Weird McDonald's/ UberEats thing - any ideas?

[KoiP]

My sister (Jane) got a text from her friend (Lisa) earlier.

Lisa told Jane she'd ordered McDonald's and had entered Jane's phone number in to the app by mistake. Lisa needs Jane to send her the verification code when it comes through via text.

This sounds dodgy to me - why would someone do this? They haven't known each other very long.

Is this some kind of elaborate scam? I don't know how it could be though...

Yeah. Scam 100%

Well a free McDonalds meal isn't exactly an 'elaborate' scam that will cost thousands, if it is a scam.

But either way, your sister "Jane" should just ignore "Lisa", who, if genuine, sounds like a complete idiot for mistakenly putting in the phone number of someone she's only just met rather than her own.

I don't know how you'd enter someone else's phone number, especially the number of someone you haven't know for long!

Does Jane fancy paying for a meal for a stranger? If so, she could donate to a foodbank. Don't fall for this scam!

It won't be for a McD's. That's the scam part. The code will be for a much bigger purchase.

It’s nothing to do with getting a free McDonald’s meal, it’s a scam to get into your accounts…

She’s hoping your sister doesn’t have an account yet so Jane will get £10/£15 free food. New sign-ups get £10/£15/£20 free food but you have to use a number that has never been registered to Uber before so you can’t just keep making new accounts and get the freebies if you see what I mean. I know this as DCs have used mine and DP’s numbers as we don’t order on Uber. Very odd to just use a friend’s number, I don’t think DCs would dream of asking anyone other than us!

Could be that! But then, why not just say that? It's all very odd.

Engage the brain

How is this a scam

sending someone a series of numbers is in no way a danger to any personal data.

if she was being asked to follow a link and confirm, or asked to send anything other than ‘hi the code was 9840) I’d agree, but she isn’t

Theres no guarantee the code is for a McDonalds though
Could be an attempt to gain access to a bank account or anything

Lisa told Jane she'd ordered McDonald's and had entered Jane's phone number in to the app by mistake. Lisa needs Jane to send her the verification code when it comes through via text.

Jane needs to tell Lisa to delete her order, & try again with the correct phone number.

Even if this were genuine (it's not) only a CF would 'accidentally' use a new acquaintance's phone number, then expect that new pal to follow through to complete the order. It's so transparent it's ridiculous.

Because the code itself comes from a generic text bank number, like so many 2FA codes - the scammer isn't attempting to gain anything related to HelloFresh.
It's more likely that someone, not Lisa, has Jane's data and is attempting to gain access to something else that is in Jane's name, with Jane's mobile number attached.

Like a bank account, PayPal account, etc.

Do half the posters on here not have second line verification set up for online shopping etc?

I do. So, if my card details are being used for a purchase, the card issuer sends me a text to my perviously verified phone number. I then have to enter the code from the text to confirm that it is me making the purchase.

Therefore, if someone else got hold of my card details, they would not be able to make a transaction as they would not be able to enter the code.

I’m sure it makes you feel good to be so rude to people, but perhaps you should educate yourself a bit first so you’ve actually got your facts right. Just an idea.

This. I have exactly the same. Ditto when I used to need to get access to HMRC online, they would send a code to my phone that I had to input into the website.

I think you need to "engage your brain". This is a known scam.

They will be trying to access bank accounts etc or make a larger purchase.

You should NEVER give a 2FA code sent to your phone to anyone under any circumstances.

Therefore, if someone else got hold of my card details, they would not be able to make a transaction as they would not be able to enter the code.

Unless they text you as a friend and said they’d accidentally entered your phone number instead of theirs into an app and could you please let them know what the code is?

Scam scam scammy scam by Scammy McScamface.

Precisely. And then, when you complain to your card issuer that youve been defrauded, they're not going to help because you authorised the transaction.

She should just deny receiving the code if questioned and say “you must have entered one of my digits wrong so I never received a code”

If I'd accidentally put my friends phone number into something instead of mine, firstly... that would never happen..

Secondly, I'd cancel the order and start over.

Lots of things text me for a code to confirm payment, Paypal does, my bank account does - they come up as what they are, but of course that can be faked very easily.

It could be a scam, or it could be her friend is trying to get a free dinner out of her. Either way, say 'I didn't get a text, sorry you'll have to cancel the order and start over with your own details'.

As 'Lisa' doesn't have a code the transaction won't go through, so this 'Lisa' just has to redo their order with their 'own' number.
It is such an unbelievable story that there has to be done sort of thing going on (like when people get a text saying 'hi mum this is my new number so change my contact details').

Yep proper dodgy. The code could be verification for anything and handing it over means the ‘friend’ can access an account. Maybe Uber eats or maybe something worse. Nobody ‘accidentally’ enters an acquaintance’s phone number when setting up an account.