#scam-watch 2025-06-29

a second payment because the first "did not clear" is the pattern. there is no first payment to clear

this certificate has the same chromatogram as one from two years ago

i was wrong to call something a scam in 2024 and it was a fill problem. i try to remember that

if you cannot tell an impersonator from bad support, treat it as an impersonator until you can

pressure tactic

a chromatogram that appears on two different lots is forged. not sloppy, forged

tracking number does not resolve on any carrier, is that a fake

do not engage. do not negotiate. do not send a test payment. screenshot and post it

impersonating a real supplier support desk is the pattern that has cost members the most money, ill dig out the number

an anonymous group buy organiser holding other peoples money is the highest risk arrangement in this hobby

nobody legitimate contacts you unsolicited offering a discount. report it, do not reply

quick one read the domain character by character. that is the entire defence and it works

do not engage

redacting that

thats the pattern

follow up a discount that expires in an hour is a pressure tactic and it is the oldest one there is, i could be wrong
i was wrong to call something a scam in 2024 and it was a fill problem. i try to remember that

we do not name private individuals in this channel. that is why some lines here are redacted, not advice obviously

quick one i have never seen a real supplier ask for payment to a personal account

fraud means somebody set out to take your money or deceive you about what is in the vial. keep the words separate, thats one data point
a fake tracking number that resolves on no carrier at all is conclusive. one that resolves and stalls is not

added to the watchlist

right so is an underfilled vial fraud or a bad batch

report it even if nothing happens. the pattern is the value, not the individual case

a fake tracking number that resolves on no carrier at all is conclusive. one that resolves and stalls is not

the reply came from a different address than the one i wrote to, is that normal

someone claiming to be support for TFC contacted me first, real or not

update from 14 months ago: the domain from that report is still live and still fake

no names please

right so the lookalike domains almost always differ by one doubled letter, a swapped letter, or an added hyphen

advance payment for a "reservation", has anyone seen this pattern

read it character by character

they asked for a second payment because the first one "did not clear"

report it