Beware of this scam on leboncoin: Threatening to file a complaint if nothing is received

Scammers are trying to deceive sellers on the leboncoin platform by sending them fake purchase confirmation emails.

Scammers are always on the hunt on resale platforms. Even if some scams are already known, it is good to warn about ongoing campaigns. Cybersecurity expert Julien Métayer, aka “Kermit”, came across a team of criminals looking for computer products. He explains to us operation mode scammers.

Advertisement

They start by identifying high-priced goods and contact the sellers claiming that they are interested. After a short discussion, they make an offer for the product – without actually buying it – and ask to continue the exchange by SMS for a more “secure” conversation.

The scammers ask to use the smartphone to exchange. // Source: Julien “Kermit” Metayer
The scammers ask to use the smartphone to exchange. // Source: Julien “Kermit” Metayer

If they manage to recover their target's email address during the discussion, the criminals will send a fake email from leboncoin, confirming that payment has been made and that sending the package is now mandatory under penalty of legal action.

A first email is sent to indicate that the money has been transferred and that a package must now be sent. // Source: Julien “Kermit” MetayerA first email is sent to indicate that the money has been transferred and that a package must now be sent. // Source: Julien “Kermit” Metayer
A first email is sent to indicate that the money has been transferred and that a package must now be sent. // Source: Julien “Kermit” Metayer
A second email puts pressure on the seller to send the package. // Source: Julien “Kermit” MetayerA second email puts pressure on the seller to send the package. // Source: Julien “Kermit” Metayer
A second email puts pressure on the seller to send the package. // Source: Julien “Kermit” Metayer

Phishing email, fake site, a complete scam

After discussion with the criminals, the cybersecurity expert tells them that he has understood their scheme and that he will not send the goods. On the other hand, we do not let ourselves be discouraged, and the interlocutor attempts a final blackmail by sending a false notification of filing a complaint. Here again, the scammers will copy the law enforcement site to make it appear that they have taken the case to court.

The scam is complete. The scammers integrate phishing emails, leboncoin clone pages hosted abroad and end up putting pressure on fake national police sites. », explains Julien Metayer.

Advertisement

The cybersecurity expert specifies that he recently received five requests of the same type for his IT assets. The main recommendation, in this case, is to stay on the leboncoin exchange channel. The platform allows all transactions to be carried out from its site, so there is no need to use another payment method. And if you have already started the discussion, we reassure you, you will not receive a complaint receipt from a national police page.


Advertisement