Wired
Mercari, a major flea market app, announced on June 8 that the number of suspicious emails and SMS that swear Mercari is increasing rapidly. The damage caused by fraudulent payments has occurred, and it is presumed to be a malicious phishing scam.
Phishing email disguised as Mercari
According to Mercari, suspicious emails and SMS contain the URL of the official homepage, but in reality, a link to another URL is set, and clicking on it will lead you to a fake homepage.
On fake homepages, you may be asked to enter personal information, and Mercari warns you not to enter user information in browsers such as Safari, saying that “you will not be asked to enter user information other than the Mercari app”. I will.
The following is an example of user information that you are prompted to enter on a fake home page.
- phone number
- password
- Two-step verification Certification number
- passcode
- Credit card information, etc.
Unauthorized payment with Mercari
Mercari notes that there have been cases where user information entered on fake homepages has been misused to make fraudulent payments using the smartphone payment service Mercari.
For some member stores where fraudulent payments have been confirmed, measures have been taken to suspend Mercari payments, and the timing for resumption is undecided.
Mercari encourages you to log out of other devices through the Mercari app if you enter your user information on a fake homepage.
You can check how to forcibly log out of other terminals on the following page.
- How to operate forced logout
Also, if your account is hijacked by a third party, you need to report it in the “Inquiries” section of the app.
It is said that the number of phishing websites increased 1.3 times from the previous year in FY2020, and phishing SMS for Sagawa Express and NTT has also been confirmed.
Source: Mercari
(seng)
Source: iPhone Mania