Stripe users, be aware of fake and phishing "Stripe Invalid Payment Ticket" emails like the one below being sent by cybercriminals. Clicking on the links or buttons in the fake email goes to a fake Stripe website that asks visitors to sign-in. But, any attempts to sign-in will result in the visitors' Stripe username and passwords (user credentials) being to sent to the cybercriminals behind the phishing scam.
Once the cybercriminals have received the stolen credentials, they will use it to gain access to their victims' account, hijack and use them fraudulently. This is why Stripe users should always go directly to www.stripe.com and sign into their accounts. Once they have signed, they will be notified of important changes or alerts, or they can view the same there.
A "Stripe Invalid Payment Ticket" Phishing Scam
Invalid Payment Ticket
Wed 11/21/2018 2:10 AM
From: Support merve@viapot.com.tr
To: undisclosed-recipients:
stripe
Your recent invoice payment deposited to your dashboard by Donald-Glass inc, was flagged as fraudulent and unapproved.
To avoid a temporary or permanent service suspension due to your misapplication of our payment gateway, resolve and refund the aforementioned transaction flagged on your dashboard below.
Proceed to Review and Resolve
Please note that we may automatically suspend merchant accounts that do not adhere to our billing terms and condition.
Hope you enjoy getting up and running. We're excited to see what comes next!
Stripe, 510 Townsend Street, San Francisco CA 94103
Stripe users who have been tricked by the phishing scam are asked to change their password and contact Stripe for help immediately.
Stripe is a technology company. Its software allows individuals and businesses to receive payments over the Internet. Stripe provides the technical, fraud prevention, and banking infrastructure required to operate online payment systems.