Redisplay Messages: Compact | Brief | All | Full Show Messages: All | Without Replies| Author: | infinibrix  | | Posted: | Apr 7, 2024 16:15 | | Subject: | Re: Order Item Removal Requests Too Complicated! | | Viewed: | 30 times | | Topic: | Problem | |
|
| In Problem, 1001bricks writes:
| | In Problem, infinibrix writes:
| | In Problem, 1001bricks writes:
| | In Problem, infinibrix writes:
| | In Problem, 1001bricks writes:
| | In Problem, infinibrix writes:
| | My customers always seem to have trouble following the process of approving an
item removal request therefore can these steps not be simplified?
|
It could, but on the other hand and just like NPB: as soon as you're using
auto checkout instant payment, all this cease to be a concern.
|
But we're not all using Instant checkout and so are you suggesting that we
all should be
|
Frankly? In 2024? With all those Consumer laws saying a transaction isn't
valid if the buyer doesn't see and agree to pay the final price?
Yes.
|
If the consumer sees and agrees to pay the final price after SEEING a manual
invoiced order or quote then what is the difference? It is only Bricklinks platform
itself that insists a transaction is a binding contract, not the individual sellers
many of who will happily allow a buyer to cancel should they wish to regardless
of an item being out of stock or not hence I raise the suggestion that buyers
should not be hit with NPB's and manual invoiced orders should be treated
as quotes to help prevent this situation so that buyers can shop with confidence
|
Yes, legally in many Countries, buyers are NOT bound by any contract if the
final total price isn't shown on his screen and the buyer doesn't confirm
his will to pay this exact total amount.
But, then, it's old BrickLink way again, juste like talked somewhere else
Anyway, sellers should develop ac/ip the more they can, it *really* is closer
to what's nowadays expected while buying on line, and it does simplify problems
of cancellation, NPB, IRR, and so many.
Of course you do as you wish.
But whatever the difficulty is (I've set up 110 Shipping Methods), frankly
I'll never go back to the old way, it's FAR too convenient.
|
Its not convenient if you sell across multiple platforms and don't want to
rely on third party software to keep stock in check however I already under list
what I sell on each platform with backup stock to help better prevent stock oversights
but the less of a safety net I have with being able to double check stock before
taking any payment the more cautious I have to be about how much inventory I
list here which serves no one, least of all my customers.
At the end of the day if an alternative way of buying doesn't directly affect
a customer then there should be no reason to dismiss that alternative method
in a negative context. If buyers want to be down with the 2024 ways and only
want to shop with sellers that offer IC then that is fine and I don't have
an issue with losing some business therefore where is the harm? However I honestly
believe if a customer wants a part badly enough they will shop with that seller
irrespective of instant checkout or manual invoice/quotes
|
 |
| Author: | 1001bricks | | Posted: | Apr 7, 2024 14:27 | | Subject: | Re: Order Item Removal Requests Too Complicated! | | Viewed: | 29 times | | Topic: | Problem | |
|
| In Problem, infinibrix writes:
| | In Problem, 1001bricks writes:
| | In Problem, infinibrix writes:
| | In Problem, 1001bricks writes:
| | In Problem, infinibrix writes:
| | My customers always seem to have trouble following the process of approving an
item removal request therefore can these steps not be simplified?
|
It could, but on the other hand and just like NPB: as soon as you're using
auto checkout instant payment, all this cease to be a concern.
|
But we're not all using Instant checkout and so are you suggesting that we
all should be
|
Frankly? In 2024? With all those Consumer laws saying a transaction isn't
valid if the buyer doesn't see and agree to pay the final price?
Yes.
|
If the consumer sees and agrees to pay the final price after SEEING a manual
invoiced order or quote then what is the difference? It is only Bricklinks platform
itself that insists a transaction is a binding contract, not the individual sellers
many of who will happily allow a buyer to cancel should they wish to regardless
of an item being out of stock or not hence I raise the suggestion that buyers
should not be hit with NPB's and manual invoiced orders should be treated
as quotes to help prevent this situation so that buyers can shop with confidence
|
Yes, legally in many Countries, buyers are NOT bound by any contract if the
final total price isn't shown on his screen and the buyer doesn't confirm
his will to pay this exact total amount.
