Educate me - Is there any risk in replying via e-mail to such a scam? They get your e-mail addr and that's it, right?
Enjoy the benefits of a premium membership!
Upgrade Account
-
TalkBass has been independent since 1998. Add your voice.
Create a free account to reply to discussions, view embedded media, and browse with fewer display ads.
Join free Log in
Want zero display ads or expanded classifieds tools? Compare plans.
Anyone else getting this CL scam where you are?
- Thread starter Michedelic
- Start date
-
- Tags
- cl craigslist phishing scams
“I’m going to send you a code to verify you are real….”
Seriously?? I try to waste their time when I get these other scams and send them wrong numbers, etc.
Seriously?? I try to waste their time when I get these other scams and send them wrong numbers, etc.
Yes, there is a risk. Their next reply could have a payload that exploits a vulnerability in your email client or web browser, since that will be in the metadata of your reply. It's unlikely that you're dealing with a person, most likely a bot, so there's really nothing positive that will happen by replying.
And then the info they get from your reply is going to be sold because you've shown you will engage.
I've gotten responses like that. Vaguely worded, stuff like "I would like to buy your item", etc. They usually arrive soon (like minutes) after the CL post is made. Scam or worse. I never reply.
I've got about 5 or 6 at once from different email addresses at the same time. All said the exact same thing word for word. In the lower corner of the email, there is a Craigslist link to flag the email as a scam or as spam. I flagged all of them and I haven't received any since.
My favorite is when they want to send you a code to prove that you are not a bot! (Do NOT reply with that code number or they will gain access to your phone!)
Craigslist automatically assigns an email to communicate using their system. Look in the reply box of a seller's listing to see it. It is supposed to protect your identity and that is why the scammers say that they don't check their cl email. I don't reply to anyone except with the cl email.
I got it once. Embarrassed to say I replied. Nothing happened bad, but I should have known.
If a malicious payload is a goal, why would they not just put it in the first e-mail message?
I have had some history with people replying fairly soon to a CL ad only to ghost me after my reply. I don't reply to generic inquires, but if they mention the item or specifics about it, I probably will.
I get them sometimes worded differently. I ignore scammers or strange emails. I've answered them in the past by mistake, so I've learned my lesson. I am meeting a guy tomorrow halfway to sell an Elite Telecaster. My half will be a 1 1/2 hour drive, his a 2 1/2 hour drive. I told him I will meet him at the Harley Davidson lot in a large town after getting their permission on the phone. I was assured people do that there frequently for safety reasons. I only do business in a safe location with lots of cameras. If they won't, I don't meet them. Too many problems out there.
Conversely, I would NEVER buy an electric guitar until I've plugged it into an amp.
Yes it’s been going on for a while, I was getting them as well when I was posting stuff for sale on Kijiji here in Canada.
I'd reply with an offer to sell them speakers that were left over from a customer's shipping overage, and that they'll be delivered in a white van.
I will have a Bose S1 Pro with me so he can try it. It is a battery powered speaker that makes the Tele or any guitar sound great. I can demo a bass with it also, it just won't be turned up too loud.
There is money to be made harvesting and selling valid email addresses.
