As the world continues to adjust to the pandemic, threat actors are using the changes brought about by the pandemic to exploit consumers. One area that has recently become a target is the online food delivery market, with one of the most popular delivery apps, Just Eat, being used as lures for phishing scams.
As the market leader with 45% of the market share in the UK, Just Eat is a prime target for cybercriminals looking to target British consumers. With the surge in at-home dining, food delivery apps are becoming increasingly popular, which is likely to continue.
This article will examine the Just Eat phishing scam, how it works, the red flags to look out for, and how to protect yourself from falling victim.
How does the Just Eat Text Scam work?
The phishing campaign begins with a text message that appears to be from Just Eat and asks the user to update something about their app profile. The scam can also start through a fraudulent text message or email claiming a £10 credit and asking the recipient to complete a survey or provide personal information to claim the credit.
The message contains a phishing link that directs the user to a landing page closely resembling the Just Eat website. On this page, the user is prompted to confirm that their address complies with the terms and conditions before the update.
The phishing page then requests the user’s personally identifiable information, including their mobile number, address, city, and postcode. Once the user submits their details for verification, they are taken to a second landing page that asks them to pay a service charge of £0.50 to update their information. This phishing script steals the user’s credit or debit card details and billing information.
The phishing page is designed to look very convincing, with highly obfuscated source code, a realistic template, and anti-analysis features that prevent security researchers from inspecting the source code. The page is well-built and uses a high-quality phishing kit to steal the user’s information. Scammers constantly evolve their tactics, techniques, and procedures, and all brands risk being used as lures if the right circumstances permit.
Just Eat Text Scam Red Flags
There are several red flags regarding Just Eat phishing scams to watch out for. These include:
- Unsolicited messages: If you receive a text message or email from Just Eat asking you to update your account information but haven’t requested it, it’s likely a phishing scam.
- Suspicious links: Check the URL of any links provided in the message. If it doesn’t lead to the official Just Eat website, it’s probably a fake site designed to steal your information.
- Requests for personal data: Just Eat will never ask you for sensitive information like your credit card number, social security number, or password. If the message asks for this information, it’s a scam.
- Urgent or threatening language: The sense of urgency in claiming credit by providing personal data is a warning sign. In this case, scammers use the lure of £10 credit to access customers’ information.
- Poor spelling and grammar: Many phishing scams carried out by fraudsters can have errors in spelling and grammar. It may be a phishing attempt if the message seems poorly written or uses awkward phrasing.
If you encounter any of these red flags in a message claiming to be from Just Eat, do not click on any links or provide any personal information. Instead, report the message to Just Eat and delete it from your inbox.
Customers’ Experiences
An Edinburgh mother was shocked after falling victim to a text message scam that drained her bank account. Aleksandra Andrzejewska, 27, had received a message that appeared to be from Just Eat, asking her to update her account details immediately. The message, which seemed legitimate, had instructed her to follow a link to update her details, which involved re-entering her bank information and address. Unfortunately, within days, Aleksandra noticed that multiple Just Eat transactions had been charged to her account, totaling up to over £200.
She immediately updated her details, not knowing it was a phishing scam. Only after logging into her bank account days later did she discover the fraudulent transactions. With no money to buy groceries for her one-year-old daughter, she was forced to block her card and wait for a new one.
The incident highlights the need for people to be more vigilant about the messages they receive, especially with the rise of online and over-the-phone scams during lockdown. Aleksandra shared her experience in the hope that others will not fall for the same thing.
How to protect yourself?
Here are some specific steps you can take to protect yourself from Just Eat-related scams:
- Double-check the sender: Scammers may use a fake sender ID that appears to be Just Eat. Always double-check the sender’s details, such as the email address or phone number, before responding.
- Use official channels: If you need to update your Just Eat account information, log in to the official website or mobile app. Do not follow links provided in unsolicited messages.
- Secure your accounts: Use strong, unique passwords for your online accounts, and enable two-factor authentication where possible.
- Monitor your accounts: Regularly review your bank and credit card statements for any suspicious activity, and immediately report any unauthorized charges or withdrawals to your financial institution.
By taking these steps, you can reduce your risk of falling victim to Just Eat-related scams and protect your personal and financial information.
Conclusion
In conclusion, the Just Eat text message scam is a serious issue that has affected numerous customers. Scammers are constantly evolving their tactics and using well-known brands to appear legitimate, so it is crucial to double-check the source and never provide sensitive information unless you are sure it is safe to do so.
Hence, customers must be cautious when receiving such messages and verify the authenticity of any such communications before responding. Just Eat has also released several statements warning customers of such scams and advising them to protect themselves.
If you are a victim, please let us know by commenting below, and if you have lost a significant amount of money to online scams, do not lose hope. We can help you recover your funds!
When you comment, your name, comment, and the timestamp will be public. We also store this data, which may be used for research or content creation in accordance with our Privacy Policy. By commenting, you consent to these terms.
