{ "items": [ { "type": [ "h-entry" ], "properties": { "name": [ "Phished. Again" ], "url": [ "https://jeremycherfas.net/blog/phished-again" ], "in-reply-to": [ "https://jamesg.blog/2026/06/30/www-8" ], "published": [ "2026-07-23T18:01:00+02:00" ], "content": [ { "html": "

A podcast I just listened to raised again the thorny issue of blogger\u2019s guilt, and tried to make it seem like nothing, that you are answerable only to yourself, that you can blog at any cadence that suits you. Almost all bloggers, however, know that\u2019s not true. That\u2019s why there are so many blog posts that consist of little more than an apology for not blogging.

\n

As I woke from my nap, I thought I may as well get out of my rut of blogging about only the geekier things in my life. While I was considering possible topics, I got a message on my phone, providing me with a perfect subject.

\n

A courier had tried to deliver a package and nobody had been there to receive it, so it offered me an opportunity to reschedule. As it happens, I am expecting two packages, so it was entirely possible that this was one of them. And I don\u2019t want it to be sent back to China, which they threatened to do on Saturday (Urgent, quick, do something.). So I went off to the website, which certainly looked official (though looking again I should have noticed that the courier company\u2019s name was a subdomain). Having entered my name and confirmed my address (again, with hindsight, a flag; they know my address, they\u2019ve just been there), I rescheduled. At this point I was asked to pay a handling fee of \u20ac1.50. Seemed a bit suspicious. I\u2019ve rescheduled before without an extra payment. But what the heck (urgent etc), so I foolishly entered my card details.

\n

Surprise! The card was declined.

\n

\"Screenshot

\n

I love the fact that when they declined the card, they offered me the chance to use a different one, the scamps.

\n

At this point I belatedly twigged, opened my bank app and blocked the card. A moment later the bank called to say they had noticed suspicious transactions for about \u20ac100 and \u20ac400. I sheepishly confessed that I had been phished and that I had blocked the card as soon as I had noticed. They were very nice about that, and I will have a new card in a few days.

\n

Some questions

\n

How did the scummers know that I was expecting a delivery? Or maybe they didn\u2019t, but send out so many messages the odds are in their favour. They had a correct phone number, which is slightly worrying, and of course before I gave them my name and address they maybe did not have that connected to me. The companies I bought from already have my credit card details, so if they were going to scam me, they could have done so by now. Maybe they were breached. Maybe there\u2019s even a business model in which a legitimate company sells a product at an attractive price and makes extra money by selling the details on to the scummers. I have no idea, but it seems possible.

\n

How were they set up to use the card so quickly, and for what? This is probably a failure of the imagination on my part. Good software could presumably be sitting there with a list of things to buy, waiting for card details with which to buy them.

\n

This is now the second time I have been phished, both times this year. I guess I am getting old and dull-witted. All kudos to Fineco bank for its swift and impeccable response.

