What is this scam on Blablacar?

the phishing don’t strike only by e-mail or SMS… This fraudulent technique is everywhere, and Blablacar users have had bitter experience of it. This is a “thread” on Twitter from a colleague ofNew FactoryValentin Hamon-Beugin, who implemented light the scam. Since then, other testimonies have appeared, and the method is unfortunately classic.

Initially, everything happens on the site or theapplication of Blablacar. We are looking for a carpooling solution on a specific route, and inevitably, we most often opt for the cheapest. The problem is that malicious spirits have decided to pollute this platform and take advantage of this search for the lowest price. The strategy is simple: pretend that the transaction failed by canceling the trip, and continue the discussion in private. In this case on WhatsApp.

A fake link leads to a fake Blablacar page

The scam is so well oiled that, even when you decide not to go through with the transaction, other profiles appear with the same conditions and the same prices. Inevitably, when we need to make a trip and the payment fails several times, we agree to continue the discussion in private.

There, the exchange continues and the “pirate” offers a link to pay again. As we can see, there is Blablacar in the URL, except that there is “m-” in front, and not “m. “. When the page opens, it’s a perfect imitation of Blablacar. Impossible to see the deception. As a result, the user enters his bank details, then pays for his journey. Except that it’s a fake Blablacar page, and that the “hackers” thus recover the customer’s bank details.

The damage amounts to several hundred euros. Or rather in rubles since the crooks would be Russian, and even more exactly Belarusian. Fortunately, the double authentication, which consists of validating a payment by SMS, allowed our colleague to stop the transaction. But others, alas, have fallen into the trap. Upon arrival, hundreds of euros lost, and obviously no trip.

Beware of accounts without any reference or photo

Alerted, Blablacar suspended the accounts involved in the scam, and asked its users to ensure that ” all payments have always been properly made since [sa] Web page, [son] site mobile Where [son] app. It is important never to pay for your reservations from sites other than the [sien] “. This is valid for Blablacar but also for all other online services. Without forgetting that the platform offers its own online messaging, and that it is not necessary to go through Whatsapp, Messenger or other to exchange with a user.

Other tips help you avoid falling into the trap. First, be wary of accounts that don’t have a photo, just a first name. Also be wary of accounts that have no ratings or track record. Clearly, any new account is suspicious. And if there is a photo, check that it is not an image created by Artificial Intelligence. Another clue: the phone number of his correspondent. If it is a number abroad, it is obviously very suspicious for a journey in France. Finally, for any private contact, prefer to call in person and pay in person.