The National Cybersecurity Institute, under the Ministry of Economy, has issued an alert advising on this problem. Apparently it is a legitimate buyer looking to get a product on Wallapop . However, the only thing that interests these criminals is your personal data and gaining access to your bank accounts. This is his modus operandi .
The National Cybersecurity Institute , (INCIBE) has issued an alert of medium importance about the latest scam that groups of cybercriminals are developing in Wallapop, the popular site for buying and selling second-hand products in particular.
THE MODUS OPERANDI OF THE SCAM BY WALLAPOP
The criminals pose as a buyer interested in purchasing some of the products for sale and write him a message. In this message, they encourage continuing conversations to get the product through email .
According to the Incibe alert, criminals send the following text (without punctuation marks) that we reproduce below.
” Hello, is this item still for sale? If so, please confirm me by calling your name, personal email (indicate an address), thank you,” the generic message literally states.
Once the seller is contacted by replying to the mail, Incibe warns that there can be different types of response, using tricks to obtain personal information about the seller .
What the criminal wants with this communication is to obtain data such as his name, address and telephone . To prevent the seller from being suspicious, scammers claim that they request this information to send a courier company to pick up the product that is for sale.
Once we have sent the data, the scammer, masked as a buyer , will ask to review a notification that we must have received in our email from the transport company.
An email in which the gang of scammers impersonate the identity of DHL, the international logistics and transport company. The new email in which they pose as DHL, in addition to personal data, aims to collect bank details and even tries to trick the seller into providing their credit card code so that the shipment can be made.
IN CONTACT WITH THE SECURITY FORCES
Wallapop, for its part, has issued a statement in which it assures that they have “the means and resources that we make available to our community to contribute day by day to make the second-hand market even safer.”
In this specific case, they acknowledge that they have detected “an upturn of a specific type of scam, establishing false contacts with our users who redirect them outside the app.” “Although the incidents have been minimal ( below 0.5% of the total incidents detected ), since we identified the first cases, at wallapop we have implemented measures and tools to actively detect these cases and prevent this from continuing to occur”, continue.
Furthermore, the company explained that they are “in continuous contact with the security forces and the rest of the authorities, with whom we actively collaborate to protect users against fraud.”