Hard Light Productions Forums

Off-Topic Discussion => General Discussion => Topic started by: Admiral Nelson on April 14, 2004, 01:45:38 pm

Title: Online Fraud -- What to do?
Post by: Admiral Nelson on April 14, 2004, 01:45:38 pm
My mother received an e-mail directing her to http://www.pikaprizo.net  stating that she has won a prize. When I follow this link with the prize coupon supplied, it asks you to input a debit card number and PIN to pay for shipping!! Obviously some kind of identity theft.  Surely this should get reported someplace to shut it down, but I'm not sure where. Any ideas?
Title: Online Fraud -- What to do?
Post by: Fineus on April 14, 2004, 01:49:01 pm
Your ISP would be a good source for advice I think. At least they might be able to put you in contact with someone more suited to help.
Title: Online Fraud -- What to do?
Post by: aldo_14 on April 14, 2004, 01:50:30 pm
Depnds on the country (of both your ISP and the offending website), i guess.  One step is to contact your ISP and ask them to forward a complaint/s to the relative authority.  This sort of thing isn;ty uncommon, natch - I'm not even sure there are adequate laws to cover this sort of thing.
Title: Online Fraud -- What to do?
Post by: Tiara on April 14, 2004, 01:50:59 pm
Giving your PIN = EXTREMELY bad idea. Anytime, anywhere, anyhow.
Title: Online Fraud -- What to do?
Post by: kasperl on April 14, 2004, 02:03:19 pm
yeah, we all know, or ought to know at least.

but where to report it, i geuss your ISP. or you could try and file something lime attempted fraud over at the police, but i doubt that'd work.
Title: Online Fraud -- What to do?
Post by: Flipside on April 14, 2004, 02:13:46 pm
By entering the prize giveaway, entrants release and hold harmless PikaPrizo.net, all affiliates and subsidiaries of such entities, their employees, agents and representatives from any and all losses, damages, rights, claims, and actions of any kind in connection with the promotion or resulting from acceptance, possession, or use of any prize, including, without limitation, personal injuries, death or property damage, and claims based on publicity rights, defamation, or invasion of privacy.

That's part of the disclaimer ;)

Hmmmm... Well, theres no way that is in the USA, no matter what it says. Google and Yahoo come up blank on a search for PikaPrizo.

It's impossible even to say which country it's in.

Unless someone like An0n can suggest something else, I'd recommend Email the contact name. Hundreds of times.

It won't fix anything, but you'll feel soooooooo much better ;)
Title: Online Fraud -- What to do?
Post by: Admiral Nelson on April 14, 2004, 02:15:44 pm
According to WhoIs.com gives this info:

I am not sure how to determine who the ISP of this site is??

[whois.enom.com]

Registration Service Provided By: eNom, Inc.
Contact: [email protected]
Visit:
   
Domain name: pikaprizo.net

Administrative Contact:
   -
   Geraldine Campbell ([email protected])
   +1.2403180299
   Fax: -
   5764 East Boniwood Turn
   Clinton, MD 20735
   US

Billing Contact:
   -
   Geraldine Campbell ([email protected])
   +1.2403180299
   Fax: -
   5764 East Boniwood Turn
   Clinton, MD 20735
   US

Technical Contact:
   -
   Geraldine Campbell ([email protected])
   +1.2403180299
   Fax: -
   5764 East Boniwood Turn
   Clinton, MD 20735
   US

Registrant Contact:
   -
   Geraldine Campbell ([email protected])
   +1.2403180299
   Fax: -
   5764 East Boniwood Turn
   Clinton, MD 20735
   US

Status: registrar-lock

Name Servers:
   dns1.name-services.com
   dns2.name-services.com
   dns3.name-services.com
   dns4.name-services.com
   dns5.name-services.com
   
Creation date: 12 Apr 2004 23:41:02
Expiration date: 12 Apr 2006 23:41:02
Title: Online Fraud -- What to do?
Post by: übermetroid on April 14, 2004, 02:17:26 pm
Whats the email address?  I am sure there are people on this board that could do something with it.....

