Does anyone know what this scam is? My wife just got an confirmation email from a Domino's Pizza in New Jersey for a carry-out order for a 2-liter of Sprite. It was sent to her personal email with her full name and cell phone number. We called the store and the CC# used isn't any of ours. WTF?
@andybaio The Noid is just trying to stay with the times, okay
@andybaio I assume the links were legit and the phone number you called was too? It wasn’t a fake Domino’s number only found in the email?
@louie Real email, real links, real store, real order. Verified the store number independently. Called them and they confirmed the order, cancelled it, told me the last four digits of the cc#.
She's never had a Dominos.com account, we did a forgot password to check. Double-checked our bank/cards, no unusual transactions. We live on the other side of the country. The store didn't seem to know anything. My best guess is that they're doing automated credit card testing with small transactions, using name/phone/email from an identity breach? But this seems like a terrible way to do it. Why use her email/phone number at all? Baffling.
@andybaio If the fraudster used the credit card owner's info, that would have alerted them to the credit card use. It's probably a test transaction like others are saying.
I bet the fraudster is hoping your wife just thinks "that's bizarre" and deletes the email without saying anything.
@andybaio how/why would they associate it with her phone/email if it was using stolen card info?
@andybaio this may be similar to what's going on w/ popular online store software, e.g. WooCommerce, Shopify, etc.
Basically, people are testing whether they can get a small transaction to go through on a stolen card. If they can, they then try to buy a bunch of gift cards or crypto.
I imagine they're using other phone numbers and emails they have available to fill out form fields. (In the WooCommerce version, they usually seem to use random email addresses @gmail or whatever.)
@andybaio I had someone get into my Pizza Hut account and buy themselves a pizza using my saved info.
But seeing as she's never had an account... Maybe after the shenanigans are over, at least try to retrieve the password and delete the account someone seemingly made?
@andybaio ... the AI researchers who are publicly talking about ending humanity? This is the exact scenario they fear. Imagine LLMs causing 2-liter Sprite delivery AT SCALE.
@andybaio I have no idea what's going on in scamming these days. A few days ago, my sister in law got a phone call asking her to give her my wife's phone number, and whoever called her had my wife's full name and date of birth. We live in the upside down.
@andybaio I had a series of two or three of these about two years ago: orders shipped to addresses in my old hometown with confirmation sent to my email but not using any credit card attached to me. I was able to cancel one of them but one of the merchants wouldn’t let me cancel it since it wasn’t on my credit card. I assume that it’s testing stolen credit cards, but these were not small orders — like $300 of dog food and a patio set, for example. Clearly fraud but I don’t know the exact scheme either. FWIW I learned that Target’s fraud dept seems very good; I have less confidence in Kohls’s.