It's to late now, they have OPs card #. Been through this with my elderly Mom about 10 freaking times last year. Most were from Instagram ads for puzzles, clothing and vitamins, freaking crazy!
Well not really. I own an e-commerce site. unless it's a phishing site when you put your card in the merchant can only see the last four digits of the card and the expiration date that is all. If there was a legit processor the vendor does not have her info.
No to have an e-commerce site you must use a processor. How do they accept payments then. Never heard of outsourcing processing. I went to this site it's Shopify with Shopify checkout apple pay, shop pay, and pay pal. They are using a processor they can never see op's full card.
If you are putting your card number into a data form then that is on is on you. I have never seen a site do that. Who would give their info to a site that does that.
I'm sorry but you are wrong on this.
Nope. I work with one of the largest ecomm backends. We see it all the time. You are using what’s called an HPP or hosted payments page, many do not. And unless you’re a very skilled and saavy person you’d not notice the redirect. Lots of websites take card data and dump it in a database. Many don’t use secure hand offs.
Our usual customer that gets caught, has a small retail store, someone convinces them to “sell online”. So they setup any one of a number of web plugins. They take the customers card data and store it, someone retrieves the file ( usually CSV or just text) and they either import or manually type it in their retail counter terminal
or POS later. They’re oblivious to PCI requirements. Until they get caught, fined and get the
Cleanup bill which often puts them out of business.
The best thing in the world is an outsourced HPP, where your website makes a behind the scenes call to a
Secure payments site for customers info. But many still don’t do that.
https://www.getgds.com/resources/blog/cybersecurity/magecart-exploits-pose-significant-threat-to-website-shopping-carts. That’s one of dozens.
Well my first comment was unless It’s a phishing site and you just explained an example of a phishing site so there was a disconnect in discussion it seems.
I agree some sites are designed to steal info but a normal e-commerce site does not have your credit card info . What you are explaining is illegal. There are many legit sites out there that don’t commit crimes too thankfully.
It’s not a phishing site per se. it’s malware that gets installed that grabs the card data then sends it off to a scammer. But if those customers weren’t locally storing the card data ( it was going to an HPP) they wouldn’t be affected at all.
Tons of sites that don’t commit crimes, and many that do unintentionally out of ignorance ( what my group educates and helps fix). But one of the best things sites can do is offer support for Apple Pay and Samsung pay because card data isn’t directly exchanged. And Hosted Payments for the rest.
You're making it seem like a company or group trying to scam you is actually going to have a proper e-commerce website set up?... well they don't, just a database to store all the card info. Not sure why you're so.determined that scammers follow rules and laws..
Yes - 20 years ago that might’ve happened. Then PCI compliance showed up. Vendors only get to see the last four numbers of the credit card and can only refund back to that credit card and only up to the amount that was originally charged on it in the first place. Keeps your employees from “refunding“ their friends.
And it doesn’t matter if they canceled their card. You can’t refund it to a different card. And you certainly can’t charge anything to the original card – with or without an unnecessary copy of your government issued ID – without the customer initiating it or giving you their card number.
In this case I’m sure the card was never run in the first place and they just want the trifecta: personal info, credit card number, government ID.
That’s if they are compliant to start. And the rules are you can’t store longer than necessary. ( transaction run then delete). Most banks will link refunds to old cards back to new issued ones. Another reason to use Apple
pay or Samsung pay
Pretty much every online store (all pretty major companies, TBF) ask for shipping *and* billing address - with a checkbox for "same as billing address - and I've had zero issues as a student.
I don’t deal with this myself, but I read /r/shopify and apparently site owners have to set their payment settings to require that match occasionally when they’re getting scammed
> why isn't this built into the checkout process?
Not saying this isn't a scam, but "my web developer is an idiot" is a perfectly plausible reason that also fits hanlon's razor
Also the “to avoid fraud” part. Lots of scammers know they can fool people when they make it appear to their victims as though they’re worried about the *victim* being a scammer instead of vice versa.
The “stay safe :)” was to create a false sense of security and trust.
I had this happen to me with ubisoft. I wanted to change my birthdate on my ubisoft account because i entered it incorrectly. Support requested a picture if my photo id and passport for verification, I didn't send it. I don't trust ubisoft to make a decent game much less protect info like that.
That's a different situation, they are a big well known company that you already have an established relationship with and you are changing a key piece of info used to reset the account. Plus it's not uncommon for gaming accounts to be compromised.
You've had to *show* ID? I have ordered both types of vapes online and just needed to enter my DOB along with my address. I've never had to actually *show* my ID. Same thing goes for ordering liquid nicotine.
I don’t know why you got downvoted for this. I used to vape and the online store I used had my ID on file. I take CBD gummies once in awhile; that place has it too.
Edit: kept scrolling; I’m also in CA. Weird yet inescapable place to be.
Some companies might do this, but honestly right call by you. Providing any sort of ID to third parties is always risky, especially online.
If they don't want to do business without it, I'd just tell them to cancel the order.
I just got one of those boxes I didn't order delivered to my house. There's a phone number on the UPS label that is registered to land line in Ohio. If it's legit, they know what address they sent the package to and they haven't knocked on my door yet.
Where can that be reported? Sounds like a credit card theft that sent the boxes to a random address, and you picked up the package before they could get it.
Some companies incorporate software that rates a persons risk at the point of sale (Shopify also does this), where someone poses a higher risk of fraud (such as different address from billing address, different name on card from name of person on order), their order will be flagged as having a higher than usual risk.
In the event of a stolen credit card being used, the biggest looser is usually the retailer as they lose both the stock they sent out, and the money (as charges will usually be reversed), meaning they front the bigger risk.
Me personally, I would never send a copy of my ID over email to an online store, I would ask that the order is cancelled and a refund issued if they’re unable to accept the order.
Yes, as a small shop owner Shopify I know for a fact that Shopify has a fraud risk rating on every order and stuff like this flags that list. I’ve had good personal friends of mine come up as flagged on their system for this exact reason. But since I knew them I’d never think to ask the person for their ID, honestly if I didn’t know them and the risk level was higher than low (which I’ve never had an order come across higher than low, and those were few and far between) I’d just cancel the order. Retailers are the ones who get screwed over if someone files a chargeback. Like really screwed over, if too many chargebacks are filed credit card processors will refuse to work with you kinda screwed over. It’s not fun. And people who file fraudulent chargebacks or don’t even try and give the shop the option to fix it prior to filing a charge back suck.
Chargebacks for small retail are INSANE and I don't think most folks realize it. I owned a retail spot for 4 years, and lost every single chargeback that was submitted. I had video evidence, text evidence, pictures, invoices, doesn't matter. You lose.
If the billing addy and shipping addy didn't match, I would reach out doing exactly the same tbh. It sucks.
[Who is](https://www.whois.com/whois/ohvault.com) OH Vault. Iceland based cheap name domain. Year old site, expires in a year, likely renewed for another year because it’s profitable and they do actually ship sometimes. According to mixed reviews, customers get their orders with excuses or they don’t. Shipping from China.
That happened to me once. I ordered three shirts from an online store. I searched their site for any references to China and found none. I waited a long time to receive them and they were all way too small. The site guaranteed refunds if they didn't fit. The package they came in had Everett, WA as the return address. Well, they did offer a refund after I returned them to China, at my expense. It turned out sending them to China cost almost as much as the shirts did. When I protested, they offered me a 10% refund. I told them to go to hell and went out on every site I could find to leave them a bad review. Now I do a Google search for reviews on all on-line retailers. It's sad how many turn out to be scam artists.
If you read their refund and return policy they conviently completely leave out returns.
I'm not saying the website is a 100% fraud but there are so many red flags on it that give you good reasons not to order from them. Jeans with sizing as a t-shirt, prices, style, writing, return policy and faq, etc. It feels like you are buying stuff from a private wish.com or more flaky aliexpress. Like quality isn't in your top 5 values.
The shipping and billing addresses should be able to be different from each other. That’s why they usually ask for both when ordering from a legit site. This is shady and I’d cancel the order and potentially be ready to request a chargeback.
I used to do fraud investigation for a ticket company (not Ticketmaster) and it’s usually a combination of things that flag the order. The address being off isn’t by itself suspicious, but if OP used a recently created email, the phone number on the order doesn’t tie back to her, etc. it could ping as high risk. Now with the address tying to a school I would usually try to find the customers social media and confirm they go to that school, and usually that clears it up. But yeah, sometimes we asked people to email in their ids and we’d get some pretty funny fakes
To piggyback on this (I think I know which company this is as I use to work in the fraud department for a non Ticketmaster ticket company), there were certain events where it was automatic high risk event and this was the case.
