Photo by Caleb Lucas on Unsplash

Coathangers for £140? An Etsy Hack

--

I heard from someone yesterday who had their Etsy account hacked. The first they saw of it, was rapid transactions for purchases from their account appearing on their banking app. These were all in the range of £50 to £100, and there were many of them.

The person tried to contact Etsy, but received a ticket saying that they would get back within 24 hours. Luckily they also called their bank, and they were able to catch the transactions as they went through. The bank could see exactly what the suspect transactions were, and immediately stopped them, and reassured the person.

The way the fraud seems to work is that the scammers setup fake sites in Etsy and are able to purchase their own goods with them. Money is quickly transferred to the scammer’s bank account and then moved quickly on to money launders. This account may actually be compromised bank accounts or ones that the scammers have managed to create for short-term gain. The sites are, of course, fake, and the shop names are fairly generic. Here is one, and which has two sales (both related to the scam):

But some of the shops for the purchases are still on-line. The following was one of the transactions that do…

--

--

Prof Bill Buchanan OBE FRSE
ASecuritySite: When Bob Met Alice

Professor of Cryptography. Serial innovator. Believer in fairness, justice & freedom. Based in Edinburgh. Old World Breaker. New World Creator. Building trust.