ROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEX

drmizzou · 25 August 2018, 08:31 AM

Sent me a PM with a link to a supposed watch he’s looking to trade which instead goes to a page that looks like TRF requiring you to log in. It’s a phishing scam to get your user id and password! Watch out!!!

Chewbacca · 25 August 2018, 08:32 AM

Yup.

Got the same PM.

I didn’t click however.

Baco Noir · 25 August 2018, 08:35 AM

Same here and reported just minutes ago. Seems the mods are on it. His account doesn't exist any longer.

drmizzou · 25 August 2018, 08:37 AM

Good! Looks like it’s been taken care of. Thanks Mods! Almost fell for it and i thought “wait a minute my account is set to auto login so I never have to input my information when I’m on TRF from my phone. Phew! Close!

Chewbacca · 25 August 2018, 08:50 AM

Notice the link and message.

The link is faked to look like a Forum URL.

The message is vague enough to make you click. But it doesn’t get into specifics.

This is a classic phishing email.

Don’t fall for it. Don’t click any links.

City74 · 25 August 2018, 09:22 AM

Got the message and reported right away. A few minutes later the scums account was gone. Good job mods

Sent from my iPhone using Tapatalk

Bobcat09 · 26 August 2018, 12:20 AM

Yup...Received the same message from him this morning as well. Be careful out there!

MinMay · 26 August 2018, 12:42 AM

Yep, they planted their seeds (account) and make it look like a legit account...

should trace the IP...probably all come from the same country.

jrs146 · 27 August 2018, 03:17 AM

Thanks all for looking out!

Sent from my iPhone using Tapatalk

Juclaq · 28 August 2018, 06:22 AM

I remember phishing was only for your bank accounts. Now, they are phishing for anything.

DaytonaSubmariner · 28 August 2018, 06:37 AM

This same guy posted a FS thread on TRF for a DRSD. I was skeptical from the start (fully documented Mk3 DRSD for $40K).

I had gone back-and-forth with him via email (I initially PM'd him and he emailed me directly).

I asked for other photos and he sent them to me pretty quickly. He was looking for a cash (wire transfer deal), but I was looking to possibly trade.

I asked for references. He stated that he had stellar references from eBay. (First red flag when someone doesn't provide you any references).

I asked specifically for a dated photo of the watch and he claimed he was at his girlfriends and it would have to wait till the weekend when he's back home.
I also stated that I wanted to make sure that his TRF account wasn't hacked - that's why I was asking for the dated photo. He did respond to that as "LOL, no, I can assure you my account wasn't hacked."
Shortly thereafter, he quickly posted that the watch was OHPF and then the entire post disappeared.

My next step was to send the eBay user a direct PM through eBay to see if it's the same person. Maybe they hacked both accounts.

Once I saw it had disappeared, I knew I was right to take my time and really get all the information I was requesting before I did anything. BOY am I glad I did.

Here's the Sub ad he had posted with a link to his eBay account:
https://www.rolexforums.com/showthread.php?t=621136

Here is the email address he had corresponded with me through:
[email protected]

shaunylw · 28 August 2018, 06:39 AM

I received a similar message and notified one of the mods.

25 August 2018, 08:31 AM	#1
drmizzou "TRF" Member Join Date: Apr 2016 Real Name: Enthusiast! Location: Midwest Watch: Collector! Posts: 1,761	Pledge member SaibreX is a SCAMMER!!! Sent me a PM with a link to a supposed watch he’s looking to trade which instead goes to a page that looks like TRF requiring you to log in. It’s a phishing scam to get your user id and password! Watch out!!! __________________ HULK BLNR YG Daytona 116515 Pepsi GMT 126710BLRO White DaytonaC 116500 Omega Seamaster 50th Anniv Bond OHMSS Omega Seamaster Bond titanium

25 August 2018, 08:35 AM	#3
Baco Noir "TRF" Member Join Date: Dec 2007 Real Name: Roger Location: Colorado Watch: this ya'll Posts: 4,970	Same here and reported just minutes ago. Seems the mods are on it. His account doesn't exist any longer. __________________ Current Collection: Rolex 126619LB, 116710BLNR, and 216570 polar Explorer II; Omega Apollo 8 Speedmaster and Planet Ocean 42; Tudor BB Bronze Bucherer Blue Edition; Nomos Neomatik 42; Breitling Aerospace, Avenger Blackbird, & SuperOcean 44; Doxa 300 Pro Carbon; Stowa Limette; Laco Napa Flieger; Mickey Mouse Timex Electric; and dare I say it...an Apple Watch too

