Cyber Risks · Krebs on Security

Fraudsters Tap Kohl’s Cash for Cold Cash

Summary: Scammers used compromised Kohls.com accounts to order bulky merchandise - baby cribs, a stroller system and car seat, a baby bath tub - shipped to the victim's own home, earning Kohl's cash rebates that the thieves then redeemed for resale or gift cards. KrebsOnSecurity reader Suzanne Perry received an email that her account address had been changed, found two fraudulent orders of almost $700 each that yielded $220 in Kohl's cash, and Kohl's canceled the orders and reset her credentials.

Key Takeaway: Kohl's told Perry the bulky items are chosen because they take longer to return, and Kohl's revokes rebate credits on returned items - so the $220 in stolen Kohl's cash would have been spent long before the victim could haul the merchandise back.

Read the original at Krebs on Security ↗

Topics
Fraud & Scams
Related