", "value": "A podcast I just listened to raised again the thorny issue of blogger\u2019s guilt, and tried to make it seem like nothing, that you are answerable only to yourself, that you can blog at any cadence that suits you. Almost all bloggers, however, know that\u2019s not true. That\u2019s why there are so many blog posts that consist of little more than an apology for not blogging.\nAs I woke from my nap, I thought I may as well get out of my rut of blogging about only the geekier things in my life. While I was considering possible topics, I got a message on my phone, providing me with a perfect subject.\nA courier had tried to deliver a package and nobody had been there to receive it, so it offered me an opportunity to reschedule. As it happens, I am expecting two packages, so it was entirely possible that this was one of them. And I don\u2019t want it to be sent back to China, which they threatened to do on Saturday (Urgent, quick, do something.). So I went off to the website, which certainly looked official (though looking again I should have noticed that the courier company\u2019s name was a subdomain). Having entered my name and confirmed my address (again, with hindsight, a flag; they know my address, they\u2019ve just been there), I rescheduled. At this point I was asked to pay a handling fee of \u20ac1.50. Seemed a bit suspicious. I\u2019ve rescheduled before without an extra payment. But what the heck (urgent etc), so I foolishly entered my card details.\nSurprise! The card was declined.\nScreenshot of card being declined\nI love the fact that when they declined the card, they offered me the chance to use a different one, the scamps.\nAt this point I belatedly twigged, opened my bank app and blocked the card. A moment later the bank called to say they had noticed suspicious transactions for about \u20ac100 and \u20ac400. I sheepishly confessed that I had been phished and that I had blocked the card as soon as I had noticed. They were very nice about that, and I will have a new card in a few days. Some questions\nHow did the scummers know that I was expecting a delivery? Or maybe they didn\u2019t, but send out so many messages the odds are in their favour. They had a correct phone number, which is slightly worrying, and of course before I gave them my name and address they maybe did not have that connected to me. The companies I bought from already have my credit card details, so if they were going to scam me, they could have done so by now. Maybe they were breached. Maybe there\u2019s even a business model in which a legitimate company sells a product at an attractive price and makes extra money by selling the details on to the scummers. I have no idea, but it seems possible.\nHow were they set up to use the card so quickly, and for what? This is probably a failure of the imagination on my part. Good software could presumably be sitting there with a list of things to buy, waiting for card details with which to buy them.\nThis is now the second time I have been phished, both times this year. I guess I am getting old and dull-witted. All kudos to Fineco bank for its swift and impeccable response.", "lang": "en" } ], "author": [ { "type": [ "h-card" ], "properties": { "name": [ "Jeremy Cherfas" ], "url": [ "https://jeremycherfas.net" ], "photo": [ "https://www.jeremycherfas.net/user/themes/newtheme/images/zoot.jpg" ], "email": [ "mailto:jcherfas@fastmail.fm" ] }, "lang": "en", "value": "https://jeremycherfas.net" } ] }, "lang": "en" } ], "rels": { "icon": [ "https://jeremycherfas.net/user/themes/my-new-theme/images/logo.png" ], "canonical": [ "https://jeremycherfas.net/" ], "webmention": [ "https://webmention.herokuapp.com/api/webmention" ], "alternate": [ "https://jeremycherfas.net/blog.atom", "https://jeremycherfas.net/blog.rss", "https://jeremycherfas.net/blog.json" ], "me": [ "https://indieweb.social/@etp", "https://github.com/jeremycherfas", "https://jeremycherfas.micro.blog/", "https://jeremycherfas.net/ig.html/", "https://pnut.io/@jeremycherfas" ], "preconnect": [ "https://fonts.bunny.net" ], "stylesheet": [ "https://fonts.bunny.net/css?family=noto-serif:400", "https://jeremycherfas.net/user/plugins/unitegallery/vendor/unitegallery/css/unite-gallery.css", "https://jeremycherfas.net/user/plugins/markdown-notices/assets/notices.css", "https://jeremycherfas.net/user/plugins/form/assets/form-styles.css", "https://jeremycherfas.net/user/plugins/pagination/css/pagination.css", "https://jeremycherfas.net/user/plugins/login/css/login.css", "https://jeremycherfas.net/user/themes/my-new-theme/css/style.css?v=1.1.3", "https://jeremycherfas.net/user/themes/my-new-theme/js/chartist/dist/chartist.min.css?v=1.0.1", "https://jeremycherfas.net/user/themes/my-new-theme/css/line-awesome.min.css" ], "noopener": [ "https://photos.jeremycherfas.net/flowers/bouquet/" ] }, "rel-urls": { "https://jeremycherfas.net/user/themes/my-new-theme/images/logo.png": { "type": "image/png", "rels": [ "icon" ] }, "https://jeremycherfas.net/": { "rels": [ "canonical" ] }, "https://webmention.herokuapp.com/api/webmention": { "rels": [ "webmention" ] }, "https://jeremycherfas.net/blog.atom": { "title": "Feed (Atom)", "type": "application/atom+xml", "rels": [ "alternate" ] }, "https://jeremycherfas.net/blog.rss": { "title": "Feed (RSS)", "type": "application/rss+xml", "rels": [ "alternate" ] }, "https://jeremycherfas.net/blog.json": { "title": "Feed (json)", "type": "application/json", "rels": [ "alternate" ] }, "https://indieweb.social/@etp": { "title": "Mastodon", "rels": [ "me" ] }, "https://fonts.bunny.net": { "rels": [ "preconnect" ] }, "https://fonts.bunny.net/css?family=noto-serif:400": { "rels": [ "stylesheet" ] }, "https://jeremycherfas.net/user/plugins/unitegallery/vendor/unitegallery/css/unite-gallery.css": { "type": "text/css", "rels": [ "stylesheet" ] }, "https://jeremycherfas.net/user/plugins/markdown-notices/assets/notices.css": { "type": "text/css", "rels": [ "stylesheet" ] }, "https://jeremycherfas.net/user/plugins/form/assets/form-styles.css": { "type": "text/css", "rels": [ "stylesheet" ] }, "https://jeremycherfas.net/user/plugins/pagination/css/pagination.css": { "type": "text/css", "rels": [ "stylesheet" ] }, "https://jeremycherfas.net/user/plugins/login/css/login.css": { "type": "text/css", "rels": [ "stylesheet" ] }, "https://jeremycherfas.net/user/themes/my-new-theme/css/style.css?v=1.1.3": { "type": "text/css", "rels": [ "stylesheet" ] }, "https://jeremycherfas.net/user/themes/my-new-theme/js/chartist/dist/chartist.min.css?v=1.0.1": { "type": "text/css", "rels": [ "stylesheet" ] }, "https://jeremycherfas.net/user/themes/my-new-theme/css/line-awesome.min.css": { "type": "text/css", "rels": [ "stylesheet" ] }, "https://photos.jeremycherfas.net/flowers/bouquet/": { "text": "New Photos", "rels": [ "noopener" ] }, "https://github.com/jeremycherfas": { "title": "GitHub", "rels": [ "me" ] }, "https://jeremycherfas.micro.blog/": { "title": "Micro Blog", "rels": [ "me" ] }, "https://jeremycherfas.net/ig.html/": { "title": "Instagram", "rels": [ "me" ] }, "https://pnut.io/@jeremycherfas": { "title": "pnut", "rels": [ "me" ] } }, "debug": { "package": "https://packagist.org/packages/mf2/mf2", "source": "https://github.com/indieweb/php-mf2", "version": "v0.5.0", "note": [ "This output was generated from the php-mf2 library available at https://github.com/indieweb/php-mf2", "Please file any issues with the parser at https://github.com/indieweb/php-mf2/issues", "Using the Masterminds HTML5 parser" ] } }