Beware sending a BACS payment to QRG

For any general chat and banter.

Moderators: scimjim, philhoward, erikscimitardemon, Roger Pennington, Lukeyboy46

User avatar
scimjim
RSSOC Member
Posts: 35718
Joined: Sun Oct 01, 2006 10:08 pm
Location: Gloucester
Has thanked: 112 times
Been thanked: 819 times

Beware sending a BACS payment to QRG

Post by scimjim » Thu Oct 18, 2018 5:32 pm

MarkHawkins wrote:
Thu Oct 18, 2018 5:12 pm
scimjim wrote:
Thu Oct 18, 2018 4:38 pm
MarkHawkins wrote:
Thu Oct 18, 2018 4:29 pm
Today I emailed Nigel for a price on a master cylinder rebuild kit - I got a reply '850 GBP - I'll send bank transfer details shortly'. I emailed him back querying it and he responded with a more sensible answer.
what's the senders email address on the reply - presumably not Nigel's but something very similar?
It appeared the same as usual. The exact phrase in reply was -

Hello Mark, Kit should be about 850 GBP in total let me know if you are willing to make payments for that so i can forward to you my banking details. Thank you

Seemed a bit steep for a M/C rebuild kit!

I queried this and was then asked 'how many will you be needing' (?!)

Eventually I got a sensible reply and I ordered in the normal way other the phone.

Do you think I should phone Nigel to let him know something might be up with his email?
Definitely tell Nigel.

The email address might have appeared the same as usual but I suspect it was only similar unless you look properly. It may help others if you can confirm this.


Jim King

Current: SE5 (8Ball), TI SS1 (snotty), 1600 SS1 (G97), 1600 SS1 (C686CCR), 2.5TD SE5a (diesel 5a), 6 x random other SS1s.
Previous: SE5, 3 x SE5a, 2 x SE6a, 3 x SE6b, GTC, 2.9i GTC, 3 x 1600 SS1, 1300 SS1, Mk1 Ti Sabre, Mk1.5 CVH Sabre
Chief mechanic for: 1400 K series SS1 (Megan3), 1400 CVH EFi SS1 (Grawpy), Sabre/MX5 auto (The Flying Broomstick),
1300 SS1 (Number One) & Sarah's coupe.
CURE THE FAULT - NOT THE SYMPTOMS

AntC
RSSOC Member
Posts: 687
Joined: Wed Mar 03, 2010 11:23 am
Location: Chelmsford, Essex. UK
Has thanked: 2 times
Been thanked: 1 time

Beware sending a BACS payment to QRG

Post by AntC » Thu Oct 18, 2018 6:37 pm

Nigel is fully aware of the problem, although he should possibly have done something after the first two hacks before me and I had assurance from Andy that the problem had been addressed. The email address in my case is completely identical to the genuine one.

And thank you for your kind condolences and it is ironic that today the announcement is made that the banks are being pressurised into doing something about this, but why is it going to take over six months?


Now Scimless - but no longer :D

Ant

Scimitars owned:
2018 - SE5 SCV 748 G
2001 - 13 SE4b - TMA 911 J
1971 - 76 SE5 CYB 435 J

User avatar
MarkHawkins
RSSOC Member
Posts: 1527
Joined: Sun May 26, 2013 10:19 pm
Has thanked: 12 times
Been thanked: 18 times

Beware sending a BACS payment to QRG

Post by MarkHawkins » Thu Oct 18, 2018 8:46 pm

The sending addresses look identical but the originating IP address differs and Nigel's replies didn't follow the thread I was seeing. It all appears to come from his address and SMTP server but you have to look at the message sources closely to see a difference - x-originating-ip


Custodian of :

1968 '4b Coupe HBL 725G
1972 '5a M/overdrive ALJ 513K - ALJ 513K
1977 '6a M/overdrive - OPJ 62R

ex 1974 '5a auto - VLN 826M
ex 1985 GTC M/overdrive B205 AMT - number 413
ex 1984/85 SS1 number 0007 (1300)

Datsundrew
Posts: 471
Joined: Sat Feb 28, 2015 1:46 am
Has thanked: 1 time
Been thanked: 7 times

Beware sending a BACS payment to QRG

Post by Datsundrew » Thu Oct 18, 2018 9:00 pm

Blimey! That’s all a bit of a nightmare, so easy to get caught out.



User avatar
demonbluedays
Posts: 1717
Joined: Sat Apr 04, 2009 9:10 pm
Location: Cwmbran (Crow Valley) S.Wales
Has thanked: 15 times
Been thanked: 9 times
Contact:

Beware sending a BACS payment to QRG

Post by demonbluedays » Thu Oct 18, 2018 9:03 pm

It seems like someone hijacked the email server that redirects mail (so say I had Tom @ DemonBlueDays. Com any mail sent to that I could redirect to a gmail account of my choosing) and replying down the same line so they appear to be the genuine article but in real life is some swine looking for money to steal. Someone give me a heads up if it happens again. I have a few preventative methods that can help.