EDIT...  The email is about thie message....   Now have fun!  :mad2:
Title: Re: Online Fraud -- What to do?
Post by: Lonestar on April 14, 2004, 02:18:08 pm
Quote
Originally posted by Admiral Nelson
My mother received an e-mail directing her to http://www.pikaprizo.net  stating that she has won a prize. When I follow this link with the prize coupon supplied, it asks you to input a debit card number and PIN to pay for shipping!! Obviously some kind of identity theft.  Surely this should get reported someplace to shut it down, but I'm not sure where. Any ideas?


Unfortunately this doesnt prove fraud at all. It only proves they want some private info, but they dont just grab it they ask it from you, once again it is legal to ask things.

So technically unless they steal the identities and commit crimes with them, asking for a CC number is not illegal.

As for reporting fraud, you need someone big to investigate it, so your ISP is definitely the people to turn to, or the company that hosts that particular website.
Title: Online Fraud -- What to do?
Post by: Flipside on April 14, 2004, 02:19:49 pm
[email protected]

You could always Email these guys and point them to the Website?

Lonestar, this is true, however, check the images on the left hand side of the homepage. If those were true sponsors or endorsers of this site, there is no way on earth that clicking on them wouldn't take you to the ESRB, Nintendo etc sites. So I'm pretty sure theres false representation going on here as well.
Title: Online Fraud -- What to do?
Post by: JarC on April 14, 2004, 02:29:04 pm
according to the rules and fine print they're in the jurisdiction of Orange County, California. btw, the whole left side is just 1 image with an image map
Title: Online Fraud -- What to do?
Post by: kasperl on April 14, 2004, 02:53:28 pm
Admiral Nelson:  open up start--> command.com and type tracert IP

it ought to give you a list of servers the packet passes through towards the server, and therefor, the last few links ought to be some sort of ISP.
Title: Online Fraud -- What to do?
Post by: Lonestar on April 14, 2004, 03:03:30 pm
Quote
Originally posted by Flipside
[email protected]

You could always Email these guys and point them to the Website?

Lonestar, this is true, however, check the images on the left hand side of the homepage. If those were true sponsors or endorsers of this site, there is no way on earth that clicking on them wouldn't take you to the ESRB, Nintendo etc sites. So I'm pretty sure theres false representation going on here as well.


As much as we would like to make the advertising be our center point for confirming they are fraudlulent, its just not possible.

Only way to tell, is to give your CC and see if they use it for fraudlent actions. Dont be stupid enough to give it to them to find out tho.

Everyone should do just like me. Dont use Credit Cards online, dont send your CC number to people, or anyone online (cookies can take your PIN and PASS easy!).

You want to buy something, GO TO THE STORE LIKE THEY DID 4 YEARS AGO AND WE WONT HAVE A CC INTERNET PROBLEM MUAHAHAHAHAH!
Title: Online Fraud -- What to do?
Post by: Admiral Nelson on April 14, 2004, 03:04:19 pm
tracert doe not complete, but yields the below result. If I read that right, this IP is part of knology.net, which seems to be an ISP in the southwest.:


Tracing route to user-24-214-80-217.knology.net [24.214.80.217]
over a maximum of 30 hops:

  1    31 ms    16 ms    16 ms  10.9.99.1
  2    16 ms    15 ms    16 ms  at-1-3-0-1718.CORE-RTR1.BOS.verizon-gni.net [130
.81.9.241]
  3    16 ms    16 ms    15 ms  so-1-1-0-0.BB-RTR1.BOS.verizon-gni.net [130.81.4
.241]
  4    62 ms    47 ms    31 ms  so-0-2-0-0.BB-RTR2.NY325.verizon-gni.net [130.81
.12.121]
  5    31 ms    16 ms    31 ms  so-1-0-0-0.PEER-RTR1.NY111.verizon-gni.net [130.
81.4.14]
  6    31 ms    16 ms    31 ms  so-6-2-0-0.gar2.NewYork1.Level3.net [65.59.196.1
7]
  7    31 ms    16 ms    31 ms  ge-1-3-0.bbr1.NewYork1.Level3.net [209.247.9.205
]
  8    47 ms    46 ms    32 ms  as-2-0.bbr1.Atlanta1.Level3.net [64.159.1.1]
  9    31 ms    47 ms    47 ms  ge-11-0.hsa1.Atlanta1.Level3.net [64.159.3.6]
 10  100m-core1.atl.tlct.net [63.211.121.6]  reports: Destination net unreachabl
e.

