Anyone else have this happen? Just clicking emails and I see I have one from Gunbroker saying I won an auction. I haven’t logged on to that account since I set it up years ago much less visited that that site in a long time. Thinking it was just a phishing email I opened another browser and logged on and sure enough it says I won an item. Anyone else have this happen to them recently?

This message has been edited. Last edited by: drabfour,

Delete it.

Did somebody phish your info? I would be very cautious, maybe let GB know it wasn’t you. So you logged on to GB and looked at your won items and there was one showing, right?
Maybe somebody used your credentials, and changed shipping, etc. check everything you had on file with them too.

Yeah I sent them an email and changed my password. Yes one glock 34 for 1900.

"Save as" or "Print" to PDF all emails and screen shots to capture any and all activity.

If you in fact do see you "won" an auction on GB, capture all of that as well. ASAP.

You may need it if your account was compromised.

If you have a Credit Card or account tied to GB, then break that (those) method of payment(s), and /or close/cancel the finance accounts.

And keep an eye on those accounts.

Do any and all transactions where you change account info, usernames and passwords from a "clean" computer/device that you have never used before, if possible.

Then worry and deal with security of devices you have used that may be compromised.

quote:

Originally posted by drabfour:
Yes one glock 34 for 1900.

Being as, when I checked a week or three back, the prices/winning bids for G34's in mint(-ish) condition was around $600, I suspect that was a bogus notification that didn't even come from GB.

Need to be able to check the email headers to know for sure.

Conversely: If GB buyers really are paying $1900 for G34's, I need to get mine listed

^^^ yeah I was suspicious of the email that’s my I didn’t click actual link in email I opened Gunbrokers site in another browser and logged in. It’s some semi Gucci Zev Glock.

quote:

Originally posted by drabfour:
^^^ yeah I was suspicious of the email that’s my I didn’t click actual link in email I opened Gunbrokers site in another browser and logged in. It’s some semi Gucci Zev Glock.

My bet was that it was a phishing email to get your gunbroker password.

You can look at the actual email address instead of the spoofed name. Either click on your email address to see details.

You've never had emails like that before that seems to be from your bank or something and saying something's wrong with your account? You click on a link in the email and it looks like your bank web page but it's actually a fake one designed for you to input your user name and password. I figure everyone by now should have received at least a couple of phishing emails.

What I don’t get is how a scammer could possibly profit here; payment isn’t automatically generated on GB for a “won” auction. Does the scammer really believe someone would say “oh well, GB says I bid on this, now I must pay for it”? Also, if the OP didn’t click any supplied links, no intrusion into his system through email could occur. Beyond a third party just being an asshole, what’s the gain here?

quote:

Originally posted by drabfour:
^^^ yeah I was suspicious of the email that’s my I didn’t click actual link in email I opened Gunbrokers site in another browser and logged in.

Right-click on the email, copy, and paste into a text window to see where it would lead you.

(My computer email app displays the URL for links at the bottom of the window, like a web browser does.)

quote:

Originally posted by drabfour:
It’s some semi Gucci Zev Glock.

Oh. Ok. Zev stuff is spendy.

Gunbroker responded saying that it appears the sellers account may have been hacked which I started to believe after seeing the other items the seller had for sale. The transaction was canceled.

As Rey mentioned you can easily look at the actual email address of the sender. Usually it says something like “Gunbroker” in the address area, but if you click on it you’ll see the domain the email came from isn’t the @Gunbroker.com domain. Commonly it’s from a gmail or other free email service.

Yes phishing emails are pretty easy to spot and that’s why I never clicked the link in the email and went to Gunbroker’s actual site to check it out.