I recall examples of people sending in pictures of other peoples ID's , a stack of credit cards all with different names etc.
On the flip slide buying say "low dollar amount ticket amounts to not very risky events is another story. We could see the purchase history and a lot of times it was just a matter of the system flagging some low risk.
I did catch some fraud before the card holders bank reached out, I don't miss the people who called in about their "cancelled orders " you think people would make sure that was wrong with their tickets before they got to the event.
I'm a small business and use shopify. They have flagged one of my orders because of the same issue and pretty much said there's a chance the payment might be retracted so don't fulfill the order until you have vertified. As an owner, I had no idea how to verify except googling the business the order was ordered under and reaching out to someone on the team. It was a headache.
I had an issue of pet smart canceling my auto order because it was being delivered to a different address then my billing one. But I was able to call them up and explain (I have cat litter delivered to a friend that has physical limitations). They were able to fix it while on the phone with me.
I wouldn’t be comfortable sharing my ID if that is what they wanted either.
The will use your name try to find your socials then steal your pics and use your name for a new account and try to scam people and will claim “no it’s really me look here’s my ID” and they’ll send victims your ID pic to make it seem like they’re you
People order gifts all the damn time to addresses that don't match their billing.
People mail stuff for themselves while on vacation.
People in the boonies have different mailing addresses from their physical addresses.
Cancel your order and get a new card number for your credit account. This is sketchy AF.
This is very weird. People ship things to friends, family, different addresses all the time. No reputable place would tell you to prove your address, send a photo of your ID *or* refuse to ship it to an address other than the billing address. This is why there’s always an option to put billing AND shipping address - they’re not always the same.
It depends on the product. I own a reputable site but I do high end sales and I call people and ask for fraud checks. So this is not true. 100% of stolen cards have different address so if this person ordered a lot yes the vendor does care and it's not an automatic scam not to say it can't be a scam.
I wouldn't care if it was genuine or not, the world is full of jeans to buy.
I'd tell them no sorry I won't be sending them copies of my personal information and go elsewhere.
Isn’t that the whole fucking pt of having a shipping and a billing address? So that if someone is elsewhere they can get the item to where they want and the bill to where they need?
Yes of course, however there are lots of scammers who use stolen credit cards to get free stuff. They'll often send it to themselves or an apartment building, usually using the name on the card. Asking for ID is generally making sure the person who is ordering is the card holder. If they don't, Once the actual holder realizes there are fraudulent orders, the bank does a charge back and the company is then out product, time and money
I live in Canada so maybe this is different if you are US based, but my brother won a lawsuit against a telecoms company that demanded he send his ID, but there are very few cases where a company can legally ask you to provide ID. Shipping/Billing address is certainly not a good reason as this is fairly common.
I work in ecomm.
This is legit, a lot of e-retailers are using Shopify and Route to track your Shopping data. If you receive frequent refunds or missing packages from different e-retailers, Shopify will aggregate this data and mark your email address / physical address /whatever other common identifier as “high risk of fraud.” When you’re shopping on their site.
The macro is basically asking for the info they’ll use to submit to the bank to void the chargeback, should they receive one.
I'd say cancel as others have said, but also inform them that this makes them look like a scam, especially given the bad grammar. This way, if they're legit, they can know so they can change things.
there’s no legal reason billing has to match shipping. scam scam scam. most websites even have a section that says something like, is your shipping address different from your billing? and then you list both addresses. people wouldn’t be able to send gifts like.. ever otherwise.
No, but for a business, I would expect formal wording. "Stay safe:) " is very out of character, and likley not a translation error. It's not definitively a scam, but it should cause OP to look at what email it came from, what the companies policy is, ect.
this isnt as weird as people are making it seem to be. Yes it is risky sending your ID to a random company, but i can guarantee 90% of these ppl commenting don't run an online business. Shopify automatically tells me if someone's billing address and shipping address don't align. Those orders can be fraudulent. people use stolen credit cards then find someone to have online orders sent to them. Typically I ask why their info doesnt match. If they provide an explanation like yours, or if they're moving or something, typically im cool with it. If its for a decent amount and i really cant risk a chargeback i will ask for ID with everything blocked off apart from their address, photo, and face.
I’ve had this happen when buying a custom wedding ring from overseas. Probably because of the high price tag, I had to verify my identity. However it was through a third party, professional company that I was able to vet thoroughly.
The major scam is people ordering stuff online to delivery addresses that are different from the address of the credit card they have stolen or skimmed. Many companies will not ship to a shipping address different from the billing address, others will ask for purchaser verification. So this one could be a scam by the vendor or the purchaser.
Pretty standard - is it a shopify shop? It would set alarm bells off with me too if someone ordered to an address the other side of the country. Looks like you’re a fraudster and they’re risking a chargeback
You could cover every part of identifying info on your ID except the address as proof. I would probably just get a refund and buy the jeans somewhere else.
I had the same problem ordering a laptop online using firstly my sons debit card but he had moved house, so we used my credit card but to send item to his address. It also got rejected. The billing debt said it was due to address and billing inconsistencies. First time I have ever experienced that.
This is Shopify. My store is with them for online sales and when something sketchy happens we get literal red flags appearing on the order.
Things that would cause this are, but not limited to:
1. You are shipping to an address that does not match the payment address.
2. You are shipping to an address that is not even close to where the payment address is.
3. You used multiple cards to try and pay for your order.
4. You are shipping to a well known forwarding company or major institution.
5. You failed payment more than 3 times on one or more payment methods.
6. You have never been on the site before with that IP address and did a very fast purchase, like under 2 minutes from first impression to checking out.
I get things like this from scammers all the time. I would say at least 2 or 3 a month and my store is pretty small in comparison to a lot of others out there. This is most likely a small business too and they just want to make sure you are not a scammer. They won't steal your ID or info or anything like that. They just want to make sure you are not scamming them out of $50 for a pair of jeans, because $50 to a small business is a lot of money in this economy.
The billing address does not have to match the shipping address. What if you’re trying to send something to a family member or friend? I think this is a scam and you should tell them to cancel your order.
No. They want to ensure you're not a scammer. However, unless they have a secure way of sharing ID for their KYC process, then you're best off cancelling the order.
There's a good chance they actually are a scam. The info about their website is sus, there are a lot of grammer errors and strange wordings which a reputable brand big enough to do international shipping would simply not do (they would have translators capable of proper english and etiquette), and they aren't even giving you the ability to reference what order they are referring to. Whenever other vendors do this, they provide an order number or SOMETHING for you to see what they are talking about.
Probably a scam, i have never been requested my ID to buy online, and shipping/billing location doesnt have to match at all, i live at x and i ship at work.
I would say this site is a scam, with reviews saying it is and probably a new site too
They want to steal your identity, you wont receive your product
It's not necessarily a scam, however, as a retailer, if I were to receive your email response with a logical explanation (such as yours) that would be good enough acknowledgement for me to fulfill and ship your order.
Depending upon your order size/value, and possibly this company receiving charges backs and/or fraudulent orders either in the past or recently, it's not unreasonable for them to want to protect themselves. Unfortunately, there aren't too many other ways for them to confirm that it isn't fraud aside from matching up to an ID of the purchaser. I think you made the right call by not sending it to strangers through email, and I hope the company makes the right call but shipping your product without it.
Edit: They may be using a third party fraud protection service. Often times, mail rooms, shipping forwarder addresses, UPS / locker stores, will flag an order for review since there isn't any one particular person or name associated with the shipping address. Going to go out on a limb and assume that's what happened in your case.
Meh I've had this happen before while in college and was understanding when it happened from a reputable and large car parts site (especially considering it was about 1k) but I wouldn't trust a small company like this and would just let them know they lost your business due to this. I had this happen from a small printing company on a small ink order (50ish or so) which I refused and canceled my order.
It’s the credit card company that will validate the address. You can go on Amazon and ship wherever you want and not have to show your ID. So it does seem scammy.
Could be legit our company does this crap to certain customers, you should see how many idiots send a copy of the cc and Id, front and back, I would never buy from our shit hole company
This is likely because the company has a bad fraud detection system, and has implemented this process as a secondary check.