But, then, it's old BrickLink way again, juste like talked somewhere else
Anyway, sellers should develop ac/ip the more they can, it *really* is closer
to what's nowadays expected while buying on line, and it does simplify problems
of cancellation, NPB, IRR, and so many.
Of course you do as you wish.
But whatever the difficulty is (I've set up 110 Shipping Methods), frankly
I'll never go back to the old way, it's FAR too convenient.
|
|
| Author: | infinibrix | | Posted: | Apr 7, 2024 14:12 | | Subject: | Re: Order Item Removal Requests Too Complicated! | | Viewed: | 48 times | | Topic: | Problem | |
|
| In Problem, 1001bricks writes:
| | In Problem, infinibrix writes:
| | In Problem, 1001bricks writes:
| | In Problem, infinibrix writes:
| | My customers always seem to have trouble following the process of approving an
item removal request therefore can these steps not be simplified?
|
It could, but on the other hand and just like NPB: as soon as you're using
auto checkout instant payment, all this cease to be a concern.
|
But we're not all using Instant checkout and so are you suggesting that we
all should be
|
Frankly? In 2024? With all those Consumer laws saying a transaction isn't
valid if the buyer doesn't see and agree to pay the final price?
Yes.
|
If the consumer sees and agrees to pay the final price after SEEING a manual
invoiced order or quote then what is the difference? It is only Bricklinks platform
itself that insists a transaction is a binding contract, not the individual sellers
many of who will happily allow a buyer to cancel should they wish to regardless
of an item being out of stock or not hence I raise the suggestion that buyers
should not be hit with NPB's and manual invoiced orders should be treated
as quotes to help prevent this situation so that buyers can shop with confidence
|
|
| Author: | 1001bricks | | Posted: | Apr 7, 2024 12:57 | | Subject: | Re: Getting logged out/Search function | | Viewed: | 62 times | | Topic: | Problem | |
|
| In Problem, UTLF writes:
| | | | The things is; most of us are VERY happy this site exists.
And for a site, at least, just staying alive is already a huge task 
I'm very thankful to them for this.
|
"Thanks for doing the bare minimum & paying server fees so the site stays
up!"
|
Server fees? Check eBay with what... CAD 50 per month shop + 10% cut or such
silly numbers? Server (+ people) fees are really neglectible here.
| | I love Bricklink like everyone else, but I am not a fan of the way it is handled
(if you even want to consider what they've been doing as "handling"
it)
|
I'm not fan either of their silent deployments (like one 2 days ago which
- again - broke BrickStore), zero or BS communication, working on things nobody
cares, and so on.
But I can't and you probably shouldn't decently deny it's working
quite reliably, and for cheap.
|
|
| Author: | 1001bricks | | Posted: | Apr 7, 2024 12:49 | | Subject: | Re: Order Item Removal Requests Too Complicated! | | Viewed: | 32 times | | Topic: | Problem | |
|
| In Problem, infinibrix writes:
| | In Problem, 1001bricks writes:
| | In Problem, infinibrix writes:
| | My customers always seem to have trouble following the process of approving an
item removal request therefore can these steps not be simplified?
|
It could, but on the other hand and just like NPB: as soon as you're using
auto checkout instant payment, all this cease to be a concern.
|
But we're not all using Instant checkout and so are you suggesting that we
all should be
|
Frankly? In 2024? With all those Consumer laws saying a transaction isn't
valid if the buyer doesn't see and agree to pay the final price?
Yes.