25 August 2018, 08:37 AM	#4
drmizzou "TRF" Member Join Date: Apr 2016 Real Name: Enthusiast! Location: Midwest Watch: Collector! Posts: 1,761	Good! Looks like it’s been taken care of. Thanks Mods! Almost fell for it and i thought “wait a minute my account is set to auto login so I never have to input my information when I’m on TRF from my phone. Phew! Close! __________________ HULK BLNR YG Daytona 116515 Pepsi GMT 126710BLRO White DaytonaC 116500 Omega Seamaster 50th Anniv Bond OHMSS Omega Seamaster Bond titanium

25 August 2018, 08:50 AM	#5
Chewbacca Banned Join Date: May 2012 Real Name: CJ Location: Kashyyyk Watch: Kessel Run Chrono Posts: 21,112	Notice the link and message. The link is faked to look like a Forum URL. The message is vague enough to make you click. But it doesn’t get into specifics. This is a classic phishing email. Don’t fall for it. Don’t click any links. Attached Images

27 August 2018, 03:17 AM	#9
jrs146 "TRF" Member Join Date: Aug 2011 Real Name: Josh Location: Lost in time Watch: Me Nae Nae Posts: 9,823	Thanks all for looking out! Sent from my iPhone using Tapatalk __________________ "Sometimes the songs that we hear are just songs of our own." -Jerome J. Garcia, Robert C. Hunter

25 August 2018, 08:32 AM	#2
Chewbacca Banned Join Date: May 2012 Real Name: CJ Location: Kashyyyk Watch: Kessel Run Chrono Posts: 21,112	Yup. Got the same PM. I didn’t click however.

25 August 2018, 09:22 AM	#6
City74 Banned Join Date: Oct 2017 Real Name: Bradley Location: Virginia Watch: Speedy Reduced Posts: 727	Got the message and reported right away. A few minutes later the scums account was gone. Good job mods Sent from my iPhone using Tapatalk

26 August 2018, 12:20 AM	#7
Bobcat09 "TRF" Member Join Date: Aug 2013 Real Name: Bob Location: Alabama Posts: 192	Yup...Received the same message from him this morning as well. Be careful out there!

26 August 2018, 12:42 AM	#8
MinMay Banned Join Date: Apr 2015 Location: United States Posts: 2,410	Yep, they planted their seeds (account) and make it look like a legit account... should trace the IP...probably all come from the same country.

28 August 2018, 06:22 AM	#10
Juclaq "TRF" Member Join Date: Feb 2018 Location: SoCal Watch: Sea Dweller 16600 Posts: 158	I remember phishing was only for your bank accounts. Now, they are phishing for anything.

28 August 2018, 06:37 AM	#11
DaytonaSubmariner "TRF" Member Join Date: Oct 2013 Real Name: Rob Location: US Watch: Rolex Daytona Posts: 233	This same guy posted a FS thread on TRF for a DRSD. I was skeptical from the start (fully documented Mk3 DRSD for $40K). I had gone back-and-forth with him via email (I initially PM'd him and he emailed me directly). I asked for other photos and he sent them to me pretty quickly. He was looking for a cash (wire transfer deal), but I was looking to possibly trade. I asked for references. He stated that he had stellar references from eBay. (First red flag when someone doesn't provide you any references). I asked specifically for a dated photo of the watch and he claimed he was at his girlfriends and it would have to wait till the weekend when he's back home. I also stated that I wanted to make sure that his TRF account wasn't hacked - that's why I was asking for the dated photo. He did respond to that as "LOL, no, I can assure you my account wasn't hacked." Shortly thereafter, he quickly posted that the watch was OHPF and then the entire post disappeared. My next step was to send the eBay user a direct PM through eBay to see if it's the same person. Maybe they hacked both accounts. Once I saw it had disappeared, I knew I was right to take my time and really get all the information I was requesting before I did anything. BOY am I glad I did. Here's the Sub ad he had posted with a link to his eBay account: https://www.rolexforums.com/showthread.php?t=621136 Here is the email address he had corresponded with me through: [email protected]

28 August 2018, 06:39 AM	#12
shaunylw "TRF" Member Join Date: Jun 2013 Location: Here Posts: 4,652	I received a similar message and notified one of the mods.

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)