I'm in real trouble.

Rakewell

Platinum Member
Feb 2, 2005
2,418
1
76
On Tuesday of this week (12/9) I get an email from Newegg telling me that an order I made has been denied, because of an unauthorized shipping address. I go to my NE account and notice that someone has made a charge of $1,500 for a couple of phones. There is also a name and shipping address in the account.

I immediately call Newegg and cancel the order, and change all of my passwords on all of my online accounts: Bank, CCs, email accts, etc. I then check my CC and bank balances; everything is OK thusfar.

Then I google the guy?s name and address; turns out that he is a student. I get his email address from the university domain.

Now, this part I regret. Not thinking things through, I email him to let him know that I ?am calling the police?.

Now, every morning since, when I try to log on to hotmail in the morning, I get a message telling me that there have been too many attempts to access my email account with the incorrect password, and the account is locked and will need to be reopened. I then have to change the password.

I have three computers: My gaming desktop, a second hand laptop I use to surf around the house, and my work system. I?m pretty good at keeping windows up to date, do not pirate software or visit sites that are obviously shady, but hey, these guys are pretty smart. I wonder if I am running an infected PC.
I made recent Newegg orders on all three in the last couple of weeks, but I haven?t used my laptop in the past week, which leads me to believe that if there was an infection, it would be on that (I have been resetting my hotmail password every day since the event on my desktop at work ?and- my gaming rig at home, and I am still getting password reset prompts).

As you all know, when you order from the egg, you get two emails: 1. Order verification, 2. Your CC charge has gone through. After the fraud charge was made, he clearly got my email address from NE and got into my email to intercept the Order Verification email, and either he is still trying to get into my email, or he is trying to get me to change the password on the infected system so he can get the fresh password (I have recently changed both accounts to different passwords). Both my Newegg account and my email account had the same password, originally.

How did this guy think he was going to get away with this, leaving his mailing address on my account?
Was it a prank on a fellow student, to try to get him busted for fraud?

This fraud seems isolated to my newegg account thus far; again, no CC charges have been found on any of my cards or bank account.

Cliff notes:

-12/9: Guy breaks into my Newegg account, tries to make $1,500 order.
-12/10: I learn about the break-in after I receive an email from Newegg saying that the charge didn't go through because of unauthorized address used with my CC.
-I ring Newegg and cancel my order, and change the passwords on all of my accounts online.
-I get online and get the fuckwit?s address from newegg; I then google his address and find out that he lives on campus at the University of Cincinnati. I get an email address from the school?s domain, and, Shooting from the hip, I send him an email letting him know that I am calling the police (which I now regret doing).
-I have been watching my credit card s & bank accounts online, there has been no changes.
-Since then, every morning Hotmail informs me that there have been too many attempts on my account, and my password will need to be reset. Someone is trying to get into that account.

I haven?t called the cops yet, because I don?t know if it would do any good. I need some advice as to what to do next; it seems as though this asshole is pinging me any way that he can.

Cheers.

Rakewell
 

MadAmos

Senior member
Sep 13, 2006
818
0
76
I would defiantly start with a call to the cops ASAP, this is a matter that needs to at least be documented in case it escalates. You should also make sure all your passwords including the pass phrases used to reset your password are at least 8random characters including numbers, symbols and upper and lower case and a different password for anything with money involved. If your security question used to verify you ID is an easy one (my space and face book profiles are a gold mine of information to a scammer), like the school you went to birth city favorite pet etc. you need to change them all to something you can remember but is totally random like for birth city use newspaper. If you are truly concerned, and you should be, I recommend contacting your banks, and credit card companies as well as the three credit monitoring( TRW Transunion, and Equifax) services and place a fraud watch on them all a police report will be invaluable to you for this.
 

Rakewell

Platinum Member
Feb 2, 2005
2,418
1
76
Originally posted by: compman25
You're being ripped off and you haven't called the cops?

Well, it was a theft attempt.

I live in NYC. Trying to get a police report here is pulling hair.

I am leaving work early to go to the station for the report.

Anyone know how this might have happened?
 

Sam25

Golden Member
Mar 29, 2008
1,722
29
91
Originally posted by: compman25
You're being ripped off and you haven't called the cops?

Seriously....I couldn't have agreed more!
 

RebateMonger

Elite Member
Dec 24, 2005
11,586
0
0
Originally posted by: compman25
You're being ripped off and you haven't called the cops?
I'm in Arizona and here, the police won't even accept a complaint about Internet fraud. I had my credit card number taken from an Internet site and the police refused to file a report, telling me I had to file the report with a Federal agency.

Originally posted by: Rakewell
-Since then, every morning Hotmail informs me that there have been too many attempts on my account, and my password will need to be reset. Someone is trying to get into that account.
Maybe he's just trying to get even with you for your complaint email.
 

