Urgent;I've had a phishing email re my donation to gofundme

[mimivanne]

Just checking my emails.1.19 pm, email from 'Nate' at the GofundMe trust and safety team requesting a copy of my government issued photo ID ,evidence of my connection to the campaign such as links to social media.
Failure to respond within 48hrs will result in the refund of my donation.
Checked GofundMe t @ c's ,states they will never request personal details.
Very worrying

Saskia;
Some companies say (in faux patient voice),do you mean gmail ? nope

CAAKE - your experience (email the phishing attempt arrived at nothing like the name you put on your donation) is why I am becoming increasingly suspicious that there may have been a massive security breach here. The things that are worrying me are that either GFM's servers have been hacked (quite possible, given that techy careers seem to be over-represented among TIMs), or there's someone on the inside leaking information (potentially even messier).

Thanks Hairy. I've just sent another email to gofundme asking for evidence/clarification.

Action Fraud has a dedicated email address where you can forward the suspect emails

www.actionfraud.police.uk/scam-emails

Ooh thanks Irk.

I'd also look at their privacy statement. Unless it states they can ask for and provide a reason for why they need to hold this data they are in breach of the Data Protection Act. For those that have received such emails I would check this and raise it with them , threatening a report to the ICO.

I've reported it to Irk's link!

CAAKE, You're welcome, pass it around. The more people that complain the better.

SciFiFan LOL at Romulans

Phishers want your money. There is no way they are interested in your social media involvement in this particular campaign!

I think people are using "phishing" to describe the technique (using social engineering rather than technical hacking to get into people's accounts/get at their real-life ID) rather than the outcome (getting money being the typical one, but in this case the end-game is doxxing people rather than getting their money).

Do you know, at the time I donated I was a bit hesitant because you have to put your name, email address and postcode and I thought 'gosh I bet the TRAs will have their best hackers on this one'. But then I brushed it aside because I thought Gofundme must be an incredibly secure site.

They haven't really hacked it have they?!

I donated anonymously and haven't had any emails or anything apart from updates.

Also I don't think I made an actual 'account' or did I? I just filled in my details, clicked that anonymous button and then got an email that I had to click a link in to confirm the donation? I didn't do any password or anything like that I don't think?

The request for postcode is legit, I think. It's not unusual for sites to cross-reference your billing address against your card number to reduce the chances of it being a stolen card being used.

I didn't use my postcode, but mine still hasn't been picked up and returned?

Jack is in Penis News saying ze is pleased as it’s partially defunded the campaign. I think ze hasn’t realised that it’s backfired as people are just redonating and giving more in some cases. Nice try, Jack!

Maybe that was jacks plan all along? Get to play lip service to the TRAs so the don't turn on her/xer again, while promoting the campaign and getting more donations...

Has anyone who emailed either GFM or ZenDesk gotten a response back yet?

If Go Fund me suspects the name and the 'donation name' dont match, they wont need any verification as they can just issue an automatic refund.
I would be VERY suspicious that this might be something to do with the group set up to 'out' all the transhopbes, or just an opportunist knowing there will be refunds going out

I've received an automatic reply from GoFundMe,thanking me for my email,unable to respond individually

What email address was the reply from?

And how on earth can't they respond individually to an individual query

That's a totally crap response, mimi - you're drawing to their attention the possibility that something fraudulent might be going on and they send you back a pro-forma saying "we don't respond individually". What the fuck is the point of having an email address on their website, then?

Its All
NFIB phishing

Hairy
Indeed,could it be that they don't care,surely not

Has anyone tweeted Zendesk? They are very protective of their reputation; they will either confirm that it's phishing or push GoFundMe to communicate.

I haven’t heard anything from gofundme about either email I sent. If I haven’t heard anything by the end of tomorrow I will email them again informing them that I have reported it to actionfraud because they have not reassured me that it is a legitimate email.