• 0 Posts
  • 115 Comments
Joined 1 year ago
cake
Cake day: June 14th, 2023

help-circle



















  • They sign up for an account as a customer, and they order something really cheap, e.g. a salt packet from McDonald’s or a sauce packet from Taco Bell.Then when a Dasher accepts the delivery offer, they call the Dasher.

    DoorDash masks phone numbers on both ends by proxying through their own phone bank. So when they call the unsuspecting Dasher, the caller ID on the Dasher’s end says “DoorDash.”

    Then they impersonate Dasher support. They claim to the Dasher that the order they are attempting to pick up was placed fraudulently and will need to be cancelled. They claim that the Dasher will still be paid for their trouble but that they will need to check their text messages for a link.

    Then they use the link to phish the Dasher’s account credentials. And they instruct the Dasher to forward their 2FA code as well, despite the text message literally saying that nobody will ever ask for that code.

    It’s been happening for years. New Dashers fall for it all the time.

    It says they also fraudulently created new accounts as well. They likely turned around and “rented” those accounts out to additional victims. There is a black market for account rentals for those who, for whatever reason (e.g. background check, driving record, citizenship status) can’t be approved for one on their own.