this post was submitted on 02 Dec 2024
225 points (88.7% liked)

Ask Lemmy

27210 readers
1516 users here now

A Fediverse community for open-ended, thought provoking questions


Rules: (interactive)


1) Be nice and; have funDoxxing, trolling, sealioning, racism, and toxicity are not welcomed in AskLemmy. Remember what your mother said: if you can't say something nice, don't say anything at all. In addition, the site-wide Lemmy.world terms of service also apply here. Please familiarize yourself with them


2) All posts must end with a '?'This is sort of like Jeopardy. Please phrase all post titles in the form of a proper question ending with ?


3) No spamPlease do not flood the community with nonsense. Actual suspected spammers will be banned on site. No astroturfing.


4) NSFW is okay, within reasonJust remember to tag posts with either a content warning or a [NSFW] tag. Overtly sexual posts are not allowed, please direct them to either [email protected] or [email protected]. NSFW comments should be restricted to posts tagged [NSFW].


5) This is not a support community.
It is not a place for 'how do I?', type questions. If you have any questions regarding the site itself or would like to report a community, please direct them to Lemmy.world Support or email [email protected]. For other questions check our partnered communities list, or use the search function.


6) No US Politics.
Please don't post about current US Politics. If you need to do this, try [email protected] or [email protected]


Reminder: The terms of service apply here too.

Partnered Communities:

Tech Support

No Stupid Questions

You Should Know

Reddit

Jokes

Ask Ouija


Logo design credit goes to: tubbadu


founded 2 years ago
MODERATORS
 

Url looks suss. Seems kinda sophisticated for the usual ups fishing scam. Here's the text message I got leading here.

"Wishing you a bright and sunny day!" Lol, I almost want to help this guy by explaining that UPS and American companies in general have disdain for their customers and would never wish them to have anything that would not benefit the company.

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 296 points 2 weeks ago* (last edited 2 weeks ago) (4 children)

I seriously doubt USPS bought a domain like gflrml dot cyou for their business. It's 300% a scam.

[–] [email protected] 106 points 2 weeks ago (2 children)

Reminds me of my previous bank.

They changed some system countrywide, so I got an email that I need to update some data and go to a website to do that.

If was something like "update-[bankname]-data-now.tld".

It was sent to a unique mail address I used for them. But still though it was phishing.

Turns out: No. It was real. Whoever came up with the idea to not host that stuff on at least a subdomain of the bank really needs to get fired. and each and every manager who was part of the decision process.

[–] [email protected] 45 points 2 weeks ago

Ugh. I work in the public sector and let me tell you, there are SO many companies that send the most dogiest, scammiest looking emails telling you to follow a link, only for it to turn out to be perfectly legitimate.

I honestly can see now why people end up falling for these things when even legitimate companies send emails looking just like phishing scammers

[–] [email protected] 31 points 2 weeks ago* (last edited 2 weeks ago) (1 children)

Had that happen, too. We all try to educate users to NOT click on some dubious phishing/scams and put in qute some effort to explain it over and over again, and then there are companies doing things like that. It's just sad.

[–] conciselyverbose 16 points 2 weeks ago

lol I have to go back to the bank (when there's a manager, because there wasn't last time🤦‍♀️), to turn online banking back on for my account.

It got turned off because I didn't pick up some spam call they made.

[–] [email protected] 31 points 2 weeks ago (1 children)

The text message is the big red flag, that's obviously a scam and has been happening for at least a year. Most scam texts are filtered on my phone, but a few of these slip thru.

I guess they're just trying to tie phone numbers to addresses so they can sell the phone list for more info.

Especially with people keeping their cell number while moving states, tying an address to the number and verifying it's that person would be a tidy profit.

[–] [email protected] 13 points 2 weeks ago (1 children)

Link shortener (not their own at least) is another massive red flag, same with typos ('number number' in page)

[–] [email protected] 4 points 2 weeks ago

Unfortunately I can think of one company in particular that uses tinyurl when you sign up for shipping updates on their website (looking at you Samsung!).

At least with that one:

  • you know you signed up for it
  • they send a text right when you sign up for it
  • they use an official short SMS (5 digit) number.
[–] [email protected] 10 points 2 weeks ago

Also, is it common for a legitimate government agency to use a third-party link shortener like bitly?

[–] [email protected] 2 points 2 weeks ago

You mean (uint32_t)-1 %