Here a small analysis of a Kleinanzeigen scam which I stumbled upon.
Kleinanzeigen is like a digital flea market place for the German speaking areas.
The scam comes from a buyer who wants to purchase a product inserted into the market place.
The buyer sends a message that it paid the amount and sends a picture with a QR code. The text by itself is well done grammar wise, but it's coming from the buyer directly. Such a text always comes via the Kleinanzeigen system, not via the user. The QR Code is shown as if it's inserted in the product page. Looks pretty professional, but this is also not how it should be. All the purchase or delivery information would be shown in the chat with the other person as part of a message coming from the Kleinanzeigen system. After following the QR Code I'm redirected to a website (https://klelnanzeigen-deutch.delivering018[.]top/receive/order/yU-rbDdZVpI) trying to look like a Kleinanzeigen website. It also shows a support window, but that's obviously not a real one. This windows even says that it "run by eBay". Kleinanzeigen belonged to eBay until May 2023. So it seems like this website has been there for some time. When clicking on "Anfrage akzeptieren" it wants me to input a name, surname and telephone number. After that it wants me to input credit card details. And it's showing a loading bar for some time. With fake information it shows a warning that the card is not allowed because of technical reasons. That's it. Nothing fancy about it, but especially non technically adept people could fall for it.

#scam #analysis