Common phishing scam patterns spotted on Carousell
Phishing scam is a type of cyber attack where the scammer pretends to be a trusted organisation or person to get you to make certain actions that will allow them to steal your personal data and/or money. This can occur anywhere, from social media to banking, and even online shopping.
Types of phishing scams:
1. Email scam
Tips to stay safe:
- Carousell will never ask for payment, order confirmation, or card details via external sites or email.
- Do not share your email address with scammers
- Always check the sender’s email address: Emails from Carousell always come from @carousell.com or @thecarousell.com
-
All Carousell websites will end with carousell.com, carousell.sg, carousell.com.hk, id.carousell.com, carousell.com.my, carousell.ph, tw.carousell.com, carousell.app.link, carousellluxury.com. Scammers tend to disguise links as "carousell.<extra text>.com", such links do not belong to Carousell.
Examples of fraudulent urls that do not belong to Carousell:
- carousell.quick-funds.in/266780736
- carousell.payportal-sg.com
2. QR code scam
Tips to stay safe:
- Carousell does not send QR codes for processing payments.
- Other than on our own website (http://carousell.com/) or links found in our Help Centre, we will never direct you to other websites to key in your personal information, bank accounts or OTPs.
- All Carousell websites will end with carousell.com, carousell.sg, carousell.com.hk, id.carousell.com, carousell.com.my, carousell.ph, tw.carousell.com, carousell.app.link. Scammers tend to disguise links as "carousell.<extratext>.com", such links do not belong to Carousell.
-
Examples of fraudulent urls that do not belong to Carousell:
- carousell.caroupay.we/82930113
- carousell-protection.sg
3. Account breach scam
Tips to stay safe:
-
Check the sender’s email address: Emails from Carousell about your account always come from @carousell.com or @thecarousell.com
- All Carousell websites will end with carousell.com, carousell.sg, carousell.com.hk, id.carousell.com, carousell.com.my, carousell.ph, tw.carousell.com, carousell.app.link. Scammers tend to disguise links as "carousell.<extratext>.com", such links do not belong to Carousell.
-
Examples of fraudulent urls that do not belong to Carousell:
- carousell.verify.in/78930045
- carousell.accountlog.com
4. SMS scam
Tips to stay safe:
- Carousell will never send SMS leading you to an external website
-
All Carousell websites will end with carousell.com, carousell.sg, carousell.com.hk, id.carousell.com, carousell.com.my, carousell.ph, tw.carousell.com, carousell.app.link. Scammers tend to disguise links as "carousell.<extratext>.com", such links do not belong to Carousell.
Examples of fraudulent urls that do not belong to Carousell:
- carousell.receive-funds.in/266780736
- carousell.protection.com
5. Shipping scam
Tips to stay safe:
- Keep your chats within Carousell
- Phishing sites may trick you by including "carousell" in their url, such as carousell.lalamovetoday.com or carousell.pay.com. Those are not official Carousell websites.
-
All Carousell websites will end with carousell.com, carousell.sg, carousell.com.hk, id.carousell.com, carousell.com.my, carousell.ph, tw.carousell.com, carousell.app.link. Scammers tend to disguise links as "carousell.<extratext>.com", such links do not belong to Carousell.
Examples of fraudulent urls that do not belong to Carousell:
- carousell.lalamovetoday.com
- carousell.singpostfast.sg
6. Viber scam
Tips to stay safe:
- Fake customer service involves pretending to be a legitimate representative of a company. The deception can lead users to provide sensitive information such as personal details.
- If individuals encounter fake customer service it is important to report it immediately to the concerned company. This helps the company to take action against such deceptive practices.
- Do not entertain any message from an unknown person/number and ask for any sensitive information.
If you spot any suspicious activity or users on our platform, please report this to Carousell immediately through the ‘Report User’ feature that's available on both the web and the app. Our team will review these reports within 24 hours from when it's reported.
To understand more on how you can protect yourself from these scam tactics, you may visit this article for more details.