Iām sorry to make a significantly more serious post so soon after my art post, but I got pinged by a scam bot that Iād never seen before, and so I wanted to make a more detailed post so people know what to avoid. So!
Right after posting this art, I get this notification:
Which is a scary notification to get, certainly. If you click on the post that youāre mentioned in, it looks like this:
This post will tell you that you are in āLurker Modeā, and that your posts are fully visible to you, but hidden from the dashboard and search results. This isnāt trueā I checked one of the tags that I had put on my art piece, and it showed up there just fine. And it was appearing on the dashboard of one of my other accounts.
This post will tell you that you need to take action, and that you only have a 48-hour window to do so. This is a common tactic in scams, where they try to put a time limit on you to make you panic and act hastily.
The linkā which you should NOT click on, but I did anyway just to investigate furtherā is disguised on the outside as a link to tumblr support. This will redirect you to a captcha, which will then redirect you to a fake Tumblr page:
You arenāt able to click off of or minimize the window that asks you for your bank detailsā only the chat window or the Verify button works. Also, the fake log in pop-up doesnāt play the actual animation of the frog like tumblr does when it wants you to log inā itās just a still image.
Seeing bank details there is definitely enough to prove that itās a scam. I know that ID laws for the internet exist, but why would tumblr be asking you for your bank account information? Especially if you have never purchased something on tumblrā which I suspect most of this website hasnāt.
If you do click the verify buttonā which you really shouldnāt, but I did because I wanted to make as detailed as a post as possibleā it will redirect you again to a page powered by a banking platform, Stripe. And there it will ask you to input your bank account information.
Furthermore, if you click on the original post that pings you, the one with a url thatās just a string of numbers, the account is completely empty.
I assume that there are multiple of these accounts to spam ping people while dressed up as tumblr staff in order to try and maximize profits.
Iāve never seen a scam on tumblr that disguised itself as the staff before, so I donāt blame anyone who was scared for it. Hell, I was scared! Reading through the initial post I was pinged on the first time was scary! It was only when I got to the first mention that it wanted my bank account that I realized it was a scam. I may not be the most computer literate, but Iāve fallen for a Discord scam before (luckily at no financial loss to me) and I now know how to recognize the signs.
I hope you find this post helpful and informative, and I hope if you do that you guys reblog it so more people can be made aware of this scam. I really, really donāt want people falling for something as predatory and vicious as this. And, if you are pinged by one of these bots, block and report BOTH of themā the one that pinged you, and the blog that has this post.
Thank you and have a safe day :)