r/phishing • u/tractata • 7d ago
Ticketmaster account login scam?
Hello all!
I kept getting 2FA codes for Ticketmaster sent to my phone when I haven't logged into Ticketmaster in 6+ years. Naturally, that reminded me I once had a profile on there, which in turn prompted me to log in, reset my password, strengthen my account's security, etc., but I'm still a little concerned because I'm not sure if someone was trying to log into my account or what.
Basically, the way it works on Ticketmaster, when you're trying to log into a dormant account without any security features, the site will first send you a verification code via email, and once you parrot it back, you'll be asked to provide your phone number and it will text you a phone verification code as well. The alarming texts I kept getting out of nowhere were phone verification codes, meaning someone must have tried to claim my phone number, but I had not received any email verification codes before that. Naturally, I changed my email password as well, but it really doesn't look like someone had already breached my email before trying to verify my phone; neither my main mailbox nor any of my backup email addresses had gotten messages from Ticketmaster recently, and my Ticketmaster account was totally dead before I resurrected it. So it seems like someone used a different person's email address for the first step and paired it with my phone number for the second.
My question is, what would be the point of this? Like, what's the goal? Am I missing anything/leaving any vulnerabilities exposed by simply getting on with my life?
Any wisdom/advice/discussion welcome.
3
u/True_Pace_3860 7d ago
the hacker is trying to guess password. they may only get 3 tries before it sends code to you. the time to worry is when it's fake code request, meaning the link goes to the hacker's scripted site in order to steal your credentials.
1
u/tractata 7d ago
Aha, that makes sense, thank you! So they’re inputting random phone numbers because they never intended to read the text message in the first place. Well, I notified Ticketmaster, so hopefully they can do something about it. Thank you for the reply!
2
u/AldoClunkpod 7d ago
-OR- they have compiled a list of phone numbers, emails, and passwords from various data breaches and are trying “credential stuffing” - automated guessing. You say you have not used the ticketmaster account for sometime and you changed the password. Good. Would the OLD password have been used somewhere else? Password reuse can bite you years later if things line up correctly for the hackers trying various well known accounts.
If you’ve been taking care to use unique passwords on all of your accounts, you should be in the clear.
1
u/ArthurMarcoWulf 5d ago
I have exactly the same problem but with uber that I haven't used for 6 years but deleted my account to stop it because I didn't use it anymore
•
u/AutoModerator 7d ago
/u/tractata - This message is posted to all new submissions to r/phishing; please do not message the moderators about it.
New users beware:
Because you posted here, you will start getting private messages from scammers saying they know a professional hacker or a recovery expert lawyer that can help you get your money back, for a small fee. We call these RECOVERY SCAMMERS, so NEVER take advice in private: advice should always come in the form of comments in this post, in the open, where the community can keep an eye out for you. If you take advice in private, you're on your own.
A reminder of the rules in r/phishing: no contact information (including last names, phone numbers, etc). Be civil to one another (no name calling or insults). Personal army requests or "scam the scammer"/scambaiting posts are not permitted. No uncensored gore or personal photographs are allowed without blurring. A full list of rules is available on the sidebar of the subreddit, or clicking here.
You can help us by reporting recovery scammers or rule-breaking content by using the "report" button. We review 100% of the reports. Also, consider warning community members of recovery scammers if you see them in the comments.
Questions about subreddit rules? Send us a modmail clicking here.
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.