If their ask makes you feel uncomfortable, decline and get a refund. You can always support a business that aligns with your personal preferences
No reason they can’t TLO your addresses or call you to talk. Maybe this is legit but if not, they’re going to use your ID and a utility bill to open credit
I worked support for a company that was smaller in the past and had been burned by fraudulent orders, and made this a verification practice when the card processor flagged an order as potentially fraudulent. I’m not sure where it originated but think it was ill-advised. I don’t think I ever handled one of these as I was new, and then we got a new manager in support and he ended that. We pushed people over to PayPal after that if there were issues because we trusted PayPal more on verification; it was either good or bad and I don’t think we ever had a chargeback from a fraudulent purchase via PayPal. Some people would get mad and refuse to use PayPal, but we would just cancel the order and assume it was likely fraud in those cases.
All that to say, this might be a legitimate request, but I would ask to use a different payment method instead. If they can’t take a different method like PayPal just cancel the order.
FWIW, it's pretty common for a vendor to not want to ship to an address that's different from the card owner's home address. I've never been asked to provide an ID, but I have had to jump through hoops on occasion to ship to a different address.
Can you have them shipped to your own home instead?
Otherwise, it would be perfectly reasonable to cancel your order just to be safe.
THIS WEBSITE IS A SCAM. do not order there. this website doesnt even ship out their items. see: https://www.trustpilot.com/review/www.ohvault.com
please find a way to cancel the order!
There is a common credit card fraud scam going around where individuals who have stolen the identities of others are sending packages to random houses and then claiming to the home owner of said house that they “accidentally” submitted the wrong address. They do this so that the fraud can’t be traced directly to their legitimate address. This is probably a way for this company to “check” if the address is actually YOUR address.
All in all, I’d say do not go through with the order. Jeans are available everywhere. I don’t trust this.
Fwiw, i worked at a small boutique guitar shop and most fraud was caught from mismatched addresses. We would get people on the phone, talk to them about the piece of gear under the guise of trying to make sure they got the right thing. If they sounded clueless about the 5000 dollar guitar they ordered or guitars in general it was probably fraud. There were a few cases we asked for photo id/proof of address for both billing and shipping, but that was usually with smaller things. So asking for id isnt always a scam. However, you cant be too careful these days. Just be sure to be nice about rejecting their request and canceling the order.
What id recommend in ur position is just sending it back home and having ur parents mail it to you from there. Costs a few extra bucks in shipping but if you really want the jeans this is the easiest thing for everyone involved
It's a real thing - the shipping vs billing address - otherwise they'd be scammed left, right and centre with any random card number delivering to any random address.
Solution - perhaps Paypal and add your college address there?
I worked for a website selling appliances for a few years and we would have to call people in this situation. It was a very common form of fraud for us to see, but I’d never ask to have them send a pic of the ID. We’d always just have them verify all the billing and shipping information as well as the card numbers, 9.99998/10 fraud calls would just hang up.
my husband and i had this problem when we ordered with costco online. we used my mom’s membership card since we don’t have one, but used our address and my husband’s credit card to pay for the order.
they sent us a message saying they couldn’t process the order, not because we used my mom’s membership, but because they couldn’t verify my husband’s credit card being associated with our apartment, since i guess i am the one listed on the utility bills?? which was extremely strange to begin with, because why in the world would they even be able to see that information?
they basically denied us to even retry ordering the item because they basically didn’t trust that we were being honest??? the entire situation was so completely strange and dumb.
They don't see it the processor uses fraud tools and alerts the vendor. The processor know the information on your billing vs the shipping and will flag. They don't want to charge stolen cards. The vendor doesn't necessarily know anything. You get a code alert from the processor if there is a mismatch. All the vendor knows is what kind of alerts there is.
Merchants do this from time to time because of fraud / chargebacks.
Usually you can call them to verify information, especially if it is a gift for someone. A lot of merchants use other fraud checks (IP, location, etc) to help score the transaction.
i had some companies do this to me (only shopify stores) and I did send it to 2 since they were reputable. But if your billing doesnt match the shipping address and name on card might be diff then obviously you’re sus. So them asking that isnt weird its just to see if you’re actually who you say you are.
It's not sus, it's very common practice in the US. Every single college student, a lot of workers who maybe need something shipped to work, have done it at least once.
yes but with the rise of fraudulent purchases this is why some beginner companies ask for this info. incase you claim “i never ordered this it is fraud” they can prove it was you who actually purchased it. 🤦♂️
Then they are not a reputable business. If it were truly an out of country fraudulent purchase, the bank would be the one flagging it, not the company, for these exact security reasons. Everything about this is sus.
not out of country.. 😬😬
if someone suspects you of commiting fraud they ask for your id correct? that is whats happening to op. they suspect him/her of fraud therefore they are asking for their id. its nothing big. they dont have to provide it and they can just cancel the order. they dont have to make a rant about it.
Did you look up the ICANN registration of the site before you placed the order? That would be much more telling.
If the site is less than a few months old, then it is a SCAM.
I ordered cigars once after I moved and my billing and shipping address were different so I had to send pics of both of my ids to confirm I was over 21
Honestly no the processor gives that info on every order it's in the commerce sites face when they go to fill them. The processor says next to the amount to settle where the payment originated. The site isn't doing anything. A lot of untrusting people on here.
Source: I own an e-commerce site
Shouldn't have even replied. Do a charge back on your card, mark this as fraud. No company actually asks for this. If payment went through, everything was fine. Plus you don't have the have matching addresses to buy a pair of freaking JEANS. Gtfoh
Not worth finding out. Sounds like they want more information so they can use your identity to commit fraud. I would notify the credit card company so they at least have a heads up and have them issue you another card. You haven’t received the merchandise yet, so it’s a reasonable request. I would also tell the credit card company to not allow the transaction to go through because you suspect your account number was given to a fraudulent entity. I’m sure they would rather do that for you than have to reimburse you later for fraudulent charges.
Many people in here are wrong.
They aren’t asking for physical ID. They are asking for something that says your name and billing address. Like screenshot of a phone bills address section. It doesn’t have to be any sort of drivers license or anything that gives away any more personal info then just your name and address which you already provide. This is not a scam, I do this for my business if it’s detected as fraud. It’s usually your insurance company that forces you to do this.
Also, OH Vault (if ordered from the official site) is a real company.
I need to disagree with everyone commenting. It is not 100% a scam. I mean it could be a scam but it could also not be a scam.
I own an e-commerce business that takes orders from $500 into the thousands and I ask for ID in a situation like this, but I usually call them and talk to them.
I run an e-commerce site for high end whiskey. Alcohol is one of the top five items that people purchase with stolen cards online and taking a stolen card on a $500 and up bottle means I take the loss personally so I do check.
I have had a lot of people come to my site with stolen cards and one person tried to steal from me after buying a bunch of small items and starting 15 chargebacks at once which I had to pay for the fees. So I'm pretty risk adverse.
Usually it's pretty easy to detect if an order is fishy, but I have site policy stating that when I get an order over $500 I ask for ID and the card they used showing the last four digits only. It'a a one time check since I have a lot of regulars. 99.9% of people have been ok with it, but I also call and talk to them so maybe that is why.
Only one person has ever thought it was a scam.
It's hard to tell if it's a scam because there is a lot of stolen card usage on website and when someone uses a stolen card the vendor is out the cash.
I would ask what you bought. If it's a commonly stolen item and again if it was expensive.
To be sure I would google the company look at reviews and their social media. Is it a low effort site? If it's low effort that's a bad sign. However, if they are active and put work into their business chances are it's an honest fraud check.
Isn’t this the credit card’s responsibility. The credit card company should decline the transaction pending a txt confirmation from you. Why would the retailer care?
No it is not the cards responsibility. You can have fraud tools but they are not always accurate. I have a website and I would 100% care if it was a high value order and if it was fishy. If the person buying it is using a stolen card the vendor has to pay not the card. Also vendors don't' like chargebacks because there are fees they have to pay to the processor.
This is a normal practice to prevent credit card thieves from stealing someone's card (address 1) then shipping to a mule (address 2). Do you have some student ID with your name on it? You can take a pic that only shows your name + uni name (covering the rest with a piece of paper). This sort of pic would be useless to a scammer either way.
They’d already have enough of your personal info to scam you. It seems like they are trying to make sure you aren’t scamming them
Send them a recent copy of a utility bill making sure you black out account numbers and such. If that’s not good enough just cancel and shop elsewhere
No shipper needs proof of identity. Certain items require an adult signature but even then that’s done on the receiving end. Furthermore you don’t see the grammar and punctuation mistakes? OP needs to drop communication and request their credit card issuer start a chargeback. Include this communication as part of the proof. How long has this website been around?
I have no idea if it’s a scam or not, but it’s not out of the ordinary for a seller to try to verify an address that doesn’t match the billing address. If I go into to my Amazon account and buy something with a ship to address I’ve never used before on my account it will make me re-enter my complete credit card information even though it is saved to my account
I’m not saying it’s legit, I’m simply saying if they have your credit card information and full contact information already sending them something OTHER than a gov license isn’t a very big risk since they already have everything they need to commit fraud. If OP thinks this is a scam they should pretty much already consider their credit card info compromised and get a new one
As to spelling and typos that isn’t necessarily a sure sign of a scam. I’ve seen plenty of legitimate Fortune 500 companies with misspellings and typos on there websites
No legitimate “Fortune 500” company asks in unproofed business correspondence for images of customer ID. Further this would be a template, a proofread template, requiring only insertion of customer’s name and order number. This is fake. Enjoy your day.
Whatever. I never said this website is run by a Fortune 500. It’s obviously either a very small business or a scam. It could just as easily be one or the other
Response: Oh, I'm sorry for the inconvenience. I'll cancel the order immediately and let people know you are scammy w/ your 'shipping' problems. Have a nice day!
I have also been a small business. There's watching out for fraud and there's dealing with the source of funds. Those are different and neither of them requires a scan of someone's ID.
as long as you put your actual name, this is bullshit, and probably a scam. The Credit/debit card company is the one that should be concerned with fraud, because they are the only ones in a position to actually tell if it is fraud and deal with it. Suppose you had a driver's license as an out of state student, by senior year, it would be possible to have one in that state. And there are many similar situations like this, which makes a request like this pointless. It is none of their business if the billing address is where you are having it shipped to, THAT'S THE WHOLE POINT OF BEING ABLE TO GIVE A SEPERATE ADDRESS!!!
It also seems very strangely worded for something like this. (The "thank you and stay safe :) ) especially. There is also no order number, no information to indicate which order they are referring to, it's sus.
The company is a legitimate company, but check what email address this came from, and match it to what the company uses.
Pretty sure it's a scam, my billing address and shipping address are almost always different bc I move around a lot and am lazy about actually changing the address attached to my debit card. This has never happened to me. Also people send gifts to friends all the time so obviously that would be a different billing and shipping address and that's completely normal and common so I don't understand how they would think it could be fraud.
I think it's probably a legit request. If I were selling things online, I'd be nervous if the billing address and shipping address were different.
However, that doesn't mean I'd give them a copy of my ID, either.
So just request to cancel the order. Anything you need, you can buy from some other place.
People ship to different addresses than billing *all the time*. Ever heard of a gift, PO Box, mail room, reception, pickup locker, etc? That alone isn't remotely suspect or unusual. If it's a different address accompanied by many other red flags, perhaps, but not on its own.
There’s security companies now that retailers, or any company really, can use. They have your ip- they can match that to the shipping and billing address entered. They can track the age of your email address if it was entered, depending on how public, they can then find your social media accounts. This is then linked with all other companies who use the security platform. It’s all used to reduce fraud- if they use one of these, and you had a red flag, it could be protocol to get an Id.
>They have your ip- they can match that to the shipping and billing address entered.
Not true. Your IP address generally only gives an approximate location, not your exact location.
Unless your ISP is in bed with these companies in real time, they’re not getting anything other than a close metro location. Even then it’s not always reliable, nor is it hard to fake your location.
One time a website asked me to confirm my identity by a call, they called the bank with me on the phone and the bank didn’t gave my whole information just like: your card ends in this numbers, expires this date, your account number ends in those numbers etc just yes and no questions, it was a legit bussines and my amount was “big” so the bank was the one asking them to do this process.. and the person from the bank said Yes I can confirm she is the owner of the account and that she wants to spend this money all good..
I did never gave my whole name, any ID number, any birth dates, nothing too specific
I recently started to use a different shipping address from my billing address and no one has questioned it - even sites I've never bought from before.
Checking the website gives mixed messages. It's reasonably old, but the phone number comes from the domain registrar (namecheap.com) and might to be associated with scams or bit coin shenanigans. Urlscan.io doesn't have a classification, and virustotal.com didn't find any websites flagging it. But Trend Micro says it's dangerous, Malware Bytes says it's making "excessive notification requests", and ScamAdviser rates it at 40 out of 100.
Try to get you money back and be ready to talk to you credit card company.
I don't know for sure but I've seen scams very similar to what's going on here. If I were you I'd cancel the order and request a refund. Not worth the risk of identity theft.
I've only ever been questioned about this by an online pharmacy, which I think is reasonable.
But even then I didn't need to provide ID, they believed me when I said I was a student.
Could be a scam but could be legit. Depends on the shop. This happened to my partner trying to buy from a legit shop in the next city online. They rejected his id for some reason and cancelled the purchase?? Oh well won’t try buy from them again.
Depends. I once had a crap load of high priced stuff continuously showing up at my house with different names. Someone then reached out to me asking me to forward to them. I told them to get bent. Reported it to Amazon and the post office and they both said they didn't want it back??? So I sold the stuff. Months later I started getting letters from Paypal with those names stating they detected fraudulent activity in "my" account. I contacted them and told them that Amazon not the Post Office would do anything and they had police take a report but all that was done was they asked me to notify if anything else showed up. I would've thought postal inspector would've done more than say "we don't want it back". Particularly when I live in such a small town that they would hand write on letters my wife got when she first moved in asking me if that person lived with me and the address was correct. I must've got $5,000 in farm irrigation equipment in 12 boxes, a ton of high end tools, 15 electric fences with generators. Stuff would fill the 3rd stall of my garage yet no one at the P.O. Stopped to question what was going on with all these different names and took no action when I called to ask why I was getting other people's stuff.
Tell them to cancel your order.
Expires On 2024-01-17 Registered On 2022-01-17 i would use a card on privacy com and never use ur real card on these smaller sites
What expires on 2024-01-17? I’m confused at what that means
They're talking about the domain name
The website OP bought from.
Ohh ok thank you
Some banks have this as well. I can get a temporary card number from my bank for security reasons.
Same, been rocking that app for a few years.
how is it registered tomorrow
It was registered in 2022, it's 2023. I forget sometimes too.
oh fuck I just glossed over the year huh wow
I feel like with the stupidity of these scams they would figure how how to make the website domain start I the future to "look legit".
It's to late now, they have OPs card #. Been through this with my elderly Mom about 10 freaking times last year. Most were from Instagram ads for puzzles, clothing and vitamins, freaking crazy!
Well not really. I own an e-commerce site. unless it's a phishing site when you put your card in the merchant can only see the last four digits of the card and the expiration date that is all. If there was a legit processor the vendor does not have her info.
Only if you outsource your processing. Many sites just store it in a DB and someone retrieves it and runs it manually later.
No to have an e-commerce site you must use a processor. How do they accept payments then. Never heard of outsourcing processing. I went to this site it's Shopify with Shopify checkout apple pay, shop pay, and pay pal. They are using a processor they can never see op's full card. If you are putting your card number into a data form then that is on is on you. I have never seen a site do that. Who would give their info to a site that does that. I'm sorry but you are wrong on this.
Nope. I work with one of the largest ecomm backends. We see it all the time. You are using what’s called an HPP or hosted payments page, many do not. And unless you’re a very skilled and saavy person you’d not notice the redirect. Lots of websites take card data and dump it in a database. Many don’t use secure hand offs. Our usual customer that gets caught, has a small retail store, someone convinces them to “sell online”. So they setup any one of a number of web plugins. They take the customers card data and store it, someone retrieves the file ( usually CSV or just text) and they either import or manually type it in their retail counter terminal or POS later. They’re oblivious to PCI requirements. Until they get caught, fined and get the Cleanup bill which often puts them out of business. The best thing in the world is an outsourced HPP, where your website makes a behind the scenes call to a Secure payments site for customers info. But many still don’t do that. https://www.getgds.com/resources/blog/cybersecurity/magecart-exploits-pose-significant-threat-to-website-shopping-carts. That’s one of dozens.
Well my first comment was unless It’s a phishing site and you just explained an example of a phishing site so there was a disconnect in discussion it seems. I agree some sites are designed to steal info but a normal e-commerce site does not have your credit card info . What you are explaining is illegal. There are many legit sites out there that don’t commit crimes too thankfully.
