Women only shopping but also not shipped, was approached by fake customer service million-vipshop, fraud, customer service-IT information

In the Internet era, just the click of a mouse, it won′t take long, and you want express delivery staff will be sent to your door, convenient at the same time, however, there will be traps. Recently, consumers Ma Menghan vipshop bought two dresses, but received information she knows a fake customer service phone. According to the customer′s instructions, step by step operation, bank cards were turned away 9668. And her story is not isolated case, from February 28, she found that another 15 were also deceived people who suspect that their information is only revealed.

A telephone 3 9668 no verification code

Ma Menghan in yinchuan of Ningxia, is already five months pregnant mothers, in theory this should feel at ease at home births, but these days she had been staring at the phone, Twitter, posted it switch back and forth, QQ Group because her bank card 9668 less puzzled.

Time to go back to February 29, Ma Menghan ready to buy some baby products, "thinking only of quality should be better, after all, is the maternity", so I choose to buy on vipshop. Prior to this she had been shopping on Taobao, but will also be the first time. The next morning, she is a single, coupled with the night of 29th 8 order altogether, including maternal and child care, nutrition and so on, a total of 1539. At that time, the payment page shows payment was a success, but there was no ship.

Night 8:40 Shi, Ma Menghan received a belonging to for Zhejiang Hangzhou of strange phone, phone that head claiming to be is only products will of customer service staff, said "you in only products will of a pen orders due to trading Shi system delay caused trading failed, goods card in logistics at cannot posted, now need you tie completed some operation, first refund to you of personal account, again again submitted orders, to guarantee goods of smooth posted".

Ma Menghan hesitated, but immediately said her order number, shipping address, as well as what is purchased. Due to first time shopping on vipshop, Ma Menghan too late to think, under each other instruction, and the "only order processing center" QQ accounts.

Then, send each other via QQ a named "wogostKAz" link, open login accounts and passwords, will jump to only refund centers, this page exactly like vipshop official page. In accordance with the "customer service" requirement, Ma Menghan on the page to enter your name, bank account number, password, phone number, online banking login passwords, Bank reserved. After you fill out these, you must fill in a CAPTCHA, CAPTCHA box Scarlet Tip: "the verification code sent by the system please wait, SMS displays the amount of the amount of Bank virtual 1-99999 amount, without deductions! ”

Waiting for the clearance verification code, "customer service" also assured her that "this refund to you any inconvenience, returning later in account only 100 Yuan voucher, and 88 percent of the offer of goods to make up for." Then, "customer service" and to refund customers excess causes the system to delay by asking Ma Menghan SMS verification code received an oral report to him. Ma Menghan after you receive verification code, telling him, but he said because the timeout code has expired, the system will send a verification code, said she received a CAPTCHA and immediately told him.

At the same time, Ma Menghan received two is 4700 and 4968 deduction information, account balance reduces 9668. She realized she had cheated, and the other person has hung up the phone. Ma Menghan bank card report immediately and alarm to the local police station, the "customer service" phone couldn′t get through anymore.

Cheated of more than one half of the 16 people

Ma Menghan ridicule on Twitter′s own story, did not think there are many people with the same encounter with her, only within half a month, can come into contact with a 16 a fool, they add up to a total to be cheating 180307.

Is the date of February 29, Miss Xu of the education and training work in Guangzhou, got a call from who claims to be the only customer service, said she would only buy the jacket and knitted set a problem, need to resubmit the order refund to normal delivery. See caller-ID is the number of Guangzhou, Xu is queried, "do you staff should not use the company′s landline number? Why use mobile phones ", Guangdong, while the other said he was specifically responsible for this regional order staff, so do not use the landline. In order to reassure Miss Xu′s concerns, the "customer service" will be her only account numbers, passwords, order number, shipping addresses, and even models of clothes sent, let her check, "I see all is correct, and doubt."

Then just like Ma Menghan cheated process, after you enter your validation code displays an error three times, Xu received an ABC card chargeback information, card ran out of 999 Yuan was detained. "I at on special worried, fear was cheat has, on asked customer service why buckle money has", the "customer service" is explained "buckle money just validation the card can trading, later will with to you, but because you has lost wrong three times validation code, we system automatically will you of ABC card lock, now you only entered another a Zhang card, we to will payment and buckle paragraph with back to you. ”

But in the end did not receive "customer service" so-called refund information, instead, China Merchants Bank Customer Service Center on the phone, reminding her credit card has two unusual deductions, these two are 448 Yuan, Xu realized she had been tricked!

Ma Menghan vipshop formed activist groups, cheated of Kunming, Yunnan′s Miss, Miss Yang of tieling in Liaoning and other 14 people, their most deception 43000, also at least 400 dollars.

Who let the customer information?

QQ Group in reselling

30 yuan to buy 10 records

Under what circumstances can lead to commercial sites of customer information being leaked? Reporters be consulted a company technician responsible for customer information management. He said, on the one hand commercial website vulnerabilities may occur, is discovered by criminals can steal customer information and business staff has access to customer information in the Web site, may also use customer information sold out, on the user′s computer or mobile phone plant viruses may also lead to information being intercepted. He also mentioned that the hackers "collision attack" also have access to customer information.

While Ma Menghan will be directed to the only "in the Web site to buy something else, vipshop orders received cheats call in less than a day, but 8 of us this is the case, it′s hard to not disclose suspect vipshop. "She′d suspect there is a reason, because she is in a field named" data base "QQ Group buys only the customer information.

Xinhua added that the group, composed of 81 people, which would send some information to buy and sell from time to time. When issued when there is a demand for news reporters, immediately someone responded, claiming to have a variety of Web site customer information available for purchase. Ma Menghan is a QQ number called "as" people, to buy at the price of 3 Yuan each to 10 vipshop customer information, these are on March 7 at about 7 o′clock in the morning in the only order of customer. Buy customer information, including customer order number, time, name, phone number, shipping address, as well as what goods are purchased.

"As in" communication, he said "has done for years, customer information is provided by vipshop insiders long, you know. "Ma Menghan PayPal transfers provided to them after the 30 yuan," as in "to a list of 10 customer information.

According to Ma Menghan bought it only lists customer information, journalists in their only meeting service capacity, telephoned to Miss LI, Chongqing, Miss Lee on the list items purchased, purchase receipts, phone number address, can be on one pair. Until the reporters tell the true identity, she was surprised to say: "no way! How do you know my information? ”

Subsequently, the reporter of information in the data, verifying information with them one by one, all but one phone off not sure things, other dealers sell the information is true and complete.

Cheated of money how to recover?

Lawyer

If you do inside job

Units liability electrical contractor

Ma Menghan knew he was cheated, he immediately went to the local public Security Bureau police, and to be listened to, but police advised her to only be home to police. Report which must be present, Ma Menghan dial 12345 Mayor hotline to reflect, the trade and Industry Bureau later responded by saying: "recently received complaints from many vipshop leaks, so that already, liwan district, Guangzhou City, such cases were transferred to the police station for processing and advised her to what information can be provided to liwan District Public Security Bureau. "Miss living in Guangzhou, Xu took information to vipshop, fangcun, liwan district police station, but police say they need a week to determine whether to file.

Beijing Deputy Zhang Xinnian lawyer Dong leak, said in an interview, commercial websites must bear the responsibility for protecting customer information, "vipshop is now so much a user′s disclosure of personal information is clearly a platform vulnerabilities, but there is no deal, no technical precautions. This is the equivalent to the hotel and slipped on the floor and broke, said slippery road if you have prompted caution, hotels on the exemption. "The journalist only on the website, and no safety risks related to the prompt after the payment, and the same type of Taobao and Jingdong have this sort of warning.

Zhang Xinnian believes that before a case is not cracked, do not rule out the ghosts in the film business. Electrical contractor should be self involved, the business sector, telecommunications administration shall carry out administrative investigations, the public security organs should be a criminal investigation. "If you do inside job, employees arrested for illegal access to personal information in connection with crime. On the civil compensation for online shoppers, the unit liability borne by the electricity supplier. ”

In fact, with the development of online shopping, online shopping user information disclosure and fraud cases that occur one after another. In April 2015, after hundreds of people in East Beijing online shopping by fraud, they suspected Jingdong leaked the information, following the media reports on the event has aroused strong repercussions, and ultimately by the East Beijing stepped in "Advanced" end customer losses.

Only respond to:

Customer information is encrypted

Call us

Reporters about the call vipshop Chen feifei, Director of public relations, she said that only attaches great importance to safeguarding consumer information security and cryptographic protection of customer information, adopt measures consistent with the national security legislation, ensure the safety of customer information. But when asked what measures would only do to maintain customer information security, she did not respond positively. She also said: "consumers if fraud, suggests that the first time alarm handling, we will actively cooperate with the police investigation. ”

She referred to criminals by "collision attack" mode, and access to customer information. Hackers in this way by collecting other websites the user and password has been compromised, generate the corresponding dictionary tables, and then log on to try a batch of other commercial Web sites. Many people in order to facilitate memory in different Web sites use the same set of account password, once a Web site account password is compromised, other sites can use this account password to log in, natural customer information at a glance. Only in this way will stop, said Zhang Xinnian lawyers if it is "collision attack" led to leaks, only and no responsibility.

At present, vipshop has got cheated people of order information, said it needed to verify whether they had only purchased and to proceed with the investigation, but as of press time, only there are no relevant response.

女子唯品会网购还未发货，被假客服圈走近万元 - 唯品会,诈骗,客服 - IT资讯

身处互联网时代，只需点点鼠标，用不了多久，你要的东西快递员就会送到你门口，然而便捷的同时，也会有陷阱。近日，消费者马梦晗在唯品会上购买了两件衣服，却接到对她信息了如指掌的假客服电话。按照假客服的指导，一步步进行操作，银行卡被转走9668元。而她的遭遇并非孤例，仅从2月28日至今，她就发现另外15个同样被骗的人，她们怀疑自己的信息被唯品会泄露了。

一通电话3个验证码9668元没了

宁夏银川的马梦晗，是个已经怀孕五个月的准妈妈，按理来说本应该在家安心养胎，可她这几天却一直盯着手机看，微博、贴吧、QQ群来回切换，因为她的银行卡里莫明其妙少了9668元。

时间回到2月29日晚上，马梦晗准备买一些母婴用品，“想着唯品会的品质应该更好一些，毕竟是母婴用品”，所以就选择在唯品会上购买。在这之前她一直在淘宝上买东西，唯品会还是第一次。次日上午，她又下了一单，加上29日晚一共下了8笔订单，包括母婴的护肤品、营养品等，总计1539元。当时，支付页面也显示支付成功了，只是还没有发货而已。

晚上8时40分时，马梦晗接到一个归属地为浙江杭州的陌生电话，电话那头自称是唯品会的客服工作人员,说“您在唯品会的一笔订单由于交易时系统延时造成交易失败，货品卡在物流处无法投递，现在需要您配合完成一些操作，先退款到您的个人账户，再重新提交订单，以保证货品的顺利投递”。

马梦晗有些迟疑，但对方马上说出她的订单号、收货地址以及购买的是什么东西。由于第一次在唯品会上购物，马梦晗来不及多想，就根据对方的指导，加了一个名为“唯品会订单处理中心”的QQ账号。

紧接着，对方通过QQ发来一个名为“wogostKAz”的链接，打开之后登录唯品会账户和密码，便跳转到唯品会退款中心，这个页面跟唯品会官方页面一模一样。按照“客服”的要求，马梦晗在页面上输入自己的姓名、银行账号、密码、网银登录密码、银行预留手机号。填完这些后，要再填一个验证码，验证码框下红字提示：“该验证码由系统发送请耐心等待，短信显示金额为1-99999该金额为银行虚拟金额，不造成扣款！”

在等待验证码的间隙，“客服”还不断安慰她说“本次退款带给您的不便，稍后会在账户返还唯品会100元购物券以及商品88折的优惠活动来弥补”。随即，“客服”又以退款客户过多导致系统延迟为由，要求马梦晗将短信收到的验证码口头报给他。马梦晗收到验证码之后，告诉他了，他却说因为超时验证码已失效，系统会再发一个验证码，说着她又收到一个验证码，就立即告诉了他。

就在这时，马梦晗又收到两条分别为4700元和4968元的扣款信息，账户余额减少了9668元。她才意识到自己上当受骗了，而对方此时已经挂断电话了。马梦晗立即将银行卡挂失，并到当地派出所报警，那位“客服”的电话再也打不通了。

受骗的不止一个半个月16人中招

马梦晗在微博上吐槽自己的遭遇，没想到跟她有同样遭遇的人不在少数，仅在半个月内，能联系到的就有16个受骗的人，她们总共加起来被骗取180307元。

也是2月29日这一天，在广州做教育培训工作的徐小姐，接到一位自称唯品会客服的电话，对方说她在唯品会上购买的短上衣和针织套装出现一些问题，需要退款重新提交订单才能正常发货。看到来电显示是广东广州的号码，徐小姐便质疑“你是工作人员不应该使用公司的座机号吗？为什么要用手机”，而对方称他是专门负责广东这片区域问题订单的工作人员，所以并没有用座机。为了打消徐小姐的疑虑，该“客服”将她的唯品会账号、密码、订单号、收货地址甚至衣服的型号发来了，让她进行核对，“我一看都是正确的，就暂且相信了”。

接着就跟马梦晗被骗的过程一样，在输入三次验证码都显示错误后，徐小姐的收到一条农行卡的扣款信息，卡内的999元一下被扣光了。“我当时就特别着急，怕被骗了，就问客服为什么扣钱了”，该“客服”则解释“扣钱只是验证该卡能否交易，稍后会一起转给你，不过因为你已经输错三次验证码，我们系统自动将你的农行卡锁定，现在你只能输入另一张卡，我们才能将货款和扣款一起退给你。”

然而最终没有收到“客服”所谓的退款信息，反倒是招行客户服务中心打来电话，提醒她的信用卡有两笔异常扣款，这两笔都是448元，徐小姐这才恍然大悟，她被骗了！

在马梦晗组建的唯品会维权群里，被骗的还有云南昆明的何女士、辽宁铁岭的杨小姐等其他14个人，她们最多的被骗43000元，最少的也有400块钱。

是谁泄露了客户信息？

在QQ群中有人倒卖

30元可买10条信息

什么情况下会导致商业网站的客户信息被泄露？记者就此问题咨询了一家公司里负责客户信息管理的技术人员。他称，一方面商业网站可能出现系统漏洞，被不法分子发现后就可盗取客户信息，另外商业网站中能接触到客户信息的工作人员，也有可能将客户信息转卖出去；另一方面，用户的电脑或手机被植入病毒也可能导致信息被人截取。他还提到，黑客通过“撞库攻击”方式也能获得客户信息。

而马梦晗则将矛头直指唯品会：“在别的网站买东西好好的，在唯品会下单不到一天就接到骗子电话，而且我们8个人都是这种情况，很难让人不怀疑是唯品会泄露的。”她这么怀疑还有一个理由，因为她在一个名为“各种数据群”的QQ群买到了唯品会的客户信息。

记者加进这个群，成员有81人，里面不时会发一些买卖的信息。当记者发出有购买需求的消息时，立马就有人回应，声称有各种网站的客户信息可供购买。而马梦晗是在一个QQ号名为“一如既往”的人手中，以3元一个的价钱买到了10个唯品会客户信息，这些都是3月7日上午7点左右在唯品会下单的客户。购买到的客户信息，包括客户的订单号、交易时间、姓名、电话、收货地址以及购买的是何种货品。

在跟“一如既往”交流时，他称：“已经做了几年了，客户信息由唯品会内部人员长期提供，你用了就知道。”在马梦晗向其提供的支付宝转账30元之后，“一如既往”就发来了10个客户信息的名单。

根据马梦晗购得的这份唯品会顾客信息名单，记者以唯品会客服的身份，给重庆市的李小姐打了电话，名单上李小姐购买的物品、手机号码、购买时间收货地址，都可以一一对上。直到记者说出真实身份时，她才惊讶地说：“不可能吧！你怎么能知道我的信息？”

随后，记者按照数据单上的信息，一一跟他们核实了相关信息，除了一人电话关机不能肯定外，其他数据贩子所卖的信息，全部属实。

被骗的钱该如何讨回？

律师

如果确系电商内鬼所为

电商承担单位赔偿责任

马梦晗得知被骗后，立即去了当地公安局派出所报案，并得到受理，不过派出所建议她去唯品会的所在地报案。因报案必须本人到场，马梦晗又拨打12345市长热线进行反映，工商局稍后回应称：“最近接到很多唯品会泄密的投诉，因此已经把这类案件转给了广州市荔湾区公安分局进行处理，建议她有什么信息可以向荔湾区公安分局提供。”身在广州的徐小姐拿着相关资料，向唯品会所在的荔湾区花地派出所报案，不过警方表示需要一星期后才能确定是否立案。

曾代理京东泄密事件的张新年律师，在接受记者采访时表示，商业网站要承担保护客户信息的责任，“现在唯品会这么多用户的个人信息泄露，显然是平台存在漏洞，但没有及时处理，也没有技术方面的防范措施。这就相当于去酒店，在地板上滑倒摔伤了，如果你有提示说这里路滑小心，那酒店就免责了。”记者在唯品会网站上看到，在付款之后并没相关的安全风险提示，而同类型的淘宝和京东均有此类提示。

张新年认为，案件未破获之前，不排除电商出了内鬼。涉案电商应自查，工商部门、电信管理部门等应开展行政调查，公安机关应刑事立案侦查。“如果确系电商内鬼所为，则涉案员工涉嫌非法获取公民个人信息罪。而对网购消费者的民事赔偿上，则由电商承担单位赔偿责任。”

其实随着网络购物的迅猛发展，因网购发生的用户信息泄露及诈骗案件也是层出不穷。2015年4月份，上百人在京东网购后遭诈骗，他们也怀疑是京东泄露了信息，该事件经报道后引起强烈反响，最终由京东出面“垫付”客户损失而收尾。

唯品会回应：

客户信息都会加密

报警处理我们配合

记者就此事致电唯品会公关总监陈菲菲，她称唯品会非常重视维护消费者购物的信息安全，而且对客户信息都进行了加密保护，采用符合国家安全法例的措施，确保客户信息资料安全。不过当被问及唯品会做了哪些措施来维护客户信息安全时，她并未正面回应。她还表示：“消费者如果遇到网络诈骗，建议第一时间报警处理，我们将积极配合警方进行调查。”

她提到不法分子通过“撞库攻击”的方式，也能获得客户信息。这种方式就是黑客通过收集其他网站已泄露的用户和密码，生成对应的字典表，然后去尝试批量登录其他商业网站。不少人为了方便记忆，在不同的网站都使用同一套账户密码，一旦某一个网站的账户密码被泄露，其他网站都可以用这套账户密码登录进去，客户信息自然一览无余。而这种方式唯品会阻止不了，张新年律师也说如果是“撞库攻击”导致的泄露，唯品会并没有责任。

目前，唯品会方面已经拿到受骗人的订单信息，称需要核实他们是否在唯品会上购过物，并着手进行调查，不过截至记者发稿时，唯品会方面仍然没有相关回应。