resolves and stalls is not
👀4
#scam-watch 2026-04-15
Wednesday56 messages10 participantstimes are UTC
Highlights from this day
- zed_zeroes_in — read it character by character 20:56
- first_and_last_four — a reply from a different address than the one you wrote to is worth stopping over 21:06
- salt_bridge — for the archive how do you check a domain is the real one without clicking it 21:15
- impersonator_ip — if you cannot tell an impersonator from bad support, treat it as an impersonator until you can 21:36
- VialBot — Reminder for first_and_last_four: dose day is today. Set 8 days ago. 22:27
right so this domain is one letter off the real one, adding it to the watchlist
the lookalike domains almost always differ by one doubled letter, a swapped letter, or an added hyphen
is a bad batch ever grounds for calling something a scam
group buy organiser has gone quiet after 11 days, what do people do
got an unsolicited message offering a discount, is this a known thing
classic advance fee
do not engage. do not negotiate. do not send a test payment. screenshot and post it
update from 21 months ago: the domain from that report is still live and still fake
read the domain character by character. that is the entire defence and it works
update from 6 months ago: the domain from that report is still live and still fake
report it
do not engage
a discount that expires in an hour is a pressure tactic and it is the oldest one there is
thats a bad batch not fraud
🎉14
certificate looks recycled from another lot, second opinion
read it character by character
😂16🎉1🔥5
we do not name private individuals in this channel. that is why some lines here are redacted
added to the watchlist
🧊16
a second payment because the first "did not clear" is the pattern. there is no first payment to clear
nobody legitimate contacts you unsolicited offering a discount. report it, do not reply
a reply from a different address than the one you wrote to is worth stopping over
🙏1🧪7
relabelling and marking up is retail, not fraud. it is a risk profile question, not a crime
somebody is using the room name to sell things, who do i tell
for the archive how do you check a domain is the real one without clicking it
✅1📈13💀2
impersonating a real supplier support desk is the pattern that has cost members the most money
advance payment for a "reservation", has anyone seen this pattern
fraud means somebody set out to take your money or deceive you about what is in the vial. keep the words separate, your mileage will differ
😂2🤝3💀1
the room holds no money and runs no escrow. anybody offering to is speaking for themselves
i have never seen a real supplier ask for payment to a personal account
pressure tactic
if you cannot tell an impersonator from bad support, treat it as an impersonator until you can
✅2📈6❤️11
the careful version of this channel is worth ten times the angry version
Batch lookup E-2205: 9 independent reports on file, earliest 2025-09-14.
report it even if nothing happens. the pattern is the value, not the individual case
no names please
coming back after 11 months, is the watchlist still maintained
thats the pattern
the lookalike domains almost always differ by one doubled letter, a swapped letter, or an added hyphen
a chromatogram that appears on two different lots is forged. not sloppy, forged
the watchlist is pinned and maintained. add anything you find with a screenshot
the watchlist is pinned and maintained. add anything you find with a screenshot
thats retail not fraud
screenshot it
an anonymous group buy organiser holding other peoples money is the highest risk arrangement in this hobby
screenshot it
Reminder for first_and_last_four: dose day is today. Set 8 days ago.
✅13
redacting that
i was wrong to call something a scam in 2024 and it was a fill problem. i try to remember that
this certificate has the same chromatogram as one from two years ago
a bad batch is not a scam. an underfill is not a scam. slow support is not a scam
read the domain character by character. that is the entire defence and it works
is an underfilled vial fraud or a bad batch
is a hyphenated version of a real domain always fake
report it
no escrow here
😂2
read it character by character, for what its worth
👀4
the reply came from a different address than the one i wrote to, is that normal
report it even if nothing happens. the pattern is the value, not the individual case
i have never seen a real supplier ask for payment to a personal account
no names please
report it, ask me again in a month
[edited]