Canceled Horseshoe Cleveland $500 - (FRAUD ALERT) (13 Viewers)

180 all $500 shipped.
rack $350 shipped
80 $250 shipped.
Payment: Zelle, CashApp

They are in good condition.

It is sent without any problem. An extra fee is charged for shipping abroad.

 

[WedgeRock]

also if you request photos from someone tell them a random # or something to put on the piece of paper as well so you know they just took the photos

I was thinking of a five digit random number that you tell them. Then they have to stack the chips you are buying in corresponding stack sizes.

It would be an easy solution to avoid sending money to somebody who doesn't have chips.

 

[bergs]

These accounts just had failed login attempts too among others.

@CLKin
@Damani311
@Drifter779
@DZPoker

Going alphabetically by the looks of it.

This just in…NORTH HOLLAND CAN SUUUUUUUCK IT!!!!

 

[bergs]

CONUS4EVAH

 

[ReallyGoodUsername]

If you are using a weak password, change it now. If you do not have 2FA enabled, please enable it!

I still don’t understand why ANYONE would not have enabled 2FA right when it was offered. It’s quick and easy and would prevent anything like this happening right?

Sorry you’re dealing with this @Tommy and super sorry @Nanook nest of luck on the reclaim process.

And fuuuuuuuuuuck this scammer POS

 

[Tommy]

@asam2006
@baldwinning
@Chip1525
@50Geez

failed log in attempts from

 

[TheOffalo]

Going alphabetically by the looks of it.

This just in…NORTH HOLLAND CAN SUUUUUUUCK IT!!!!

Skipped your account because you're unhackable? Or the hacker didn't think he could pull off your banter w/ @Josh Kifer...

 

[JP1984]

CONUS4EVAH

The UK is safe now, right? This is why we voted to leave the EU!

 

[criesen]

Could public/private keys help with this at all? Users have a static public key in their profile info (can’t be changed without moderator verification/approval) and images need to be signed and verified before uploading. Sounds like a pain to set up and possibly maintain depending on people losing their keys though. Was also playing around with reverse image searching. Couldn’t get it to bring up the original fordpickup thread image and I’m not sure if that’s cause it wasn’t exactly the same image (because of the fake time stamp) or just didn’t have a way of searching old thread images or what.

In (good) software development systems any time you make a change to a code base it’ll run through a “pipeline” of verification steps before it’s approved it go in. Would be cool to have something similar for sale/trade threads.

 

[WedgeRock]

He hacked a real PCF member that had been around for quite a long time and was posting from that account.

Another flag to check, whether the seller is new or old, check for non-classified posts before and after the classified ad is posted. The presence of non-classified posts is not dispositive, but the absence of such posts should indicate a higher degree of scrutiny is required.

 

[bergs]

Skipped your account because you're unhackable? Or the hacker didn't think he could pull off your banter w/ @Josh Kifer...

Probably just an assumption I’ll do something to get myself banned at some point. Plus a scammer will probably ship faster than I will.

 

[ImCrossland]

Me in PM’s after claiming dibs from now on…

 

[bergs]

The UK is safe now, right? This is why we voted to leave the EU!

Give us back Canada and we’ll consider it very strongly.

 

[megarises]

Me in PM’s after claiming dibs from now on…
View attachment 834358

I just bought chips off you!!! I need a toes photo...nails painted to be certain.

 

[Forty4]

@asam2006
@baldwinning
@Chip1525
@50Geez

failed log in attempts from

View attachment 834355

Glad you have nothing better to do today than monitor unsuccessful log in attempts

 

[WedgeRock]

These accounts just had failed login attempts too among others.

@CLKin
@Damani311
@Drifter779
@DZPoker

Looks like they are going A to Z... I'm safe for a few hours.

 

[Nanook]

So is "Dibs pending verification that this is not a scam" now an acceptable way of purchasing chips?

Not the worst idea as a seller, but how do we efficiently & quickly verify the seller is legit?

Maybe I'm off base here, because I don't have any chips I'm desperate to sell, but why not shut down classifieds for a month or however long it takes to sort this out.

This isn't going to be popular with members that would like to buy or sell not to mention that it doesn't solve the problem.

 

[ReallyGoodUsername]

Is there a way I can reverse their brute force attack? Kind of like a banana in the muffler trick?

 

[toothpic]

Is there a way I can reverse their brute force attack? Kind of like a banana in the muffler trick?

I can get on board with this only if it's an old brown way past ripe banana..

 

[WedgeRock]

@Nanook, sorry you got scammed.

@Tommy, thanks for all the hard work in keeping us safe, both proactive and retroactive.

 

[Nanook]

Another flag to check, whether the seller is new or old, check for non-classified posts before and after the classified ad is posted. The presence of non-classified posts is not dispositive, but the absence of such posts should indicate a higher degree of scrutiny is required.

It's a little hard to follow your fancy talk, but I think I follow & if I do there is some logic there

 

[bergs]

I just reset my password to “H011andTakesItInTheButt%FUCK” but it’s hashed so I’m like totally good.

 

[Josh Kifer]

Skipped your account because you're unhackable? Or the hacker didn't think he could pull off your banter w/ @Josh Kifer...

I will find truth and interrogate everyone.

 

[Marius L]

I usually am a fan og prompt payments, but maybe a new norm among legit sellers to accept a fair amount of time before making payments. Like 24hs. Would be a bit annoying, but it seems a little bit of time would have helped avoid several of the recent scams.

 

[WedgeRock]

It's a little hard to follow your fancy talk, but I think I follow & if I do there is some logic there

Did they have non-sales posts before and after?

If yes, proceed with caution.

If no, proceed with extra caution.

 

[toothpic]

I just reset my password to “H011andTakesItInTheButt%f*ck” but it’s hashed so I’m like totally good.

Can you type that out again? It didn't work.

 

[bergs]

Or just send me the chips and then I pay you. No chippy? No…payeeeee

 

[BigSlick4523]

just relogged into my account like 4 diff times to get that damn 30 days thing off lol

 

[bergs]

Did they have non-sales posts before and after?

If yes, proceed CONUS4EVER

If no, proceed SHIP FIRST AND CONUS4EVER

FYP

 

[bergs]

Could public/private keys help with this at all? Users have a static public key in their profile info (can’t be changed without moderator verification/approval) and images need to be signed and verified before uploading. Sounds like a pain to set up and possibly maintain depending on people losing their keys though. Was also playing around with reverse image searching. Couldn’t get it to bring up the original fordpickup thread image and I’m not sure if that’s cause it wasn’t exactly the same image (because of the fake time stamp) or just didn’t have a way of searching old thread images or what.

In (good) software development systems any time you make a change to a code base it’ll run through a “pipeline” of verification steps before it’s approved it go in. Would be cool to have something similar for sale/trade threads.

I think we should each have to write an order processing program in COBOL before being allowed to post in the Classifieds.

I’m told that mine is a “minority opinion”. Hmmphhh.

 

[Bill_Man618]

@Tommy I would seriously look into how the dark net verifies people. I know most members here will be against it, but as far as I'm aware having users generate a PGP encryption key for themselves and then use it as a 2FA system to ensure the legitimacy of the user before posting. The way it would work best is if prior to making a classifieds post, in the section where you check all the boxes to confirm the rules, PCF has a PGP encrypted string of numbers and letters. This can only be decrypted using the users PGP key (not visible to anyone else). In order to post the ad the user must decrypt the string of letters and numbers and paste it confirming they decrypted it and received the message. This would effectively make it impossible for a hacker to make fraudulent classified ads. I know it would be hard, but it would stop the problem.