[ic] Heads up about a security flaw with UPS's new Delivery Intercept service

Jon Jensen jon at endpoint.com
Wed May 9 23:30:48 EDT 2007


On Tue, 8 May 2007, Louie Martinez wrote:

> So the person who ordered all these items called them up claiming to be 
> our company and had them redirect the packages to a new address. As far 
> as the credit card processor was concerned, all the info was legitimate, 
> and UPS dropped the ball by letting ANYONE with half a brain to request 
> the order be diverted to a new address. We would have never known until 
> people started calling us screaming about their credit cards. We just 
> happened to catch it in time and stop every order.
>
> UPS apparently does not care when we brought this to their attention. 
> They simply said not to send out the tracking numbers which is idiotic. 
> Most customers who order online want to track their packages.

Louie,

Thank you very much for letting us all know! That sounds like a scam that 
many e-commerce sites will be vulnerable to.

Jon

-- 
Jon Jensen
End Point Corporation
http://www.endpoint.com/


More information about the interchange-users mailing list