I need help....got an email this morning saying a charge was placed

against my AOL account on 9-25/ for 29.99..it said if this order was unauthorized and I would like to cancel, please click here...I did.. and it was 1-800-flowers...someone ordered 32 long stem roses.

How do I track who emailed me...I clicked on the name of the person who sent it.. but all I got was a profile with no info.

Can anyone offer any advice?

Contact AOL a.s.a.p., by telephone, and tell them about this. Your AOL browser should be able totell you the source of an e-mail. Perhaps someone here with "geek credentials" can tell you how.

gin

And/or you AOL password. Remember AOL will never ask for your password.

.

seems to be sending this sort of "unauthorised charge on your account"
meesage and then requesting your credit info for "confirmation". Common sense would dictate that ,if you were already charged they already have your information and do not need to request it.......

Be very, very careful to whom you give such information.

I was hesitant to open it but I did...I clicked to cancel and it was 1-800-flowers.com...filled in my screen name and password..and then it showed nothing in my shopping cart...I called AOL..and the scam is to get passwords...it's happening with 1-800-flowers and BlockBusters.

They didn't get my c/c numer...just my password which I changed.

This is the email..so...FYI if you open...and give password...change it..that's all it takes...another red flag should have been the cost..what a deal.

Subj: Your Order.
Date: 10/4/03 8:41:14 PM Eastern Daylight Time
From: Macreato
BCC:

Dear AOL Member,
There has been a purchase added to your AOL account on September 25th, 2003.
If this order was unauthorized and you would like to cancel, please Click Here.
Below is listed information about your order:

Product - Love's Embrace Roses
32 dozen long stem red roses
Price - $29.99

My friend received almost the exact same thing two weeks ago. She forwarded it to me because she knew she hadn't ordered anything online in months. I looked it over and told her to inform AOL Customer Service. Typically, they "hijack" another web site, post the web page you are directed to, which contains a Javascript submission form for your user name and password.

The "link" in the email of you receive will not be to 1-800flowers.com...if your mail software supports it, always look at the link to see it's actually going to where you allegedly made a purchase.
(In my friends case, it was www.yourbestfriend.com/cancel/@1-800flowers.com)

They "backdoored" the www.yourbestfriend.com server, placed their directory and code there, sent their e-mails from a hijacked AOL account and just check the hijacked server directory occasionally for a list of names and matching passwords from unsuspecting AOL users.

The web page will *look* authentic, all of the links usually work and of couse they do because all links will point to actual 1-800flowers.com pages. Once again, check your browser's URL bar for "where" this page originated if you suspect a scam.

As posted earlier, call AOL to report it, but typically the perps will be long gone before they can do anything. They can at least suspend the hijacked AOL account so they can't use it again.

And "hi" to my fellow DUers...my first post.

Hammies

Welcome to DU, HamstersFromHell. :hi: Hope you enjoy your stay here.

What do you mean by them getting your password? Which password are you talking about? Is it your aol password to sign on, the password to that flowers site, or which password?

I didn't click on that hyperlink at all..what should I do? How do I know WHICH password they might have?? Thanks!

gin

I forwarded the entire message, including headers, to the fraud division of the state Attorney General's office, asking them to please prosecute the senders and/or turn them over to the feds. The fraud division should have people who understand how to read email headers and trace back to the source.

I learned a lesson this morning.

Get a human being to work on it right away.

Somehow, I get the feeling AOL will be as interested as you are to get to the bottom of this sort of scam.

they are aware of it...and I sent the email to the Cyber crime division of the Va AG. Who knows, the creep may be caught.

There is also a fraud squad and you can contact an instant message type help from AOL. They'll give you more exact instructions on how to deal with this.

Did the e-mail come with a little blue envelope icon? If not, then AOL did not send it.

name...AOL told me they get the screen names..then get the passwords from people who fall for the email like me...and then use my screen name also to send these emails.

& via email..Here's the message about what to do and what's being done..

Thank you for forwarding the e-mail to me. I found out that that e-mail is a scam. We have a specific department that investigates those e-mails. To investigate it, we must have the actual e-mail. Please forward those e-mail(s) to screen name: TOSReports@aol.com

From time to time, you may encounter other situations on AOL that you wish to report. Any time you feel someone is asking for suspicious information (such as your password) or behaving inappropriately, you can use Keyword: Notify AOL.

Thank you and Take Care.

It's a scam. Ignore it.

along with my son..This is the email that I received..Be on the watch for who's sending these because there might be more than one person involved..Here's the email I received--

Subj: Thanks for ordering from 1800flowers.com!
Date: 10/5/2003 11:06:49 PM Eastern Daylight Time
From: Huggsnkss

Dear AOL Member,
There has been a purchase added to your AOL account on September 15, 2003. This purchase took place at 1-800-Flowers.com. If this order was unauthorized and you would like to cancel, please Click Here. Below is listed information about your order:
(The "click here" is hyperlinked, & I don't know how to hyperlink it in this message) :-(

Product - Love's Embrace Roses

32 dozen long stem red roses

Price - $29.99
Shipment Type - 3-5 Day Ground
Shipping and Handling - $7.99
Total Price - $37.98

Go there and click on What's New at the top of the page.

They said they were updating their records. Wanted various privileged info. I shitcanned it. I have never registered at E-Bay and hardly ever go there. I wondered how many people fell for it.

If you have your AOL account billed to a credit or debit card, you can dispute any unauthorized charges with your credit company. Fill out the dispute form on your statement as soon as you notice the charge. Most of the time you will get your money back.

Want his email?

A while ago. I sent it to AOL (Spam notice) and sent a threatening email to the flower co. I never did get a charge on my credit card. I think they try to sucker you in so you will buy something. Just make sure you let you credit card co. and AOL aware of what is happening. (and print out a copy of the emails back and forth)Good luck!