Did they really think I was going to fall for this?

[digger]

I don't get it. The link...

...has an encoded "@" buried in it, which means it isn't going to citibank.com at all. It's going to somewhere encoded in all the gobbledygook over on the right.

If you go to "http://[email protected]" it does not go to google.com -- it will go to example.com and pass it "google.com" as a USERNAME. The scammers throw that part away -- after it's fooled the visitor into thinking they're legit.

 

[gonelifting]

sadly, the senior citizens of this country, who control most of the wealth, are the first to fall for scams like this one.

Listen up people, You may NOT get that inheritance after all.

 

[ohashi]

...has an encoded "@" buried in it, which means it isn't going to citibank.com at all. It's going to somewhere encoded in all the gobbledygook over on the right.

If you go to "http://[email protected]" it does not go to google.com -- it will go to example.com and pass it "google.com" as a USERNAME. The scammers throw that part away -- after it's fooled the visitor into thinking they're legit.

The link that AAP posted in the message doesn't have the @, which is why I was confused. I guess someone edited it or something.

 

[ZKaudio]

dude its massiveguns!

 

[AAP]

You're just being too critical AAP. That sounds totally legit.

I didn't fall for it.

I sent them a picture of my tiara. And the back of it that says Sponsored By Mensa.

 

[digger]

The link that AAP posted in the message doesn't have the @, which is why I was confused. I guess someone edited it or something.

I figured that's what threw you. No, it's ]worse than that -- the scammers encoded it, as @ or some other string that is equivalent to it.

Another recent trick is to encode backspaces so you can't even see that there's garbage on the tail of the URL. Bottom line, when it comes to your bank account, don't trust a URL you didn't type.

 

[PIGEON-RAT]

I figured that's what threw you. No, it's ]worse than that -- the scammers encoded it, as @ or some other string that is equivalent to it.

Another recent trick is to encode backspaces so you can't even see that there's garbage on the tail of the URL. Bottom line, when it comes to your bank account, don't trust a URL you didn't type.

dude quit revealing my tricks

 

[The Red Dragon]