Edit: had to change my post as it went mad as I hit submit


Tom "DemonBlueDays" Williams

1976 SE6 #141 "Mighty"

2009 Fox "King"

Former Owner Of

1979 Se6a Manual Overdrive "Link"

Formerly RSSOC #3185 - Must renew eventually....

halfpenny
Posts: 170
Joined: Sat Jul 09, 2016 7:49 pm
Has thanked: 11 times
Been thanked: 10 times

Beware sending a BACS payment to QRG

Post by halfpenny » Thu Oct 18, 2018 10:03 pm

My bank required an account name a couple of days ago, so implementation is underway



User avatar
Roger Pennington
RSSOC Member
Posts: 19247
Joined: Tue Aug 29, 2006 9:43 pm
Has thanked: 112 times
Been thanked: 448 times

Beware sending a BACS payment to QRG

Post by Roger Pennington » Fri Oct 19, 2018 1:18 am

Really sorry to hear this, Ant. Hope you manage to get something sorted out.


....Roger

RSSOC member (since 1982)
- - - - - - - - - - - - - - - - -
Image

"Condition can be bought at any time; Originality, once lost, is gone forever" - Doug Nye

AntC
RSSOC Member
Posts: 687
Joined: Wed Mar 03, 2010 11:23 am
Location: Chelmsford, Essex. UK
Has thanked: 2 times
Been thanked: 1 time

Beware sending a BACS payment to QRG

Post by AntC » Fri Oct 19, 2018 7:18 am

Roger Pennington wrote:
Fri Oct 19, 2018 1:18 am
Really sorry to hear this, Ant. Hope you manage to get something sorted out.
Thanks Roger - and everyone. Yes, I am going to fight this and am waiting to hear what the bank's response is to my situation. Because the hackers merged seamlessly into the email thread I had with QRG I have been told I might stand a chance of getting my money back. However I'm not holding my breath!


Now Scimless - but no longer :D

Ant

Scimitars owned:
2018 - SE5 SCV 748 G
2001 - 13 SE4b - TMA 911 J
1971 - 76 SE5 CYB 435 J

Dcrosby13
RSSOC Member
Posts: 625
Joined: Mon Mar 28, 2016 5:28 pm
Location: Warrington
Has thanked: 4 times
Been thanked: 16 times

Beware sending a BACS payment to QRG

Post by Dcrosby13 » Fri Oct 19, 2018 9:06 am

Im an infrastructure engineer and I see this happening alot albeit anti spoofing mechanisms are getting better. The simplest fix is to just call him and get his payment details over the phone, never send payment off the back of an email. also beware of the nigerian prince, he wont give you the 10 million dollars :lol:


I break stuff...... :w

User avatar
chrisgallacher
RSSOC Member
Posts: 659
Joined: Tue Oct 07, 2008 6:01 pm
Location: Four Marks, Hants
Has thanked: 29 times
Been thanked: 25 times

Beware sending a BACS payment to QRG

Post by chrisgallacher » Fri Oct 19, 2018 9:31 am

Dcrosby13 wrote:
Fri Oct 19, 2018 9:06 am
Im an infrastructure engineer and I see this happening alot albeit anti spoofing mechanisms are getting better. The simplest fix is to just call him and get his payment details over the phone, never send payment off the back of an email.
Good advice. Trouble is you're less likely to do this when dealing with a business known to you. I know I would be - familiarity and all that.

Very worrying when the consumer is significantly out of pocket due mainly to security & implementation flaws in the banking system. Any reasonable person could have been expected to fall for this scam. It must be worrying for Nigel at QRG too.


Chris Gallacher
RSSOC Rally Secretary
rally.secretary@rssoc.co.uk

derekoss
Posts: 166
Joined: Fri Nov 29, 2013 2:37 pm
Been thanked: 14 times

Beware sending a BACS payment to QRG

Post by derekoss » Fri Oct 19, 2018 10:06 am

Scams have been taking place since year dot ! Having the name of the business is not going to make much difference. I'm sure the criminals already have the hack worked out.
Anyway if the emails are getting hacked then it's hardly the banks fault for carrying out the transaction as asked.
Credit card on a phone call (you make the phone call to the number you found !) if over the magic hundred pounds for the protection is the way to go. Just pay it in full at the end of the month. Due diligence !
Derek



Kwackers
Posts: 135
Joined: Sat Oct 01, 2016 6:47 pm
Has thanked: 20 times
Been thanked: 10 times

Beware sending a BACS payment to QRG

Post by Kwackers » Fri Oct 19, 2018 12:59 pm

Having worked in IT for many years I like to think I am pretty savvy when it comes to internet scams but this one sounds particularly good - hiding behind original address etc. The best defence for all of us is to share experiences. Unfortunately many are too embarrassed by being caught out and want to forget it and move on so well done for alerting us all, not only to this particular scam but this method in general. I often use BACS both to send and receive and will be much more vigilant in future. Thank you Ant and I hope you recover your funds.



User avatar
chrisgallacher
RSSOC Member
Posts: 659
Joined: Tue Oct 07, 2008 6:01 pm
Location: Four Marks, Hants
Has thanked: 29 times
Been thanked: 25 times

Beware sending a BACS payment to QRG

Post by chrisgallacher » Fri Oct 19, 2018 1:39 pm

Kwackers wrote:
Fri Oct 19, 2018 12:59 pm
Having worked in IT for many years I like to think I am pretty savvy when it comes to internet scams but this one sounds particularly good - hiding behind original address etc. The best defence for all of us is to share experiences. Unfortunately many are too embarrassed by being caught out and want to forget it and move on so well done for alerting us all, not only to this particular scam but this method in general. I often use BACS both to send and receive and will be much more vigilant in future. Thank you Ant and I hope you recover your funds.
:goodpost:


Chris Gallacher
RSSOC Rally Secretary
rally.secretary@rssoc.co.uk

Post Reply

Return to “Non-Technical Discussion”