If you received an e-mail from “Unicycle <unygift@unicycle.com>” offering a free Curious George toy and mini penny-farthing it is a scam trying to get your credit card information. I received the e-mail sometime earlier today.
The link brings you to “unicycie.com”, note the “l” is an “i”.
They also ask for your credit card PIN, a big red flag.
I called the real Unicycle.com, they are aware of the e-mail.
Here is a screen shot of the phishing email. If you didn’t receive it, have no fear. You can still enjoy their really pathetic attempt at phishing. I think a 4th grade US student could write a better phishing email. It’s obvious that this stuff is from countries where English is not the native language.
There are spelling errors (recive instead of receive), poor grammar, poor wording, poor punctuation, lousy HTML, gratuitous use of large fonts, and lousy HTML. It’s pathetic all the way around. I like the line where they say this offer is only going out to customers that are more than one year old. What about the babies?
How do they expect something so poorly written and presented to actually work? I’ve seen much better phishing scams. This one ranks as one of the worst executed.
I apologize for the high resolution of the attached image. It’s 766x901 pixels. I shrank it as much as I could while still keeping it on one screen shot.
On a certain level, it is quite funny. My regret is that I never got to see the web page at unicycie.com. That page was taken down before I was able to see it. I’m sure it was done just as poorly as the email.
If someone did get ripped off by it, I feel really bad for them. Perhaps that was the lesson they needed, having not noticed any of the other advice that’s been passing over their heads for the past year or more, to not give out sensitive personal or financial information to questionable sources. Fortunately that bogus email was looking very questionable.
It’s kind of reassuring to know that, though that email list was compromised, the thieves didn’t have the skills to come up with something better to use to rip people off. Notice it appears to have been done from outside the USA. Though bad grammar is rampant here, I get the feeling this was an outside job.
The bozos are at it again. They sent out another phishing email. The same as the first. You’d think they would have read my critique and corrected their spelling errors. But no.
I was guessing that it was a scam. And I knew it was a scam when they asked for a credit card#. I like where they say, Thank you because you choosed to be a unicycle customer.
I got another one today. This one wants to send you to unlcycle.com (where the ‘i’ is replaced by an ‘l’). Looking up these domains with “whois” reveals that the registrars have USA addresses.
unicycie.com is registered to an Annette Albring of Toledo, Ohio.
unlcycle.com is registered to a Bruce Kinsey of Marysville, Ohio.
If these people are involved in the scam, they are sure wide open to prosecution. Maybe these are fake identities for some overseas operation. Maybe the names and addresses are taken from unicycle.com’s customer list, and the registrations were paid for using their stolen credit card numbers.
OK I just called both of them. I got answering machines in both cases, and left detailed messages, along with my phone number. Bruce’s voicemail greeting sounds like a regular family voicemail greeting, giving his name and family member names. I bet they’re unicyclists.
The scammer might not have access to unicycle.com’s customer list. All they need is to get email addresses of unicyclists and you have a good chance of sending the fraudulent email to a unicycle.com customer.
Bruce Kinsey just called me back. It was the first he’d heard of any of this. He isn’t a unicyclist and he has never bought anything from unicycle.com. None of the unLcycle.com “whois” information is his, other than his name/address/phone#. The crystaltech.com email address isn’t his. He doesn’t think there are any unexplained charges on his credit cards. Sounds like the scammers just grabbed his name/address/phone# out of some public listing such as the phone book.
The domain under his name was just purchased yesterday… so, it’s likely that it’s not showing on his credit card yet as that usually takes a day or two to show up.