Stripe ‘Received Payment’ Phishing Scam [Explained]

Scams have become increasingly prevalent in the digital age, with cybercriminals constantly devising new methods to deceive unsuspecting individuals. One such scam that has gained traction in recent years is the Stripe ‘Received Payment’ phishing scam. This article aims to provide a comprehensive overview of this scam, including what it is, how it works, what to do if you have fallen victim, and other relevant information.

Scams

What is the Stripe ‘Received Payment’ Phishing Scam?

The Stripe ‘Received Payment’ phishing scam is a type of online fraud that targets individuals who use the popular online payment processing platform, Stripe. Cybercriminals send out fraudulent emails or text messages claiming that the recipient has received a payment through Stripe. The message typically includes a link that directs the victim to a fake website designed to mimic the legitimate Stripe login page.

How Does the Scam Work?

Once the victim clicks on the link and enters their login credentials on the fake website, the cybercriminals gain access to their Stripe account. This allows the scammers to steal sensitive information, such as credit card details, bank account information, and personal identification data. With this information, the fraudsters can carry out unauthorized transactions, make fraudulent purchases, or even commit identity theft.

The scammers often employ various tactics to make their phishing emails or text messages appear legitimate. They may use official-looking logos, email addresses that resemble those of Stripe, and persuasive language to convince the recipient to click on the malicious link. In some cases, the messages may also contain threats or urgent requests to create a sense of urgency and prompt immediate action.

How to Identify and Avoid Falling Victim to the Scam

It is crucial to be vigilant and cautious when dealing with any emails or text messages related to payment platforms like Stripe. Here are some tips to help you identify and avoid falling victim to the Stripe ‘Received Payment’ phishing scam:

  • Check the sender’s email address or phone number. Legitimate communications from Stripe will typically come from an official domain or phone number.
  • Hover over any links in the message to see the actual URL before clicking on them. If the URL looks suspicious or does not match the official Stripe website, do not click on it.
  • Be wary of urgent or threatening language in the message. Scammers often use fear or a sense of urgency to manipulate victims into taking immediate action.
  • Never enter your login credentials or personal information on a website that you suspect may be fraudulent. Always double-check the website’s URL and ensure it is secure (https://) before entering any sensitive data.
  • Consider using two-factor authentication (2FA) for added security. This can help protect your account even if your login credentials are compromised.

If you have already fallen victim to the scam and provided your login credentials on a fraudulent website, it is crucial to take immediate action to minimize the potential damage:

  1. Change your Stripe account password immediately. Choose a strong, unique password that is not used for any other accounts.
  2. Contact Stripe’s customer support to report the incident and seek guidance on further steps to secure your account.
  3. Monitor your financial accounts closely for any unauthorized transactions or suspicious activity. If you notice anything unusual, contact your bank or credit card provider immediately.
  4. Consider running a scan with Malwarebytes Free or other reputable antivirus software to ensure your device is not infected with malware.

Conclusion

The Stripe ‘Received Payment’ phishing scam is a serious threat that can result in financial loss and identity theft. By staying informed and following the recommended precautions, individuals can protect themselves from falling victim to this scam. Remember to always verify the authenticity of any communication related to payment platforms, be cautious when clicking on links, and report any suspicious activity to the appropriate authorities. Stay vigilant and prioritize your online security to avoid becoming a victim of phishing scams.

How to Stay Safe Online

Here are 10 basic security tips to help you avoid malware and protect your device:

  1. Use a good antivirus and keep it up-to-date.

    Shield Guide

    It's essential to use a good quality antivirus and keep it up-to-date to stay ahead of the latest cyber threats. We are huge fans of Malwarebytes Premium and use it on all of our devices, including Windows and Mac computers as well as our mobile devices. Malwarebytes sits beside your traditional antivirus, filling in any gaps in its defenses, and providing extra protection against sneakier security threats.

  2. Keep software and operating systems up-to-date.

    updates-guide

    Keep your operating system and apps up to date. Whenever an update is released for your device, download and install it right away. These updates often include security fixes, vulnerability patches, and other necessary maintenance.

  3. Be careful when installing programs and apps.

    install guide

    Pay close attention to installation screens and license agreements when installing software. Custom or advanced installation options will often disclose any third-party software that is also being installed. Take great care in every stage of the process and make sure you know what it is you're agreeing to before you click "Next."

  4. Install an ad blocker.

    Ad Blocker

    Use a browser-based content blocker, like AdGuard. Content blockers help stop malicious ads, Trojans, phishing, and other undesirable content that an antivirus product alone may not stop.

  5. Be careful what you download.

    Trojan Horse

    A top goal of cybercriminals is to trick you into downloading malware—programs or apps that carry malware or try to steal information. This malware can be disguised as an app: anything from a popular game to something that checks traffic or the weather.

  6. Be alert for people trying to trick you.

    warning sign

    Whether it's your email, phone, messenger, or other applications, always be alert and on guard for someone trying to trick you into clicking on links or replying to messages. Remember that it's easy to spoof phone numbers, so a familiar name or number doesn't make messages more trustworthy.

  7. Back up your data.

    backup sign

    Back up your data frequently and check that your backup data can be restored. You can do this manually on an external HDD/USB stick, or automatically using backup software. This is also the best way to counter ransomware. Never connect the backup drive to a computer if you suspect that the computer is infected with malware.

  8. Choose strong passwords.

    lock sign

    Use strong and unique passwords for each of your accounts. Avoid using personal information or easily guessable words in your passwords. Enable two-factor authentication (2FA) on your accounts whenever possible.

  9. Be careful where you click.

    cursor sign

    Be cautious when clicking on links or downloading attachments from unknown sources. These could potentially contain malware or phishing scams.

  10. Don't use pirated software.

    Shady Guide

    Avoid using Peer-to-Peer (P2P) file-sharing programs, keygens, cracks, and other pirated software that can often compromise your data, privacy, or both.

To avoid potential dangers on the internet, it's important to follow these 10 basic safety rules. By doing so, you can protect yourself from many of the unpleasant surprises that can arise when using the web.