Wednesday, August 30, 2017

PSA: Do not Reply to Essential “Purchase Verification” Emails (Potential Credit Card/Identity Fraud), Emails Reportedly from Essential Phone Staff

The Essential phones are now shipping to customers after a really long wait, but things are not looking good for some buyers. Last night, an email allegedly coming from their support team was seemingly chained to many customers. The email, which came from customercare@essential.com, asked for the customer's photo ID or other identification papers (passport, driver's license…), as they needed additional information for verifying the purchase. This has raised a lot of eyebrows, and some upset users considered it a phishing scam or a server hack because of the email's appearance and odd wording. It reads as follows:

Hi,

Our order review team requires additional verifying information to complete the processing of your recent order.

This verification is performed to protect against unauthorized use of your payment information and similar to what is conducted for in-person purchases.

Please provide an alternative email and phone number to confirm this purchase..

We would like to request a picture of a photo ID (e.g. driver's license, state ID, passport) clearly showing your photo, signature and address. NOTE: the address on the ID should match the billing address listed on your recent order.

We apologize for the inconvenience and appreciate your cooperation.  Once verified, we look forward to shipping your order.

Thanks!

Essential Products Customer Care

The email was first reported on Reddit, precisely on /r/Essential (and then crossposted to /r/Android), where it generated quite a bit of discussion. It was eventually settled on those subs that it could a security leak (someone getting a hold of Essential's mailing list), a phishing attempt by an Essential employee or another person, or just a big mistake from a company employee. It was also later reported on /r/Android that both addresses at Essential were disabled. However, we are not 100% sure what happened here, as the email did apparently come from the official servers.

Either way, if you have bought one of these phones and you got one of these emails, do NOT respond to it until the company releases a proper official statement on the situation. You could be potentially putting your personal information in danger. We're currently looking forward to an official statement from Essential on the matter beyond the tweet shown above. In the meantime, you can read both Reddit discussions here and here.

Suggested reading: Essential is Bleeding Consumer Trust Before its Products Reach Customer Hands


Source: Reddit



from xda-developers http://ift.tt/2xMiUQ3
via IFTTT

No comments:

Post a Comment