I almost got scammed USD51,140! be very careful

[Xtrader]

I received an email from my "client" telling me to TT USD51,140 to a US account.
He say he will be busy travelling and at that time I was in Shenzhen.
He also ask me to send him his latest statement after the transfer.
As he was travelling and I'm in China, he did not reply my what's app.
So I raised a TT from his trading account to the US account and send his balance statement to him.
After a while later "he" forwarded an email from the broker asking him to authorised the transaction.
He ask me for his Password and User ID and I send it to him.

About an hour later my client email and ask me what's all these TT!
I replied, didn't you ask for it?
He call me on phone immediately and told me WE HAVE BEEN SCAMMED, I DID NOT SEND YOU THE EMAIL!!!!!
I panicked, we both called USA broker to stop the transaction.
Fortunately, we managed to stop it in time.
I was stupid enough to give the password and ID to him........there were more than a quarter million in that account! While writing now, I'm breaking into cold sweat.

Apparently, this guy broke into our emails and knew what's going on between us.
I didn't suspect anything and he can intercept all our mails and
use my client's email to communicate the way my client would with me.

Shortly after this incident, my instagram, twitter and other mails were compromised.
Once any of your email been compromise chances the rest will follow suite.

So, be warned! when you receive email asking for money from friend or relative, make sure you make the call first!

[mitlancer]

thanks for the warning and reminder!

[I love angel]

How can one forget his own password and user id???? That is something wrong.

[Xtrader]

How can one forget his own password and user id???? That is something wrong.

My client does not trade this account.

I'm managing it for him.

He does not log in.

[Keith khoo]

thanks for sharing!

[solasido]

Heng ah.

Thanks for sharing.

As a precaution, never open multiple tabs on browser when checking webmail, internet banking, etc. It is very easy to steal information especially if the website is not property developed securely.

Always just use 1 single session at a time.

Also never download and run any executable files especially from untrusted site. The best way is to have different virtual machine for different purpose e.g. different VM for downloading/ playing games, different VM for internet banking and personal emails checking.

Sent from my SM-N9005 using Tapatalk

[sherman]

_{Wow lucky bro.}

_{Next time be very careful}

[SeahSengYong]

So many Internet scam case around. Got to exercise caution when dealing online.

[moonwater]

Hi bro, my previous company also got scammed the same way, the hackers got access to all our and our Korean principal emails. It just so happen that we need the goods out of the factory, normally we would have terms, but the "principals" emailed back with a very similar email name and said that we have to pay to get our goods out and something like their account in Korea is not working and asked us to transfer the money to a Spain offshore account.

It all seemed very legit as if we are talking with our principal, but in fact is the hackers impersonating them. In the end we paid first, as we are almost late for delivery, but when we called Korea, they said they have not receieved any money and that they had been hacked....

Don't think they can get any money back, as money was willingly transferred over. Served a lesson to take note to double check everything if something out of the ordinary happened....

[spgohjc]

My advice. Don't rely just on emails for key communications especially when monetary transactions are involved. Always follow up with a phone call to confirm everything is in place before proceeding. We are living in a high tech and well educated world, not in the 30s.

Sent from my iPhone using Tapatalk

[Xtrader]

Yes, I call to confirm is a must.

[solasido]

Bro Xtrader One idea is to also setup a kind of identification with your client Like when we call bank they verify us But regularly change these identification q&a E.g when we had conversation the last time, what is your car color, etc. This can be used in case phone call not possible or convenient. Sent from my SM-N9005 using Tapatalk

[Xtrader]

Thanks for the advice

[BH2O]

thanks for the warning.