Rakewell

Platinum Member
Feb 2, 2005
2,418
1
76
Originally posted by: RebateMonger
Originally posted by: compman25
You're being ripped off and you haven't called the cops?
I'm in Arizona and here, the police won't even accept a complaint about Internet fraud. I had my credit card number taken from an Internet site and the police refused to file a report, telling me I had to file the report with a Federal agency.

Originally posted by: Rakewell
-Since then, every morning Hotmail informs me that there have been too many attempts on my account, and my password will need to be reset. Someone is trying to get into that account.
Maybe he's just trying to get even with you for your complaint email.

I went to the police station last night, and confirmed it. They told me to contact a federal agency, exactly as you said it. I am sure the police were more polite to you in Arizona, and less condescending to you than they were to me.

You're prolly right about the hotmail thing. It was not very wise of me to write the damned email. :disgust:

How do you suppose this guy got hold of my Newegg account info?
 

MadAmos

Senior member
Sep 13, 2006
818
0
76
It's possible he found your email on a social networking site or school list then either research and a good guess or brute force the password. With the amount of info to be found on the web it can be easy to guess at a password or use the pass word reset/recover utility with a simple easy to find thing like a zipcode or city you grew up in pets name etc. I always lie on these to make it harder, like for mothers maiden name use cornflakes or better yet sekalfnroc.
 

SilentRunning

Golden Member
Aug 8, 2001
1,493
0
76
Originally posted by: MadAmos
It's possible he found your email on a social networking site or school list then either research and a good guess or brute force the password. With the amount of info to be found on the web it can be easy to guess at a password or use the pass word reset/recover utility with a simple easy to find thing like a zipcode or city you grew up in pets name etc. I always lie on these to make it harder, like for mothers maiden name use cornflakes or better yet sekalfnroc.

Then again maybe it was from something they regret having done. ;)

Originally posted by: Rakewell
...
Cliff notes:

-12/9: Guy breaks into my Newegg account, tries to make $1,500 order.
-12/10: I learn about the break-in after I receive an email from Newegg saying that the charge didn't go through because of unauthorized address used with my CC.
-I ring Newegg and cancel my order, and change the passwords on all of my accounts online.
-I get online and get the f***wit?s address from newegg; I then google his address and find out that he lives on campus at the University of Cincinnati. I get an email address from the school?s domain, and, Shooting from the hip, I send him an email letting him know that I am calling the police (which I now regret doing).
-I have been watching my credit card s & bank accounts online, there has been no changes.
-Since then, every morning Hotmail informs me that there have been too many attempts on my account, and my password will need to be reset. Someone is trying to get into that account.

...

 

MadAmos

Senior member
Sep 13, 2006
818
0
76
Originally posted by: SilentRunning
Originally posted by: MadAmos
It's possible he found your email on a social networking site or school list then either research and a good guess or brute force the password. With the amount of info to be found on the web it can be easy to guess at a password or use the pass word reset/recover utility with a simple easy to find thing like a zipcode or city you grew up in pets name etc. I always lie on these to make it harder, like for mothers maiden name use cornflakes or better yet sekalfnroc.

Then again maybe it was from something they regret having done. ;)

Originally posted by: Rakewell
...
Cliff notes:

-12/9: Guy breaks into my Newegg account, tries to make $1,500 order.
-12/10: I learn about the break-in after I receive an email from Newegg saying that the charge didn't go through because of unauthorized address used with my CC.
-I ring Newegg and cancel my order, and change the passwords on all of my accounts online.
-I get online and get the f***wit?s address from newegg; I then google his address and find out that he lives on campus at the University of Cincinnati. I get an email address from the school?s domain, and, Shooting from the hip, I send him an email letting him know that I am calling the police (which I now regret doing).
-I have been watching my credit card s & bank accounts online, there has been no changes.
-Since then, every morning Hotmail informs me that there have been too many attempts on my account, and my password will need to be reset. Someone is trying to get into that account.

...

Yea but the original problem came before he e-mailed this person so I assume there was another source.
 

Lemon law

Lifer
Nov 6, 2005
20,984
3
0
To Rakewell,

Obviously your identity has been stolen, perhaps the fastest growing crime in recent history. Do call call the cops, just do not expect much help.

Meanwhile you have three computers, nuke all three hard drives and reinstall windows . Your ID thief probably has back doors into your computers. Go to the security thread and find John's malware guide. Follow that advice and set up a multilayered security system.
Alert all creditors and credit reporting agencies, and thank your lucky stars no money has thus been stolen yet.

As an identity theft victim you have powerful legal rights, go to http://debt-consolidation-credit-repair-service.com/forums/ to learn about those rights.