I received an email entitled “Your Best Buy receipt,” containing what looks like a receipt for the purchase of an Iphone for $1100, from a Best Buy in nearby New Hampshire. Only, I never made any such purchase.
I checked my bank card and credit card and there is no such charge on either. Plus, the receipt says that payment was made in cash, in one payment of $600 and another of $500.
Another email follows, reading “Thanks for purchasing an Apple product from Best Buy!”
Maybe I am overly paranoid (it’s a good time to be) and they just confused my email address with someone else? Your thoughts? Thanks.
You might have received the first move on some variant of this Best Buy scam from 2003. The next step is to try to weasel your credit card number out of you under the pretext of “legitimate business confusion”.
If a financial transaction email like this contains no personal data at all, such as your name, then it’s a scam.
Note that the first 6 digits of most credit card numbers are assigned based on card and bank. Some try to fool you by saying “You card starting with …” and give a few digits. It’s the last ones that are specific to your account. So if they give the last digits, then they might actually know something about you specifically. Doesn’t mean it’s always legit, but it’s a first tell.
Also, just check the email header and look at the sites the links go to. If you see the return email is something like “juresh666@gmail.com” (Or Yahoo) or some such you know it’s not real.
We now get email receipts for some purchases. Hate that. Don’t want that info passing thru random servers on the Internet. All give our name.
Yesterday I got a package for someone down the street who transposed numbers in their address. Sometimes it’s that, or a error on the company’s end. If you’re concerned, contact Best Buy directly (not from any link or number that might be in the in email).
It’s also possible it’s just a simple email address mistake. For example instead of jcat@example.com their email was entered as jaycat@example.com. I occasionally get receipts and such from a pet store chain (I can’t remember which one), because somebody in Florida doesn’t know what her email address is, and uses mine instead. Obviously if you get any followup request for credit card details or money, then it’s a scam. If you just get ads from Best Buy, it’s annoying, but probably still just a mistake.
In some stores they ask if you want your receipt emailed, and then you have to type your email address into the little console (the credit card console). Very easy to mistype your email address. If your info is on file with them already, and they matched this mistyped email address with your existing info, an email receipt could also contain your info on file (name, address) and yet still not be your purchase.
The return address is " Best Buy <reply-1049004-41_HTML-615279550-97381-214190@emailinfo2.bestbuy.com>"
I contacted Best Buy via customer service chat. They asked for my phone number which I refused to divulge. They said to just ignore the original email.
I understand being cautious about giving out your number to potential scammers. But it’s different when YOU initiate the call, assuming you looked up the central customer service number. You called them, remember?
Best Buy is not trying to inform Jaycat of a mistake, they have sent a receipt to the email address they were given. As ZipperJJ says, many stores do the “email a receipt” thing. It will take any email address that is put in: yours, mine, Jaycat’s, the actual correct one for the person making a purchase, etc. If the email is just “here’s your receipt” then it is a mistake, not a scam. If the email is “you bought an iphone, but need to enter your credit card for the $10 shipping we forgot to charge you” then it is a scam.
I’ve got a number of these recently that make me irritated that my wife bought something…but it turns out she didn’t. If you look at the bottom of the email, does it take you to a t.fubrites.com site to unsubscribe. Is the sending address newsletter@fubrites.com?
If so, thats the same as what I’ve gotten several times. The email says things like:
Amazon Order #105-1286891-641874 wiII be Placed in 2 hours.
Congratulations: Walgreens Order #18482012197 is arriving
Your Order at www.kroger.com was successful.
All point back to fubrites…I don’t know who this group is but its time to block them
As said before, that’s not what happened. It’s an emailed receipt. I don’t go to Best Buy, but at other places I can type whatever the hell I want in the email field for an electronic receipt. There’s no verification or anything, so if I mistyped my address or purposely put someone else’s address in it for shits and giggles, they’d get the emailed receipt.
Now, is that what happened in this case? Without looking at the email itself and checking the headers and where various links within the email lead, I couldn’t say for sure. I twice have gotten legitimate emails that were simply delivered to me because of an email address mistake, but I have also gotten emails informing me of a purchase or a declined credit card payment (most recently), hoping that you’ll click on the link in the email to look at your account. If you’re savvy enough to know how to look at where the link goes to, it’ll be some completely obfuscated URL that has nothing to do with the company in the email.
In this case, with the payment being made in cash, and a follow-up email thanking them for the purchase with no apparent call to action to click on something to login and check and account, if I were a betting man, I’d bet on the side of a mistyped email.
At any rate, in either case, I would simply ignore the email.
Not necessarily. My Home Depot e-receipts have no personal identifying information on them. If I pay with credit, then, yes, you can see the last four digits of your credit card number on them. I assume if I had paid in cash, there would simply be a cash line there.
More likely that the scammers have a long list of breached email accounts and students are notoriously lax about security. They’ll click on anything in an email and poof, malware is installed and before they know it some scammer has their email and password.