VRBO With A Dash of Phish: A Recipe For Fraud
When the numbers don't add up, they just don't and that should be that.
Well one woman, looking to enjoy "million dollar views," for a measly sum of $129/night in picturesque Sedona. How that equation adds up, we're just not sure.
In fact, the "Phisherman" [see definition] who hacked the owner of the million dollar view's email account, probably should have thought harder about it too.
And if the low-low price wasn't a red flag for Ann Schutte, who was actually negotiating with the phisherman (unbeknownst to her), the wire to the UK should have been the real tip-off. Again, not to badmouth legitimate folks who own property in America, but live or bank overseas, however it should be a dead giveaway that something could be up. It should be pointed out that Schutte is a property manager from nearby Phoenix, which makes this even worse.
VRBO.com, which is clearly the industry leader in vacation rental listings online, was the platform for this scam. Somewhat surprisingly to us, VRBO admits they've had over 3,000 phishing cases, which is quite a hefty number. This means that a lot of very sophisticated hackers have descended on this site. Perhaps we are also a tad naive to be surprised by this number.
This whole scenario, as outlined on a St Louis, MO website is quite a read. Here's an excerpt:
The phishing schemes also exploit vulnerabilities at the site level, say critics. Many victims claim that sites such as HomeAway and VRBO have been hacked, leading to the compromised email accounts. HomeAway disputes that claim, insisting that the owners’ email accounts were hacked. In any event, the company now covers such breaches through optional insurance that renters can buy.
To add to the confusion, there’s yet another player: the bank handling the wire transaction. A loosely organized group of vacation rental owners has tried to push authorities in the U.K. to track down phishing scammers through the banking system, but so far they’ve been unsuccessful. The complaints are referred to a civilian data collection agency, which in turn is supposed to report phishing incidents to the police.
<<continue reading on SLTToday.com>>