- Joined
- Oct 11, 2004
- Posts
- 14,455
So this morning at about 9:30 I get the text that Amazon sends you when your order is shipped, except I didn't order anything. So I thought, huh, maybe someone else typed in the wrong phone number by mistake (of course that wasn't it).
Figured I should check my Amazon account to see if anything was up. Couldn't get into the account, of course. Tried to get a recovery e-mail, no dice.
Called Amazon. The girl looks at it and goes um, yeah, your account looks like it's been compromised and someone ordered a high-dollar item, and paid via the credit card on the account. She locked the account and told me to refuse the shipment when it arrives, and marked the sale as fraudulent. Said the charge will be refunded when Amazon gets the laptop back (I know it was a laptop but that's all I know since I can't get into the account). And that I should take off work tomorrow to make sure I'm home to refuse the delivery. And she also told me I should check for filters on my gmail.
I check the settings on my gmail, and she was right, there were filters set that I sure as hell didn't set. I took those off, re-set everything, and turned on 2-factor (LTTP, obviously).
Logged into UPS, and sure enough, there's a package tracking coming to my house tomorrow. Signature required. Changed the password there, too.
So... someone must have figured they'd order this, have it delivered to my house while I'm at work, and somehow watch for the UPS truck from who knows where and run up and pretend to be me and sign for it? Seems like they probably were planning to steal it off my porch and didn't realize it would be sig-required, but still.
Am I missing something? It seems very weird that someone would be able to hack several different things, but would still have the package sent to my house, and still have me getting notifications and a pretty sloppy trail.
Figured I should check my Amazon account to see if anything was up. Couldn't get into the account, of course. Tried to get a recovery e-mail, no dice.
Called Amazon. The girl looks at it and goes um, yeah, your account looks like it's been compromised and someone ordered a high-dollar item, and paid via the credit card on the account. She locked the account and told me to refuse the shipment when it arrives, and marked the sale as fraudulent. Said the charge will be refunded when Amazon gets the laptop back (I know it was a laptop but that's all I know since I can't get into the account). And that I should take off work tomorrow to make sure I'm home to refuse the delivery. And she also told me I should check for filters on my gmail.
I check the settings on my gmail, and she was right, there were filters set that I sure as hell didn't set. I took those off, re-set everything, and turned on 2-factor (LTTP, obviously).
Logged into UPS, and sure enough, there's a package tracking coming to my house tomorrow. Signature required. Changed the password there, too.
So... someone must have figured they'd order this, have it delivered to my house while I'm at work, and somehow watch for the UPS truck from who knows where and run up and pretend to be me and sign for it? Seems like they probably were planning to steal it off my porch and didn't realize it would be sig-required, but still.
Am I missing something? It seems very weird that someone would be able to hack several different things, but would still have the package sent to my house, and still have me getting notifications and a pretty sloppy trail.
Last edited: