I almost had a heart attack this week. I was checking my email over coffee one morning when I noticed something from StubHub — a website that allows users to buy and sell tickets to sporting and entertainment events. When I opened the email, my jaw dropped.
According to the email, I bought tickets to a boxing match in Nevada, for $2,000! It said the purchase was still pending and if I needed to cancel, I should just click on the provided link. Of course I wanted to cancel! I don’t even like boxing.
But, my keen Better Business Bureau instincts made me pause as my arrow hovered over the link. Instead of clicking it, I typed StubHub’s web address into my navigator and logged onto my account directly. Lo and behold, there was no pending $2,000 purchase. The email was a scam, designed to get people’s StubHub login information. Once logged on to StubHub, the scammers would have access to a variety of personal information.
Word of the scam quickly reached StubHub, and a representative posted a notice on the company’s website and Facebook page.
“Please DO NOT click on any link in the email,” the company’s official statement read. “If you have clicked on these links, you may need to check your computer for a virus or malware and should log into your StubHub ‘My Account’ to change your StubHub password. (https://www.stubhub.com/account/).”
A company representative asked affected consumers to send a copy of the email to email@example.com so they can investigate, and to email any questions or concerns to firstname.lastname@example.org.
This is just another reminder to never click on a link in an unsolicited email, especially one from a bank or other website that contains personal information. Don’t provide personal information to unsolicited callers and always verify claims made via email.
Chances are, those wild accusations are designed to trick you into giving away more than you intend.
If you’ve been targeted by this scam share your story with us.