Trace complete.
Title: Online Fraud -- What to do?
Post by: kasperl on April 14, 2004, 03:08:54 pm
well, you might want to try again a few times with 10-15 minute intervals.
Title: Online Fraud -- What to do?
Post by: Flipside on April 14, 2004, 03:09:01 pm
True, Lonestar, you couldn't find this person guilty of Fraud from the current evidence, but there may be enough to lean on them until they close the site down. I know it will just pop up somewhere else, but it makes every Email they've sent out so far pointless ;)
Title: Online Fraud -- What to do?
Post by: ionia23 on April 14, 2004, 03:35:54 pm
It's kind of pointless to bother, like they'll ever be prosecuted anyway.  And even if they are, the punishment will never truly fit the crime.

Steal an identity, lose your own.  Hydrochloric acid, anyone?
Title: Online Fraud -- What to do?
Post by: Liberator on April 14, 2004, 03:43:23 pm
Call the FBI's Identity Theft Division, and provide the appropriate info and let them have at it.  The person on the other end is a bastard and deserves what he gets.
Title: Online Fraud -- What to do?
Post by: Martinus on April 14, 2004, 04:16:34 pm
[color=66ff00]I read an interesting article earlier. It was about DDoS attacks, anyhow the writer of the article is a securtiy specalist whos site bore the brunt of some script kiddie's 'lack of anything better to do'. He contacted the FBI.

Seems that the FBI are so swamped they don't even consider a case unless $5000 or more has been lost (I'm assuming that we're talking in general here and not specifically as a result of lost business due to DDoS).

Anyhow, credit cards are not a liability as long as you're educated; if you know never to give out your pin (banks don't even ask for it over the phone) then you're quite safe. Most fraud looks like fraud, it's just a pity that more people aren't aware of the lengths the dishonest will go to.
[/color]
Title: Online Fraud -- What to do?
Post by: Arc on April 14, 2004, 08:18:24 pm
Try reporting the site to their ISP. eNom are providing registration for the pikaprizo.net domain, but the site's being hosted from user-24-214-80-217.knology.net. If knology.net are being responsible, they should look into this. Of course there are a large number of ISP who just wouldn't care. :(
Title: Online Fraud -- What to do?
Post by: Triple Ace on April 15, 2004, 08:53:10 am
Most things like that are just scams.
Title: Online Fraud -- What to do?
Post by: Admiral Nelson on April 15, 2004, 06:41:09 pm
I did report it, but who knows if anything will be done with it....
Title: Online Fraud -- What to do?
Post by: Odyssey on April 15, 2004, 07:02:13 pm
Quote
Originally posted by Tiara
Giving your PIN = EXTREMELY bad idea. Anytime, anywhere, anyhow.

[color=cc9900]Now, that's what I'd think too. Apparently not though - in fact, there are whole ad campaigns here in the UK trying to persuade people it's the best method. At work I routinely hand a PIN pad over to customers so they can input their PIN, which is requested instead of a signature with new 'chipped' cards.

Seeing as there are whole theorems as to the best way to input your PIN into a cash machine so that nobody, however close they are, can tell what buttons you're pressing, putting your PIN into some machine connected to a phone line in a little restaurant is... worrying.[/color]
Title: Online Fraud -- What to do?
Post by: Arc on April 15, 2004, 07:14:47 pm
Apparently when France switched over to using PINs to authenticate Switch transactions, card fraud dropped by some rediculous amount - 80% IIRC.

I share your concern though. Retailers are supposed to provide some sort or screening so noone else can see the keypad, but we're still going to have to watch out for over-the-shoulder theives, just like at an ATM.
Title: Online Fraud -- What to do?
Post by: Ashrak on April 16, 2004, 06:37:10 am
only retards type theyr pin code on the web :p