Beware of Google Checkout Phishing Attempts or Not?

Mar 21, 2007 • 6:52 am | comments (5) by twitter Google+ | Filed Under Other Google Topics
 

Last night I received an email from Jessica at the Google Checkout team telling me they were unable to verify my account and that they need me to email or fax them photocopies of my credit card and drivers licenses. No creditable merchant service should ever ask you for that information over email, ever.

In the Google Checkout Buyer help section it says;

What is phishing?

A message or website that tries to trick you into revealing personal information by appearing to be from a legitimate source, such as a bank (or Google!).

Messages or websites phishing for information might ask you to enter:

Usernames and passwords Social Security numbers Bank account numbers PINs (Personal Identification Numbers) Credit card numbers Your mother's maiden name Your birthday

Phishers often ask for personal information in an attempt to steal your Google Account, your money, your credit, or your identity.

You should always be wary of any message that asks for your personal information, or messages that refer you to a webpage asking for personal information. If you receive this type of message, especially from a source claiming to be Google, please do not provide the information requested.

The email asked specifically for this type of information:

Please complete the following steps within five business days:

1. Photocopy or scan the front and back of the credit or debit card you used to sign up. (For security purposes, please conceal the first 12 digits of your card number, leaving only the last 4 digits visible.) 2. Photocopy the front of your driver license. 3. Write your ID (referenced above) on these documents, then fax them to 'Google Account Verification' at 650 644 0159. If you prefer, you can also attach your scanned documents to an email and respond to this message.

I have also taken a screen capture of the message headers, which seem somewhat legit to me, but I am sure I am missing something.

If you want to report such an attempt you can use this form or email it to phishing@google.com, which I will be doing right now.

Now, what is incredibly shocking to me is that in a Google Groups thread we have a similar email from a Chad at Google reported there. The thing is, Deborah (GoogleCheckoutPro) from Google tells the person to reply to the email with the information.

I know they say in brackets that I should block out part of the number, but still, they are asking for too much. They can call me if they want me to verify information.

I am unable to go into specifics about your account here. The best thing to do in this case is to respond back to the email from Chad with your questions. You can also contact our support team. They are very good at responding to emails in a timely manner.

Are you kidding me!

Forum discussion at Search Engine Roundtable Forums.

Update: This is a real email, Jessica called me to confirm (she then replied to my forward of the email to phishing@google.com) so this is real. I am still Google handles it this way.

Thank you for taking the time to speak with me over the phone today.

As mentioned over the phone to you earlier, I can confirm that the email you received is a legitimate message from Google. I apologize for any confusion.

Please follow the instructions listed in our previous email to reactivate your account.

If you have any further questions, please feel free to reply directly to this email.

Sincerely,

Jessica The Google Checkout Team

Previous story: 75% of Google's Blogspot Blogs are Spam
 

Comments:

Vernon

03/21/2007 12:55 pm

That is unbelievable! If they want to verify my information, Google should provide an area on their site where I can go to login and confirm my information. Sorry but if they need a reply to an email or a fax... they aren't going to get that information!

bil

08/08/2007 08:23 pm

was it a legit email ?

Barry Schwartz

08/08/2007 08:25 pm

yes

h holland

11/11/2008 04:51 am

I just got this same email about a week ago after using google checkout for a year. It is totally bizarre. They are asking me for copies of the sales receipts of the manufactures that I purchase the things I sale from. They ask me for this after knowing that I only sell occasionally on ebay and craigslist. I only sell my own personal Items. It has been beyond weird.

Healthy

09/19/2013 11:10 pm

We all have to try our best to protect our information. Sometimes we learn of new ways that people steal information and it raises the bar in terms of the things that we have to do. I recently read about a thief who would crawl around on the floor of movie theaters. His aim was to go into the handbags of female viewers and steal their credit card information. Apparently he would take out the cards, copy whatever he wanted and then put the cards back in. The women would be none the wiser. I don't know how true that is but the fact is, you can never be too careful when it comes to preventing Identity theft . .

blog comments powered by Disqus