Curious email signup from topcashback

TallBloke · Oct 24, 2017

Just wondering if anyone else has had a similar experience...

On Sunday I received an email from topcashback asking me to "Authenticate your account". Odd because I hadn't signed up to the site.

Then on Monday morning I received a second email saying thanks for joining. I'm sure I didn't accidentally click the authenticate link in the first email.

I contacted topcashback via twitter and they said my email must've been hacked & they'd delete the account linked to my email address.

I've checked my (google apps) email account activity and there's nothing suspicious. I also have 2FA enabled. As a precaution I've changed the password. No other odd email activity as occurred.

Seems an odd hack to me if it is one.

Anyone experienced similar?

John

dee · Oct 24, 2017

Id absolutely double check the sending email address. Sounds like a phishing escapade. Ive had a few of these and the actual originating domain is almost always something close but not actually where they claim to be from

TallBloke · Oct 24, 2017

I'd suspected that too - but then topcashback confirmed that the account was authenticated on 22-10-17.

dee · Oct 24, 2017

Guess it could be someform of weird malware on your rig if no other suspicius activity,but weird hack as you say.

Maybe some hacker is aiming to earn you a fortune in cashback.

TallBloke · Oct 24, 2017

Ha ha!

Don't think its my mac/old ipad/5S

I've asked topcashback if they've encountered other instances ...could well be that they've got issues with their system? Maybe they're doing something (wrong) with email lists?

Adam H · Oct 24, 2017

I've had a couple of companies lately that started sending me emails after "apparently" I've signed up. I assumed it was them buying lists and hoping some of the list would convert into active users thinking they had signed up years ago. Can't remember who they were now but like you I know I didnt sign up. Likewise I know I'm the only one to have accessed my mail for that particular account..

For them to quickly delete the account no questions asked would raise alarm bells for me though, how many companies do you know that would delete an account via Twitter ( unless they confirmed with you first via the said email address ? )