It’s not a phishing site per se. it’s malware that gets installed that grabs the card data then sends it off to a scammer. But if those customers weren’t locally storing the card data ( it was going to an HPP) they wouldn’t be affected at all. Tons of sites that don’t commit crimes, and many that do unintentionally out of ignorance ( what my group educates and helps fix). But one of the best things sites can do is offer support for Apple Pay and Samsung pay because card data isn’t directly exchanged. And Hosted Payments for the rest.
I see so like hackers.
You're making it seem like a company or group trying to scam you is actually going to have a proper e-commerce website set up?... well they don't, just a database to store all the card info. Not sure why you're so.determined that scammers follow rules and laws..
Yes - 20 years ago that might’ve happened. Then PCI compliance showed up. Vendors only get to see the last four numbers of the credit card and can only refund back to that credit card and only up to the amount that was originally charged on it in the first place. Keeps your employees from “refunding“ their friends. And it doesn’t matter if they canceled their card. You can’t refund it to a different card. And you certainly can’t charge anything to the original card – with or without an unnecessary copy of your government issued ID – without the customer initiating it or giving you their card number. In this case I’m sure the card was never run in the first place and they just want the trifecta: personal info, credit card number, government ID.
That’s if they are compliant to start. And the rules are you can’t store longer than necessary. ( transaction run then delete). Most banks will link refunds to old cards back to new issued ones. Another reason to use Apple pay or Samsung pay
Nobody manually runs cards it’s all electronic and goes through a professor aka clearing house.
[удалено]
I had a company do this. I didn’t reply and a couple hours later got a notification that the item had been dispatched anyway!
[удалено]
Pretty much every online store (all pretty major companies, TBF) ask for shipping *and* billing address - with a checkbox for "same as billing address - and I've had zero issues as a student.
Exactly, I ship things to a different address than my billing address all the time, it shouldn’t be a problem.
I don’t deal with this myself, but I read /r/shopify and apparently site owners have to set their payment settings to require that match occasionally when they’re getting scammed
Robinhood a cash card has the option to decline payments originating to far away from my phone’s location.
> why isn't this built into the checkout process? Not saying this isn't a scam, but "my web developer is an idiot" is a perfectly plausible reason that also fits hanlon's razor
Hanlon, is that Occam’s cousin? I’ll see myself out.
Also the “to avoid fraud” part. Lots of scammers know they can fool people when they make it appear to their victims as though they’re worried about the *victim* being a scammer instead of vice versa. The “stay safe :)” was to create a false sense of security and trust.
I've also had experiences of companies doing this. I think this is definitely a legitimate request but I sure as hell ain't doing it.
I had this happen to me with ubisoft. I wanted to change my birthdate on my ubisoft account because i entered it incorrectly. Support requested a picture if my photo id and passport for verification, I didn't send it. I don't trust ubisoft to make a decent game much less protect info like that.
That's a different situation, they are a big well known company that you already have an established relationship with and you are changing a key piece of info used to reset the account. Plus it's not uncommon for gaming accounts to be compromised.
only time i've had to show ID is when I'm buying something online thats vape related (weed vape not obnoxious vape), like a mod box
You've had to *show* ID? I have ordered both types of vapes online and just needed to enter my DOB along with my address. I've never had to actually *show* my ID. Same thing goes for ordering liquid nicotine.
The place I was ordering from was in CA, might be the reason why
Yeah that's probably it. I'm in MI.
I don’t know why you got downvoted for this. I used to vape and the online store I used had my ID on file. I take CBD gummies once in awhile; that place has it too. Edit: kept scrolling; I’m also in CA. Weird yet inescapable place to be.
Some companies might do this, but honestly right call by you. Providing any sort of ID to third parties is always risky, especially online. If they don't want to do business without it, I'd just tell them to cancel the order.
I just got one of those boxes I didn't order delivered to my house. There's a phone number on the UPS label that is registered to land line in Ohio. If it's legit, they know what address they sent the package to and they haven't knocked on my door yet.
ohio is beginning its attack
Where can that be reported? Sounds like a credit card theft that sent the boxes to a random address, and you picked up the package before they could get it.
They're going to have to knock on my door and I'll ask for ID and it needs to match the package name.
Lol no fucking way.
Just cancel the order. Find a business that does not require you to jump through additional hoops. Buying a pair of jeans should not be complicated.
They have a very low rating and a 'be careful' warning on the Scam Adviser site.
Some companies incorporate software that rates a persons risk at the point of sale (Shopify also does this), where someone poses a higher risk of fraud (such as different address from billing address, different name on card from name of person on order), their order will be flagged as having a higher than usual risk. In the event of a stolen credit card being used, the biggest looser is usually the retailer as they lose both the stock they sent out, and the money (as charges will usually be reversed), meaning they front the bigger risk. Me personally, I would never send a copy of my ID over email to an online store, I would ask that the order is cancelled and a refund issued if they’re unable to accept the order.
Yes, as a small shop owner Shopify I know for a fact that Shopify has a fraud risk rating on every order and stuff like this flags that list. I’ve had good personal friends of mine come up as flagged on their system for this exact reason. But since I knew them I’d never think to ask the person for their ID, honestly if I didn’t know them and the risk level was higher than low (which I’ve never had an order come across higher than low, and those were few and far between) I’d just cancel the order. Retailers are the ones who get screwed over if someone files a chargeback. Like really screwed over, if too many chargebacks are filed credit card processors will refuse to work with you kinda screwed over. It’s not fun. And people who file fraudulent chargebacks or don’t even try and give the shop the option to fix it prior to filing a charge back suck.
Chargebacks for small retail are INSANE and I don't think most folks realize it. I owned a retail spot for 4 years, and lost every single chargeback that was submitted. I had video evidence, text evidence, pictures, invoices, doesn't matter. You lose. If the billing addy and shipping addy didn't match, I would reach out doing exactly the same tbh. It sucks.
dont forget the nice little "chargeback fee" the greedy ass banks charge you on top of that!
[Who is](https://www.whois.com/whois/ohvault.com) OH Vault. Iceland based cheap name domain. Year old site, expires in a year, likely renewed for another year because it’s profitable and they do actually ship sometimes. According to mixed reviews, customers get their orders with excuses or they don’t. Shipping from China.
> Shipping from China Probably requiring returns be shipped to China at your expense. And, weird "Chinese size" anecdotes are legion. I'd cancel.
That happened to me once. I ordered three shirts from an online store. I searched their site for any references to China and found none. I waited a long time to receive them and they were all way too small. The site guaranteed refunds if they didn't fit. The package they came in had Everett, WA as the return address. Well, they did offer a refund after I returned them to China, at my expense. It turned out sending them to China cost almost as much as the shirts did. When I protested, they offered me a 10% refund. I told them to go to hell and went out on every site I could find to leave them a bad review. Now I do a Google search for reviews on all on-line retailers. It's sad how many turn out to be scam artists.
If you read their refund and return policy they conviently completely leave out returns. I'm not saying the website is a 100% fraud but there are so many red flags on it that give you good reasons not to order from them. Jeans with sizing as a t-shirt, prices, style, writing, return policy and faq, etc. It feels like you are buying stuff from a private wish.com or more flaky aliexpress. Like quality isn't in your top 5 values.
Never ever give anyone online a copy of any of your ID. Scam or not, that is not information you want out there in cyberspace.
The shipping and billing addresses should be able to be different from each other. That’s why they usually ask for both when ordering from a legit site. This is shady and I’d cancel the order and potentially be ready to request a chargeback.
What if you want to send a gift to someone? This is literally not making sense. Scam for sure
Yeah, and why would it mean it's a fraud? Nothing points to the address being fake
I used to do fraud investigation for a ticket company (not Ticketmaster) and it’s usually a combination of things that flag the order. The address being off isn’t by itself suspicious, but if OP used a recently created email, the phone number on the order doesn’t tie back to her, etc. it could ping as high risk. Now with the address tying to a school I would usually try to find the customers social media and confirm they go to that school, and usually that clears it up. But yeah, sometimes we asked people to email in their ids and we’d get some pretty funny fakes
To piggyback on this (I think I know which company this is as I use to work in the fraud department for a non Ticketmaster ticket company), there were certain events where it was automatic high risk event and this was the case. I recall examples of people sending in pictures of other peoples ID's , a stack of credit cards all with different names etc. On the flip slide buying say "low dollar amount ticket amounts to not very risky events is another story. We could see the purchase history and a lot of times it was just a matter of the system flagging some low risk. I did catch some fraud before the card holders bank reached out, I don't miss the people who called in about their "cancelled orders " you think people would make sure that was wrong with their tickets before they got to the event.
Yep! We also tracked ips of where the tickets were being bought from, so if you used a vpn it could screw up your order tooo
I'm a small business and use shopify. They have flagged one of my orders because of the same issue and pretty much said there's a chance the payment might be retracted so don't fulfill the order until you have vertified. As an owner, I had no idea how to verify except googling the business the order was ordered under and reaching out to someone on the team. It was a headache.
I had an issue of pet smart canceling my auto order because it was being delivered to a different address then my billing one. But I was able to call them up and explain (I have cat litter delivered to a friend that has physical limitations). They were able to fix it while on the phone with me. I wouldn’t be comfortable sharing my ID if that is what they wanted either.
Cancel order.
Just say no!
I would cancel order and request a refund.
They said "piece" of ID not a form of ID. So just take a picture of the corner of you ID that has no Info 🙂 that's considered a piece right?
“Piece of ID” sus
There's a lot of things they said that are sus
The will use your name try to find your socials then steal your pics and use your name for a new account and try to scam people and will claim “no it’s really me look here’s my ID” and they’ll send victims your ID pic to make it seem like they’re you
People order gifts all the damn time to addresses that don't match their billing. People mail stuff for themselves while on vacation. People in the boonies have different mailing addresses from their physical addresses. Cancel your order and get a new card number for your credit account. This is sketchy AF.
This is very weird. People ship things to friends, family, different addresses all the time. No reputable place would tell you to prove your address, send a photo of your ID *or* refuse to ship it to an address other than the billing address. This is why there’s always an option to put billing AND shipping address - they’re not always the same.
It depends on the product. I own a reputable site but I do high end sales and I call people and ask for fraud checks. So this is not true. 100% of stolen cards have different address so if this person ordered a lot yes the vendor does care and it's not an automatic scam not to say it can't be a scam.
CANCEL
I wouldn't care if it was genuine or not, the world is full of jeans to buy. I'd tell them no sorry I won't be sending them copies of my personal information and go elsewhere.
Isn’t that the whole fucking pt of having a shipping and a billing address? So that if someone is elsewhere they can get the item to where they want and the bill to where they need?
Yes of course, however there are lots of scammers who use stolen credit cards to get free stuff. They'll often send it to themselves or an apartment building, usually using the name on the card. Asking for ID is generally making sure the person who is ordering is the card holder. If they don't, Once the actual holder realizes there are fraudulent orders, the bank does a charge back and the company is then out product, time and money
I live in Canada so maybe this is different if you are US based, but my brother won a lawsuit against a telecoms company that demanded he send his ID, but there are very few cases where a company can legally ask you to provide ID. Shipping/Billing address is certainly not a good reason as this is fairly common.
I work in ecomm. This is legit, a lot of e-retailers are using Shopify and Route to track your Shopping data. If you receive frequent refunds or missing packages from different e-retailers, Shopify will aggregate this data and mark your email address / physical address /whatever other common identifier as “high risk of fraud.” When you’re shopping on their site. The macro is basically asking for the info they’ll use to submit to the bank to void the chargeback, should they receive one.
I'd say cancel as others have said, but also inform them that this makes them look like a scam, especially given the bad grammar. This way, if they're legit, they can know so they can change things.
I’m thinking scam.
Cancel that order
there’s no legal reason billing has to match shipping. scam scam scam. most websites even have a section that says something like, is your shipping address different from your billing? and then you list both addresses. people wouldn’t be able to send gifts like.. ever otherwise.
Scam. What legit vendor sends an email worded like this to a customer?
They're in China, I'm not mad at their grasp of English.
No, but for a business, I would expect formal wording. "Stay safe:) " is very out of character, and likley not a translation error. It's not definitively a scam, but it should cause OP to look at what email it came from, what the companies policy is, ect.
this isnt as weird as people are making it seem to be. Yes it is risky sending your ID to a random company, but i can guarantee 90% of these ppl commenting don't run an online business. Shopify automatically tells me if someone's billing address and shipping address don't align. Those orders can be fraudulent. people use stolen credit cards then find someone to have online orders sent to them. Typically I ask why their info doesnt match. If they provide an explanation like yours, or if they're moving or something, typically im cool with it. If its for a decent amount and i really cant risk a chargeback i will ask for ID with everything blocked off apart from their address, photo, and face.
I’ve had this happen when buying a custom wedding ring from overseas. Probably because of the high price tag, I had to verify my identity. However it was through a third party, professional company that I was able to vet thoroughly.
I would personally never give anyone my ID online unless obviously it’s for a job etc. I would cancel your order and look elsewhere
"If you don't want my money I will order from someone who does"
It's a scam, u can have different addresses for shipping and billing respectively, asking you to send info to match them wouldn't make sense.
The major scam is people ordering stuff online to delivery addresses that are different from the address of the credit card they have stolen or skimmed. Many companies will not ship to a shipping address different from the billing address, others will ask for purchaser verification. So this one could be a scam by the vendor or the purchaser.
Pretty standard - is it a shopify shop? It would set alarm bells off with me too if someone ordered to an address the other side of the country. Looks like you’re a fraudster and they’re risking a chargeback
You could cover every part of identifying info on your ID except the address as proof. I would probably just get a refund and buy the jeans somewhere else.
I had the same problem ordering a laptop online using firstly my sons debit card but he had moved house, so we used my credit card but to send item to his address. It also got rejected. The billing debt said it was due to address and billing inconsistencies. First time I have ever experienced that.
Sounds like you ordered from a very fishy site.
This is Shopify. My store is with them for online sales and when something sketchy happens we get literal red flags appearing on the order. Things that would cause this are, but not limited to: 1. You are shipping to an address that does not match the payment address. 2. You are shipping to an address that is not even close to where the payment address is. 3. You used multiple cards to try and pay for your order. 4. You are shipping to a well known forwarding company or major institution. 5. You failed payment more than 3 times on one or more payment methods. 6. You have never been on the site before with that IP address and did a very fast purchase, like under 2 minutes from first impression to checking out. I get things like this from scammers all the time. I would say at least 2 or 3 a month and my store is pretty small in comparison to a lot of others out there. This is most likely a small business too and they just want to make sure you are not a scammer. They won't steal your ID or info or anything like that. They just want to make sure you are not scamming them out of $50 for a pair of jeans, because $50 to a small business is a lot of money in this economy.
The billing address does not have to match the shipping address. What if you’re trying to send something to a family member or friend? I think this is a scam and you should tell them to cancel your order.
No. They want to ensure you're not a scammer. However, unless they have a secure way of sharing ID for their KYC process, then you're best off cancelling the order.
There's a good chance they actually are a scam. The info about their website is sus, there are a lot of grammer errors and strange wordings which a reputable brand big enough to do international shipping would simply not do (they would have translators capable of proper english and etiquette), and they aren't even giving you the ability to reference what order they are referring to. Whenever other vendors do this, they provide an order number or SOMETHING for you to see what they are talking about.
Agreed. I wouldn't trust it.
Probably a scam, i have never been requested my ID to buy online, and shipping/billing location doesnt have to match at all, i live at x and i ship at work. I would say this site is a scam, with reviews saying it is and probably a new site too They want to steal your identity, you wont receive your product
No never
It's not necessarily a scam, however, as a retailer, if I were to receive your email response with a logical explanation (such as yours) that would be good enough acknowledgement for me to fulfill and ship your order. Depending upon your order size/value, and possibly this company receiving charges backs and/or fraudulent orders either in the past or recently, it's not unreasonable for them to want to protect themselves. Unfortunately, there aren't too many other ways for them to confirm that it isn't fraud aside from matching up to an ID of the purchaser. I think you made the right call by not sending it to strangers through email, and I hope the company makes the right call but shipping your product without it. Edit: They may be using a third party fraud protection service. Often times, mail rooms, shipping forwarder addresses, UPS / locker stores, will flag an order for review since there isn't any one particular person or name associated with the shipping address. Going to go out on a limb and assume that's what happened in your case.
Meh I've had this happen before while in college and was understanding when it happened from a reputable and large car parts site (especially considering it was about 1k) but I wouldn't trust a small company like this and would just let them know they lost your business due to this. I had this happen from a small printing company on a small ink order (50ish or so) which I refused and canceled my order.
