Report: Essential PH-1 Buyers Targeted By A Phishing Scam

Some buyers of the Essential PH-1, including user Cygnosity on Reddit, are receiving emails that seem to be from Essential, asking for picture ID, but are in fact part of a phishing scam. These messages ask customers for an alternative email address and a phone number, along with a picture of a photo ID of some sort, like a driver's license, state ID, or a passport. The emails state that the billing address for the order needs to match the address on the ID. Multiple sources are confirming that these messages are not from Essential and because some of the original messages CC'd many people at once as a method of mass sending, some people are receiving other customers' personal information.

The phishing scam is only hitting those who submitted orders to Essential, which could mean that Essential's order database has been compromised, or somebody within Essential is sending these messages from within the company. There are thus far no reports of anybody who did not order an Essential phone getting such a message. Some suspect that the person behind the scam owns one of the email accounts listed in the CC field of some or all of the messages, but many users who received a message from the initial batch are saying that nobody was CC'd on the first message, which could mean that it is indeed an Essential employee or hacker in the firm's systems doing this, or it could mean that somebody got the initial message and decided to launch their own phishing scam. In any case, Essential has disabled the email addresses sending the messages, removing the ability to reply to them, and has also deleted assets that were in the messages such as images.

Some consumers are saying that the initial message may have legitimately originated from Essential, asking for additional information to verify that no fraudulent payments were being made to pay for Essential phones. Such unorthodox methods of verification could easily come across as suspicious even if they're legitimate, but it is also being argued that the messages were not authentic in some form, even if they came from Essential's mail server. The company has yet to comment on the ordeal in any official capacity.

Copyright ©2019 Android Headlines. All Rights Reserved
This post may contain affiliate links. See our privacy policy for more information.
You May Like These
More Like This:
About the Author
2018/10/Daniel-Fuller-2018.jpg

Daniel Fuller

Senior Staff Writer
Daniel has been writing for Android Headlines since 2015, and is one of the site's Senior Staff Writers. He's been living the Android life since 2010, and has been interested in technology of all sorts since childhood. His personal, educational and professional backgrounds in computer science, gaming, literature, and music leave him uniquely equipped to handle a wide range of news topics for the site. These include the likes of machine learning, voice assistants, AI technology development, and hot gaming news in the Android world. Contact him at [email protected]
Android Headlines We Are Hiring Apply Now