PS: of course there can be exceptions like shipping Raised Baseplates to North
Korea can be difficult to auto quote. But exceptions are part of rules.
|
|
| Author: | infinibrix | | Posted: | Apr 7, 2024 12:19 | | Subject: | Re: Order Item Removal Requests Too Complicated! | | Viewed: | 23 times | | Topic: | Problem | |
|
| In Problem, 1001bricks writes:
| | In Problem, infinibrix writes:
| | My customers always seem to have trouble following the process of approving an
item removal request therefore can these steps not be simplified?
|
It could, but on the other hand and just like NPB: as soon as you're using
auto checkout instant payment, all this cease to be a concern.
|
But we're not all using Instant checkout and so are you suggesting that we
all should be and that no improvements can and should be made to manual order
invoicing?
Ideally I would rather these manual orders be treated as quotes anyway for reasons
outlined here:-
https://www.bricklink.com/message.asp?ID=1460675
|
|
| Author: | infinibrix | | Posted: | Apr 7, 2024 11:54 | | Subject: | Re: Order Item Removal Requests Too Complicated! | | Viewed: | 27 times | | Topic: | Problem | |
|
| In Problem, TheBrickGuys writes:
| | | | Does it even really need the customer to approve the change? If so why?
|
In answer to at least this one question is that it is very important for the
customer to be involved in the process of changing quantities of parts in their
order. Imagine a customer places an order for a build but as the store is filling
the order he realizes that he is 4 short of one part, 3 short of another and
20 short of yet still another. If the store can just change the qty of what is
ordered without the customers approval then the customer's order will be
all screwed up.
This is just one example. There is certainly room for improvement but the customer
should always be part of any qty change in the orders they place.
Jim
|
Yes of course but that doesn't mean the customer won't still be notified
of the changes?
Only I don't see the difference between receiving an email stating "Item
is out of stock, do you approve the removal request" and "Item is out
of stock and has therefore been removed from your order"
Again whether I ask my customer to approve the change or not won't change
the fact that the item is unavailable and won't be included in the order.
Yes the customer at this point should be entitled to cancel the whole order if
this is a critical part of it however this then goes back to my previous argument
where I feel its important to turn all non instant checkout orders into quotes
where stock is held for 24 hours and customer can freely cancel if they are
unhappy with any aspect of the invoice/quote:-
https://www.bricklink.com/message.asp?ID=1460675
|
|
| Author: | here4bricks614 | | Posted: | Apr 7, 2024 11:18 | | Subject: | Re: Getting logged out/Search function | | Viewed: | 26 times | | Topic: | Problem | |
|
| In Problem, yorbrick writes:
| | In Problem, here4bricks614 writes:
| | How do I stop this website from logging me out on mobile browsers despite the
preferences cookies being enabled? I’ve been logged out four times today.
|
Which browser? Are you using one with a setting that clears cookies when closing
the browser?
| | Why is the search function absolute garbage? I tried to look for solutions using
a few words and they were all excluded from the search results.
|
Searching for what? LEGO parts, or how to solve your issue?
|
Chrome browser. No.
How to solve my issue. I seem to remember another search feature that works better
than the main one.
|
|
| Author: | yorbrick | | Posted: | Apr 7, 2024 03:59 | | Subject: | Re: Getting logged out/Search function | | Viewed: | 29 times | | Topic: | Problem | |
|
| In Problem, here4bricks614 writes:
| | How do I stop this website from logging me out on mobile browsers despite the
preferences cookies being enabled? I’ve been logged out four times today.
|
Which browser? Are you using one with a setting that clears cookies when closing
the browser?
| | Why is the search function absolute garbage? I tried to look for solutions using
a few words and they were all excluded from the search results.
|
Searching for what? LEGO parts, or how to solve your issue?
|
| Author: | here4bricks614 | | Posted: | Apr 7, 2024 02:24 | | Subject: | Re: Getting logged out/Search function | | Viewed: | 25 times | | Topic: | Problem | |
|
| Yes, the fifth log out and subsequent “ID and Password Mismatch” error make that
evident.
