> | How did the scammer know about my order in the first place to social engineer the replacement request? Via: either buying order requests Looks like you can

> | How did the scammer know about my order in the first place to social engineer the replacement request? Via: either buying order requests Looks like you can buy order requests from people who social engineered order numbers out of amazon reps via chat. A rep from amazon provided someone who didn't authenticate themselves amazon order numbers [1]. > using third-party honeypots to capture your info, using the domain registrar, or a combination of any of these. But how does a "third-party honeypot" capture your activity on Amazon? What does a domain registrar have anything to do with placing orders on Amazon? [1] http://www.htmlist.com/rants/two-for-one-amazon-coms-socially-engineered-replacement-order-scam/ http://www.htmlist.com/rants/two-for-one-amazon-coms-sociall...