r/phishing

The user reported receiving multiple WhatsApp messages concerning their Instagram account before changing their password. Reviewing login logs revealed numerous suspicious entries from various locations, including distant cities and recent consecutive logins on an alt account. The user also found difficulty logging in using number confirmation, questioning why the method works for others but not for them.

The user received suspicious WhatsApp messages related to Instagram codes, prompting them to change their password and check login logs. The log review revealed multiple unauthorized logins across varying time periods—including 4 days ago, last year, and yesterday—from unknown devices and distant locations.

A user received a random verification email from Cheddar.tv and is concerned about whether it is phishing. They noted that they do not use Cheddar.tv for news and did not recently create an account, making the source of the email confusing. Despite their suspicion, the email address seems reasonable to be genuine.

A user received a suspicious call from the number -09303473287, which claimed to be from BDO Head Office regarding a limit increase on their credit card. The representatives discussed reward points, including those that were allegedly expired or forfeited, leading the user to question if the entire interaction was an attempt at phishing.

A user received an Amazon email and message center notification stating an item had been dispatched, even though the order was received nine months prior. Despite clicking the link without prompting for information, which the user considered a mistake, tracking redirected to the original order page, and there was no bank activity suggesting new orders. The concern is whether this alert, sent by a third-party seller, is a system misfire or indicates a problem.

The author received three emails that include suspicious links and contain the phrase "I have a feeling this pic might seem pretty familiar." Although the emails originated from different accounts, all were signed with the same nickname. The author suspects it is a scam but is unsure of what actions to take.

A user received two suspicious messages from a Moroccan phone number concerning an alleged jailbreak request linked to their Apple Watch and Apple ID. The messages claimed that data would be shared with post-jailbreak users and advised turning off Find My within 24 hours to cancel the supposed request.

A user reported receiving targeted spam on WhatsApp from international numbers, which included false accusations of insulting the Prophet Muhammad and promotional material. The poster also received automated SMS and email verification codes (OTPs) from platforms such as Instagram and Facebook, suggesting a bot-driven phishing campaign.

A user who recently joined Etsy reported becoming a victim of a phishing scam after responding to an alleged sale inquiry. The scammer directed the user to a fake website where they entered card details, OTP, SSN, and identification. Following the fraud attempt, the user's bank restricted their account, leading them to contact both the bank and Sofi for investigation.

After signing up for the Apple Developer Program, the user received an email requesting identity verification using a government ID. Although the link appeared to be on developer.apple.com and matched expected enrollment procedures, the dedicated page displayed a significantly misspelled last name, leading the user to question whether it was a scam.

In a discussion about online scams, one user recounted accidentally reporting another user's account for hacking after clicking a phishing link that compromised their own account. The apologizing user provided an email and suggested contacting Reddit Support via a Discord ID to appeal the report and clear the name of the targeted individual. The target noted they had previously been harassed by a troll over several months.

The user placed an online pre-order for a Gears of War E-Day collector's edition through Microsoft via Shopify. They received a confusing letter from FedEx indicating that payment had failed, which prompted them to question if Shopify uses FedEx and whether the notice is fraudulent due to prior hacking scams.

The user discovered two fake phishing emails in their spam folder, one originating from an address in Egypt and using the name of the user's son. The second email used a misspelled first name associated with the user's sibling, despite the user not possessing that sibling's direct email address.

A user received a suspicious email claiming to be from Amazon but quickly identified it as fake. The user determined the scam was fraudulent by examining specific lettering in the words "billing & about." They successfully chose not to click on any links within the message.