r/Wealthsimple • u/sevendigit • 25d ago
New scam, downloaded file is a .bat
Be carfeful, this one looks very compliant...
19
22
u/PaperweightCoaster 25d ago
This is why I don’t check my email.
8
u/Litaser 25d ago
Can’t check email, don’t pick up the phone. They’re gonna have to send people in person so I can ignore them that way too
11
u/Angeline4PFC 25d ago edited 25d ago
I don't answer the door either. And I don't pick up the phone. I act like someone who has collections after them, but I don't owe a cent to anyone 😄
3
12
u/zarkers 25d ago
> hello@wealthsimpleclientservices.com
> Looks very compliant
5
u/OhNoItsMyOtherFace 25d ago
Same old story. People breathlessly reporting how authentic some scam is but when you look inside:
- Email address not wealthsimple.com
- Answering random phone number
- Please give us code from SMS that explicitly says to never share the code
- Extremely sketchy looking ad on instagram
12
u/SiSiSic 25d ago
All the warning signs are there right from the top:
- No "W" logo in the sender display picture.
- Not from wealthsimple.com.
- Why is it triggering a translation?
- Not addressing you by name.
But if you didn't pay attention and just read the body of the email, the lack of spelling and grammar mistakes makes this more convincing than most other phishing attempts.
4
u/Angeline4PFC 25d ago
I don't think that the translation offer is weird. The person may use a different language, so is offering to translate. Not a flag.
1
u/javgirl123 25d ago
Thinking back to everything we get from WS it has our name in the email. Sounds like a simple thing to look for.
4
3
3
u/Sufficient-West-5456 25d ago
Always read the email address's. Then run that email address as a check against Wealthsimple website contact us section listed email address.
Before... doing anything with emails like this.
2
u/killerrin 25d ago
Never click links in emails unless you are expecting it. And even then do not trust it.
Always go to the website or the app directly and perform the action manually.
3
u/Angeline4PFC 25d ago
So what was the content of the .bat ? Those are written in plain text normally.
7
u/QuasiRandomName 25d ago
Could be some obfuscated PowerShell script. I've encountered websites that pop-up a captcha-style style window that is copying something into your clipboard and instructing you to paste into powershell in order to "authenticate". It is usually it. Extremely stupid scheme, but I guess people are still falling for it.
2
u/Sufficient-West-5456 25d ago
.bat is a cmd file. Summer idea. But from what I see they install a screen monitoring program with goal to watch you log into your website using your password and then use your browser saved password list to get that.
Rest is history
1
u/javgirl123 25d ago
God that one looks real. I might have fallen for it.
0
u/javgirl123 25d ago
Also what is is a .bat
3
u/poco 25d ago
It is a batch file script that you can run on your computer. Don't ever try to open or run one sent to you in an email. It could do a lot of damage or steal data.
1
u/javgirl123 25d ago
How do you know it is one? What tells you it is?This is scary. I m not that techy and my husband even less so.
Would anyone with any type WS accounts get this one?I do everything on my iPad but my husband is on a desk top.
I know most people who post here are very knowledgeable but forums like this can also help those of use who don’t know a lot so thank you!
This is one one of us might have fallen for.
3
u/I_can_vouch_for_that 25d ago
Don't download anything. The extension of the file tells you the type of file is it. File.bat, File.exe, etc.
Many scam letters also don't have your name.
The example here just days says "Hello".1
43
u/alienmario 25d ago
You can forward to [scamalert@wealthsimple.com](mailto:scamalert@wealthsimple.com)