***NOTICE TO MEMBERSHIP*** Possible batch of fraudulent accounts attempting to run scams.

[Sean]

Hi All,

We have detected an unusual spike in logins and already one fraudulent ad. Please keep your wits about you as we investigate and lock these accounts down.

What this usually means:

-an older, inactive member from years ago has a compromised password
-scammers get hold of these passwords in bulk and use them to get into old photrio accounts
-pose as the old member using past reputation to engineer fraudulent sales

We're still investigating, but do report anything to us regarding any member that feels off.

Thanks!
Sean

 

[Sean]

*update

Hi All, thanks to the heroic efforts of @koraks, we seem to have caught this early and mitigated most of it.

I advise all members to remain vigilant and report any suspicious "deals" people are offering out of the blue. Another major red flag to watch out for is an old account that used to be active, dropped off for several years, and has suddenly reappeared with a sales pitch.

To protect the community, we have proactively forced a security measure on any accounts that have been inactive for an extended period of time.

Thanks,
Sean

 

[koraks]

Hi All, thanks to the heroic efforts of @koraks, we seem to have caught this early and mitigated most of it.

Too much honor; @MattKing actually highlighted a potential issue; from there on it was just legwork. But...in all honesty, this shows how it's really a team effort and how we're complementary. Honestly pretty chuffed with this, even though I would have preferred that didn't even get as far as it did (which really wasn't very far).

To protect the community, we have proactively forced a security measure on any accounts that have been inactive for an extended period of time.

I'd like to add that if someone wants to conduct a trade and they would like us to do a quick review on their Photrio account, please don't hesitate to do so. Just hit 'report', briefly explain which ad/item offer you're referring to and we'll do a brief check. Note that we will not share personal information as a result of this check; we will simply feed back an advisory assessment. Note also that we cannot be held liable for any decisions based on our assessment.

 

[Sean]

Ah yes, apologies to Matt, he made the initial catch

We're still mopping up some potential scam accounts, so far so good, it looks like they were unable to get up to much.

 

[Sean]

Also, thank you @mshchem for the initial report

It does not take long for these scammers to hit and run multiple scams.