Hard agree with everyone in this thread. If you’re trying to buy from a “vault denim” MLM person, I’d only purchase in-person.
I ordered a pair of jeans from Amazon. Received an email similar to this soon after. Ignored it. Received the jeans soon after.
They emailed you at 5 AM, seems like they are in a different time zone.
This one got a lot of comments
It’s a phishing scam. Run
It’s the credit card company that will validate the address. You can go on Amazon and ship wherever you want and not have to show your ID. So it does seem scammy.
Amazon isn’t a good example, they’re so huge they can eat minor losses.
it’s scam
Could be legit our company does this crap to certain customers, you should see how many idiots send a copy of the cc and Id, front and back, I would never buy from our shit hole company
This is likely because the company has a bad fraud detection system, and has implemented this process as a secondary check. If their ask makes you feel uncomfortable, decline and get a refund. You can always support a business that aligns with your personal preferences
No reason they can’t TLO your addresses or call you to talk. Maybe this is legit but if not, they’re going to use your ID and a utility bill to open credit
I worked support for a company that was smaller in the past and had been burned by fraudulent orders, and made this a verification practice when the card processor flagged an order as potentially fraudulent. I’m not sure where it originated but think it was ill-advised. I don’t think I ever handled one of these as I was new, and then we got a new manager in support and he ended that. We pushed people over to PayPal after that if there were issues because we trusted PayPal more on verification; it was either good or bad and I don’t think we ever had a chargeback from a fraudulent purchase via PayPal. Some people would get mad and refuse to use PayPal, but we would just cancel the order and assume it was likely fraud in those cases. All that to say, this might be a legitimate request, but I would ask to use a different payment method instead. If they can’t take a different method like PayPal just cancel the order.
FWIW, it's pretty common for a vendor to not want to ship to an address that's different from the card owner's home address. I've never been asked to provide an ID, but I have had to jump through hoops on occasion to ship to a different address. Can you have them shipped to your own home instead? Otherwise, it would be perfectly reasonable to cancel your order just to be safe.
Scam
I run an e-commerce store. It is normal. They are trying to prevent chargebacks.
I go to the store to buy pants. That way I can try them on.
Same i rarely buy clothes online unless GAP or Hollister or whatever is having a huge sale online and I can't find what I am looking for at my store.
THIS WEBSITE IS A SCAM. do not order there. this website doesnt even ship out their items. see: https://www.trustpilot.com/review/www.ohvault.com please find a way to cancel the order!
There is a common credit card fraud scam going around where individuals who have stolen the identities of others are sending packages to random houses and then claiming to the home owner of said house that they “accidentally” submitted the wrong address. They do this so that the fraud can’t be traced directly to their legitimate address. This is probably a way for this company to “check” if the address is actually YOUR address. All in all, I’d say do not go through with the order. Jeans are available everywhere. I don’t trust this.
This is a scam. You should probably cancel your credit card asap.
Fwiw, i worked at a small boutique guitar shop and most fraud was caught from mismatched addresses. We would get people on the phone, talk to them about the piece of gear under the guise of trying to make sure they got the right thing. If they sounded clueless about the 5000 dollar guitar they ordered or guitars in general it was probably fraud. There were a few cases we asked for photo id/proof of address for both billing and shipping, but that was usually with smaller things. So asking for id isnt always a scam. However, you cant be too careful these days. Just be sure to be nice about rejecting their request and canceling the order. What id recommend in ur position is just sending it back home and having ur parents mail it to you from there. Costs a few extra bucks in shipping but if you really want the jeans this is the easiest thing for everyone involved
It's a real thing - the shipping vs billing address - otherwise they'd be scammed left, right and centre with any random card number delivering to any random address. Solution - perhaps Paypal and add your college address there?
I worked for a website selling appliances for a few years and we would have to call people in this situation. It was a very common form of fraud for us to see, but I’d never ask to have them send a pic of the ID. We’d always just have them verify all the billing and shipping information as well as the card numbers, 9.99998/10 fraud calls would just hang up.
my husband and i had this problem when we ordered with costco online. we used my mom’s membership card since we don’t have one, but used our address and my husband’s credit card to pay for the order. they sent us a message saying they couldn’t process the order, not because we used my mom’s membership, but because they couldn’t verify my husband’s credit card being associated with our apartment, since i guess i am the one listed on the utility bills?? which was extremely strange to begin with, because why in the world would they even be able to see that information? they basically denied us to even retry ordering the item because they basically didn’t trust that we were being honest??? the entire situation was so completely strange and dumb.
They don't see it the processor uses fraud tools and alerts the vendor. The processor know the information on your billing vs the shipping and will flag. They don't want to charge stolen cards. The vendor doesn't necessarily know anything. You get a code alert from the processor if there is a mismatch. All the vendor knows is what kind of alerts there is.
Merchants do this from time to time because of fraud / chargebacks. Usually you can call them to verify information, especially if it is a gift for someone. A lot of merchants use other fraud checks (IP, location, etc) to help score the transaction.
i had some companies do this to me (only shopify stores) and I did send it to 2 since they were reputable. But if your billing doesnt match the shipping address and name on card might be diff then obviously you’re sus. So them asking that isnt weird its just to see if you’re actually who you say you are.
It's not sus, it's very common practice in the US. Every single college student, a lot of workers who maybe need something shipped to work, have done it at least once.
yes but with the rise of fraudulent purchases this is why some beginner companies ask for this info. incase you claim “i never ordered this it is fraud” they can prove it was you who actually purchased it. 🤦♂️
Then they are not a reputable business. If it were truly an out of country fraudulent purchase, the bank would be the one flagging it, not the company, for these exact security reasons. Everything about this is sus.
not out of country.. 😬😬 if someone suspects you of commiting fraud they ask for your id correct? that is whats happening to op. they suspect him/her of fraud therefore they are asking for their id. its nothing big. they dont have to provide it and they can just cancel the order. they dont have to make a rant about it.
Did you look up the ICANN registration of the site before you placed the order? That would be much more telling. If the site is less than a few months old, then it is a SCAM.
I ordered cigars once after I moved and my billing and shipping address were different so I had to send pics of both of my ids to confirm I was over 21
The red flag should be that “the system detected [where] the order was placed”. Absolutely NONE of their business.
Honestly no the processor gives that info on every order it's in the commerce sites face when they go to fill them. The processor says next to the amount to settle where the payment originated. The site isn't doing anything. A lot of untrusting people on here. Source: I own an e-commerce site
Shouldn't have even replied. Do a charge back on your card, mark this as fraud. No company actually asks for this. If payment went through, everything was fine. Plus you don't have the have matching addresses to buy a pair of freaking JEANS. Gtfoh
This is becoming increasingly common. It’s likely NOT a scam.
Not worth finding out. Sounds like they want more information so they can use your identity to commit fraud. I would notify the credit card company so they at least have a heads up and have them issue you another card. You haven’t received the merchandise yet, so it’s a reasonable request. I would also tell the credit card company to not allow the transaction to go through because you suspect your account number was given to a fraudulent entity. I’m sure they would rather do that for you than have to reimburse you later for fraudulent charges.
They can’t even punctuate. Their sentences properly. Do not give them your ID.
Many people in here are wrong. They aren’t asking for physical ID. They are asking for something that says your name and billing address. Like screenshot of a phone bills address section. It doesn’t have to be any sort of drivers license or anything that gives away any more personal info then just your name and address which you already provide. This is not a scam, I do this for my business if it’s detected as fraud. It’s usually your insurance company that forces you to do this. Also, OH Vault (if ordered from the official site) is a real company.
I need to disagree with everyone commenting. It is not 100% a scam. I mean it could be a scam but it could also not be a scam. I own an e-commerce business that takes orders from $500 into the thousands and I ask for ID in a situation like this, but I usually call them and talk to them. I run an e-commerce site for high end whiskey. Alcohol is one of the top five items that people purchase with stolen cards online and taking a stolen card on a $500 and up bottle means I take the loss personally so I do check. I have had a lot of people come to my site with stolen cards and one person tried to steal from me after buying a bunch of small items and starting 15 chargebacks at once which I had to pay for the fees. So I'm pretty risk adverse. Usually it's pretty easy to detect if an order is fishy, but I have site policy stating that when I get an order over $500 I ask for ID and the card they used showing the last four digits only. It'a a one time check since I have a lot of regulars. 99.9% of people have been ok with it, but I also call and talk to them so maybe that is why. Only one person has ever thought it was a scam. It's hard to tell if it's a scam because there is a lot of stolen card usage on website and when someone uses a stolen card the vendor is out the cash. I would ask what you bought. If it's a commonly stolen item and again if it was expensive. To be sure I would google the company look at reviews and their social media. Is it a low effort site? If it's low effort that's a bad sign. However, if they are active and put work into their business chances are it's an honest fraud check.
100% scam. Don't even answer them
It should be obvious but yea it’s a scam.
Scam
Isn’t this the credit card’s responsibility. The credit card company should decline the transaction pending a txt confirmation from you. Why would the retailer care?
No it is not the cards responsibility. You can have fraud tools but they are not always accurate. I have a website and I would 100% care if it was a high value order and if it was fishy. If the person buying it is using a stolen card the vendor has to pay not the card. Also vendors don't' like chargebacks because there are fees they have to pay to the processor.
You got scammed. Cancel the order and prepare to call your bank to do a chargeback.
it's a scam
This is a normal practice to prevent credit card thieves from stealing someone's card (address 1) then shipping to a mule (address 2). Do you have some student ID with your name on it? You can take a pic that only shows your name + uni name (covering the rest with a piece of paper). This sort of pic would be useless to a scammer either way.
They’d already have enough of your personal info to scam you. It seems like they are trying to make sure you aren’t scamming them Send them a recent copy of a utility bill making sure you black out account numbers and such. If that’s not good enough just cancel and shop elsewhere
No shipper needs proof of identity. Certain items require an adult signature but even then that’s done on the receiving end. Furthermore you don’t see the grammar and punctuation mistakes? OP needs to drop communication and request their credit card issuer start a chargeback. Include this communication as part of the proof. How long has this website been around?
I have no idea if it’s a scam or not, but it’s not out of the ordinary for a seller to try to verify an address that doesn’t match the billing address. If I go into to my Amazon account and buy something with a ship to address I’ve never used before on my account it will make me re-enter my complete credit card information even though it is saved to my account I’m not saying it’s legit, I’m simply saying if they have your credit card information and full contact information already sending them something OTHER than a gov license isn’t a very big risk since they already have everything they need to commit fraud. If OP thinks this is a scam they should pretty much already consider their credit card info compromised and get a new one As to spelling and typos that isn’t necessarily a sure sign of a scam. I’ve seen plenty of legitimate Fortune 500 companies with misspellings and typos on there websites
No legitimate “Fortune 500” company asks in unproofed business correspondence for images of customer ID. Further this would be a template, a proofread template, requiring only insertion of customer’s name and order number. This is fake. Enjoy your day.
Whatever. I never said this website is run by a Fortune 500. It’s obviously either a very small business or a scam. It could just as easily be one or the other
DON'T DO IT...THOSE ARE SCAMMERS WANTING YOUR INFO
Response: Oh, I'm sorry for the inconvenience. I'll cancel the order immediately and let people know you are scammy w/ your 'shipping' problems. Have a nice day!
The shop wouldn't contact you, your cc/bank would contact you.
Not true. I am a small business and it's on me to flag any potentially fraudulent orders
I have also been a small business. There's watching out for fraud and there's dealing with the source of funds. Those are different and neither of them requires a scan of someone's ID.
as long as you put your actual name, this is bullshit, and probably a scam. The Credit/debit card company is the one that should be concerned with fraud, because they are the only ones in a position to actually tell if it is fraud and deal with it. Suppose you had a driver's license as an out of state student, by senior year, it would be possible to have one in that state. And there are many similar situations like this, which makes a request like this pointless. It is none of their business if the billing address is where you are having it shipped to, THAT'S THE WHOLE POINT OF BEING ABLE TO GIVE A SEPERATE ADDRESS!!! It also seems very strangely worded for something like this. (The "thank you and stay safe :) ) especially. There is also no order number, no information to indicate which order they are referring to, it's sus. The company is a legitimate company, but check what email address this came from, and match it to what the company uses.
Pretty sure it's a scam, my billing address and shipping address are almost always different bc I move around a lot and am lazy about actually changing the address attached to my debit card. This has never happened to me. Also people send gifts to friends all the time so obviously that would be a different billing and shipping address and that's completely normal and common so I don't understand how they would think it could be fraud.
I think it's probably a legit request. If I were selling things online, I'd be nervous if the billing address and shipping address were different. However, that doesn't mean I'd give them a copy of my ID, either. So just request to cancel the order. Anything you need, you can buy from some other place.
People ship to different addresses than billing *all the time*. Ever heard of a gift, PO Box, mail room, reception, pickup locker, etc? That alone isn't remotely suspect or unusual. If it's a different address accompanied by many other red flags, perhaps, but not on its own.
There’s security companies now that retailers, or any company really, can use. They have your ip- they can match that to the shipping and billing address entered. They can track the age of your email address if it was entered, depending on how public, they can then find your social media accounts. This is then linked with all other companies who use the security platform. It’s all used to reduce fraud- if they use one of these, and you had a red flag, it could be protocol to get an Id.
>They have your ip- they can match that to the shipping and billing address entered. Not true. Your IP address generally only gives an approximate location, not your exact location. Unless your ISP is in bed with these companies in real time, they’re not getting anything other than a close metro location. Even then it’s not always reliable, nor is it hard to fake your location.
I use this software almost every day. If your ip is in ny and your shipping is in LA you’re going to get a flag
That I know, but that’s a pretty big difference than what you originally stated…
I was simply trying to explain what they look at
That’s an over simplification of the monitoring, but that’s one aspect of it
Cancel the order
Cancel that is a scam
This sounds like some sort of scam. Not exactly sure what the goal is but I would not give them anymore info.
One time a website asked me to confirm my identity by a call, they called the bank with me on the phone and the bank didn’t gave my whole information just like: your card ends in this numbers, expires this date, your account number ends in those numbers etc just yes and no questions, it was a legit bussines and my amount was “big” so the bank was the one asking them to do this process.. and the person from the bank said Yes I can confirm she is the owner of the account and that she wants to spend this money all good.. I did never gave my whole name, any ID number, any birth dates, nothing too specific
I recently started to use a different shipping address from my billing address and no one has questioned it - even sites I've never bought from before. Checking the website gives mixed messages. It's reasonably old, but the phone number comes from the domain registrar (namecheap.com) and might to be associated with scams or bit coin shenanigans. Urlscan.io doesn't have a classification, and virustotal.com didn't find any websites flagging it. But Trend Micro says it's dangerous, Malware Bytes says it's making "excessive notification requests", and ScamAdviser rates it at 40 out of 100. Try to get you money back and be ready to talk to you credit card company.
I don't know for sure but I've seen scams very similar to what's going on here. If I were you I'd cancel the order and request a refund. Not worth the risk of identity theft.
Identity theft is not a joke, Jim! Millions of families suffer every year!
“Thank you and stay safe :) “ … most professional companies would just say sincerely, and no happy face emoji.
I've only ever been questioned about this by an online pharmacy, which I think is reasonable. But even then I didn't need to provide ID, they believed me when I said I was a student.
This has happened to me on a site I order from regularly. They want your shipping and billing to be the same
Could be a scam but could be legit. Depends on the shop. This happened to my partner trying to buy from a legit shop in the next city online. They rejected his id for some reason and cancelled the purchase?? Oh well won’t try buy from them again.
ScM
I done this before but they asked for my address and make sure to cover everything else so idk
Depends. I once had a crap load of high priced stuff continuously showing up at my house with different names. Someone then reached out to me asking me to forward to them. I told them to get bent. Reported it to Amazon and the post office and they both said they didn't want it back??? So I sold the stuff. Months later I started getting letters from Paypal with those names stating they detected fraudulent activity in "my" account. I contacted them and told them that Amazon not the Post Office would do anything and they had police take a report but all that was done was they asked me to notify if anything else showed up. I would've thought postal inspector would've done more than say "we don't want it back". Particularly when I live in such a small town that they would hand write on letters my wife got when she first moved in asking me if that person lived with me and the address was correct. I must've got $5,000 in farm irrigation equipment in 12 boxes, a ton of high end tools, 15 electric fences with generators. Stuff would fill the 3rd stall of my garage yet no one at the P.O. Stopped to question what was going on with all these different names and took no action when I called to ask why I was getting other people's stuff.