|
| Author: | zorbanj | | Posted: | Apr 7, 2024 01:00 | | Subject: | Re: Getting logged out/Search function | | Viewed: | 29 times | | Topic: | Problem | |
|
| In Problem, here4bricks614 writes:
| |
This is nothing short of frustrating. Did the people “running” this site outsource
that responsibility to a chimp on an entire pharmacy’s worth of drugs? Is that
why nothing productive is getting done? Does this site even have an analytics
team?
|
Your account is close to 4 years old. That's enough time to glean that this
site is to be used as is. Complaining won't change anything.
|
|
| Author: | 1001bricks | | Posted: | Apr 7, 2024 00:58 | | Subject: | Re: Order Item Removal Requests Too Complicated! | | Viewed: | 31 times | | Topic: | Problem | |
|
| In Problem, infinibrix writes:
| | My customers always seem to have trouble following the process of approving an
item removal request therefore can these steps not be simplified?
|
It could, but on the other hand and just like NPB: as soon as you're using
auto checkout instant payment, all this cease to be a concern.
|
|
| Author: | TheBrickGuys | | Posted: | Apr 7, 2024 00:20 | | Subject: | Re: Order Item Removal Requests Too Complicated! | | Viewed: | 32 times | | Topic: | Problem | |
|
| | | Does it even really need the customer to approve the change? If so why?
|
In answer to at least this one question is that it is very important for the
customer to be involved in the process of changing quantities of parts in their
order. Imagine a customer places an order for a build but as the store is filling
the order he realizes that he is 4 short of one part, 3 short of another and
20 short of yet still another. If the store can just change the qty of what is
ordered without the customers approval then the customer's order will be
all screwed up.
This is just one example. There is certainly room for improvement but the customer
should always be part of any qty change in the orders they place.
Jim
|
|
| Author: | TheBrickGuys | | Posted: | Apr 6, 2024 23:52 | | Subject: | Re: Getting logged out/Search function | | Viewed: | 30 times | | Topic: | Problem | |
|
| In Problem, 1001bricks writes:
| | In Problem, here4bricks614 writes:
| | In Problem, 1001bricks writes:
| | In Problem, here4bricks614 writes:
| | How do I stop this website from logging me out on mobile browsers despite the
preferences cookies being enabled? I’ve been logged out four times today.
|
Site is old.
| | Why is the search function absolute garbage? I tried to look for solutions using
a few words and they were all excluded from the search results.
|
Site is old.
They're mostly focusing on Taxes (not even all of them) and Security.
But the Shipping methods are working (ignoring the fact you can't import/export
them), Buy All's a good move - but assuming Wanted-lists would work properly.
Collection is our latest joke.
Ah, but Studio is outstandigly good!
The rest works relatively well and reliably, but as if it was 2000 - see this
Forum?
|
This is nothing short of frustrating. Did the people “running” this site outsource
that responsibility to a chimp on an entire pharmacy’s worth of drugs? Is that
why nothing productive is getting done? Does this site even have an analytics
team?
|
The things is; most of us are VERY happy this site exists.
And for a site, at least, just staying alive is already a huge task
I'm very thankful to them for this.
|
+1+1+1+1+1+1+1+1+1+1+1+1+1+1+1+1+1+1+1+1+1+1+1+1+1+1+1+1+1+1+1+1+1+1+1+1+1+1+1
and several more.
|
|
| Author: | here4bricks614 | | Posted: | Apr 6, 2024 19:57 | | Subject: | Re: Getting logged out/Search function | | Viewed: | 31 times | | Topic: | Problem | |
|
| In Problem, 1001bricks writes:
| | In Problem, here4bricks614 writes:
| | In Problem, 1001bricks writes:
| | In Problem, here4bricks614 writes:
| | How do I stop this website from logging me out on mobile browsers despite the
preferences cookies being enabled? I’ve been logged out four times today.
|
Site is old.
| | Why is the search function absolute garbage? I tried to look for solutions using
a few words and they were all excluded from the search results.
|
Site is old.
They're mostly focusing on Taxes (not even all of them) and Security.
But the Shipping methods are working (ignoring the fact you can't import/export
them), Buy All's a good move - but assuming Wanted-lists would work properly.
Collection is our latest joke.
Ah, but Studio is outstandigly good!
The rest works relatively well and reliably, but as if it was 2000 - see this
Forum?
|
This is nothing short of frustrating. Did the people “running” this site outsource
that responsibility to a chimp on an entire pharmacy’s worth of drugs? Is that
why nothing productive is getting done? Does this site even have an analytics
team?
|
The things is; most of us are VERY happy this site exists.
And for a site, at least, just staying alive is already a huge task
I'm very thankful to them for this.
|
Improving user experience should be high on the list of priorities, but we see
constant complaints from new users and small stores. The focus seems to be around
features that people aren’t asking for.
|
|
| Author: | 1001bricks | | Posted: | Apr 6, 2024 19:44 | | Subject: | Re: Getting logged out/Search function | | Viewed: | 28 times | | Topic: | Problem | |
|
| In Problem, here4bricks614 writes:
| | In Problem, 1001bricks writes:
| | In Problem, here4bricks614 writes:
| | How do I stop this website from logging me out on mobile browsers despite the
preferences cookies being enabled? I’ve been logged out four times today.
|
Site is old.
| | Why is the search function absolute garbage? I tried to look for solutions using
a few words and they were all excluded from the search results.
|
Site is old.
They're mostly focusing on Taxes (not even all of them) and Security.
But the Shipping methods are working (ignoring the fact you can't import/export
them), Buy All's a good move - but assuming Wanted-lists would work properly.
Collection is our latest joke.
Ah, but Studio is outstandigly good!
The rest works relatively well and reliably, but as if it was 2000 - see this
Forum?
|
This is nothing short of frustrating. Did the people “running” this site outsource
that responsibility to a chimp on an entire pharmacy’s worth of drugs? Is that
why nothing productive is getting done? Does this site even have an analytics
team?
|
The things is; most of us are VERY happy this site exists.
And for a site, at least, just staying alive is already a huge task
I'm very thankful to them for this.
|
|
| Author: | here4bricks614 | | Posted: | Apr 6, 2024 19:38 | | Subject: | Re: Getting logged out/Search function | | Viewed: | 33 times | | Topic: | Problem | |
|
| In Problem, 1001bricks writes:
| | In Problem, here4bricks614 writes:
| | How do I stop this website from logging me out on mobile browsers despite the
preferences cookies being enabled? I’ve been logged out four times today.
|
Site is old.
| | Why is the search function absolute garbage? I tried to look for solutions using
a few words and they were all excluded from the search results.
|
Site is old.
They're mostly focusing on Taxes (not even all of them) and Security.
But the Shipping methods are working (ignoring the fact you can't import/export
them), Buy All's a good move - but assuming Wanted-lists would work properly.
Collection is our latest joke.
Ah, but Studio is outstandigly good!
The rest works relatively well and reliably, but as if it was 2000 - see this
Forum?
|
This is nothing short of frustrating. Did the people “running” this site outsource
that responsibility to a chimp on an entire pharmacy’s worth of drugs? Is that
why nothing productive is getting done? Does this site even have an analytics
team?
|
|
| Author: | 1001bricks | | Posted: | Apr 6, 2024 19:32 | | Subject: | Re: Getting logged out/Search function | | Viewed: | 35 times | | Topic: | Problem | |
|
| In Problem, here4bricks614 writes:
| | How do I stop this website from logging me out on mobile browsers despite the
preferences cookies being enabled? I’ve been logged out four times today.
|
Site is old.
| | Why is the search function absolute garbage? I tried to look for solutions using
a few words and they were all excluded from the search results.
|
Site is old.
They're mostly focusing on Taxes (not even all of them) and Security.
But the Shipping methods are working (ignoring the fact you can't import/export
them), Buy All's a good move - but assuming Wanted-lists would work properly.
Collection is our latest joke.
Ah, but Studio is outstandigly good!
The rest works relatively well and reliably, but as if it was 2000 - see this
Forum?
|
|
| Author: | here4bricks614 | | Posted: | