Urgent;I've had a phishing email re my donation to gofundme

[mimivanne]

Just checking my emails.1.19 pm, email from 'Nate' at the GofundMe trust and safety team requesting a copy of my government issued photo ID ,evidence of my connection to the campaign such as links to social media.
Failure to respond within 48hrs will result in the refund of my donation.
Checked GofundMe t @ c's ,states they will never request personal details.
Very worrying

It's hard to trust gofundme after all this shite.

What's the exact email address? Hover over it to see what comes up.

Bloody hell. Can you alert GOFUNDME with a copy of the email: they have a customer happiness team.

Would you mind if I screengrab this to twitter and block out your username?

The phrase "government issued photo ID" sounds really off, I don't even know what it means. It smells of phish!

OMG. This is getting vicious

It's interesting that James Caspian (the scientist trying to take Bath University to court over their decision to pull the plug on his research project into destransitioning) used a different website, CrowdJustice. Having said that its T&C are very specific - funds raised are transferred directly to the legal firm handling your case. (So you couldn't for instance, say what JJ has said: "we'll use this on the legal case and any leftovers will go to fund other similar causes.")

[email protected]

IS this linked to the latest update front jennifer James saying Gifundme are going to refund all donations made in false names? No idea if that’s part of their ts and Cs?

Barrack;please do
I tried to send a message to gofundme but not accepting anything at the moment

Apols for typos- I hate my iphon.

Can you forward it to the Administrators of the GoFundMe site? There must be advice there about misuse - that surely is a breach of the T&Cs.

mimivanne

I've sent you a PM

That's clearly a spam email address.

Thinking about this, I've been to various talks on cyber security (not by any means an expert myself, but my workplace takes it incredibly seriously).

If it is a concerted phishing attack, in my limited experience one of two things will have had to have happened - a major hack of their supposedly secure servers, or human intervention.

A major hack would be someone getting hold of the list linking the donations appearing on the publicly viewable page to the email addresses underneath (a bit like happened with Mumsnet a few years back, or TalkTalk more recently).

Human intervention would be someone on their payroll with sys-admin privileges deliberately accessing the list and leaking it.

Are you trying to contact them through their Customer Happiness team and it's not working? I've found an email address on their site that you could try:

If you have received any suspicious correspondence regarding your GoFundMe campaign, please do not respond; instead, forward it to [email protected] or write our team directly by clicking the ‘Contact Us’ button below. We also encourage you to reset your GoFundMe and payment accounts’ passwords any time you receive a suspicious email. If you need assistance with that process, just let us know.

Zen desk is a customer support system - but anyone is likely to be able to sign up with whatever name they like - maybe even on a free trial...

The fact that the email given in blanches post ends "@gofundme.com" makes the "@gofundme.zendesk.com" look even more suspicious...

For example - tado (home automation) send customer support emails from tado.zendesk.com

Dunno what happened with my formatting there!

X post!

And yes - they offer a 30 day free trial. I would still suspect phishing, and certainly wouldn't send ID, but it's sophisticated phishing - they've gone to some effort.

I received it too, and it gave me the willies.

Do you have guessable email addresses? Eg first.last@ Hotmail or gmail?

If not then it's more worrying

I would contact Zendesk. Maybe on Tweeter. They are company which care about their reputation (I don't work for them).

they've gone to some effort

They do seem pretty riled that anyone would set up a successful crowd fund - the PR has obviously been on overdrive. I now see that JJ was right to keep within the LP and turn down the press invites.