Who’s Behind the ‘BLS Weblearn’ Credit Card Scam?
Summary: A wave of bogus sub-$15 card charges labeled BLS*Weblearn or PLI*Weblearn, tied to a Malta address and 1-888 numbers, is being processed through BlueSnap, the processor formerly known as Plimus. Krebs links the scheme to flimsy affiliate sites such as onlinelearningaccess.com, whose hidden HTML states the charge will appear as WebLearn8884612032, and notes BlueSnap CEO Ralph Dangelmaier said the merchant was terminated 10 days before the story ran and that he believed a legitimate affiliate program had been hacked.
What you should know: The economics favor the attacker: many small charges across many cards mostly go unnoticed, few victims file chargebacks, and the listed 1-888 number is there to steer disputes to the merchant rather than to Visa or MasterCard. BlueSnap's own CEO acknowledged it was unusual that the affiliate program appears never to have been marketed to real affiliates.
Read the original at Krebs on Security ↗
- Topics
- Fraud & Scams
- Related
- ArcticRAT Cybercrime Gang Profiles Victim Finances With AI Cyber Risks · Nov 13, 2026Three People Arrested for AI-Enhanced Impersonation Fraud Cyber Risks · Nov 11, 2026Medicare scam calls, texts and ads: What to watch for this Open Enrollment Cyber Risks · Oct 14, 2026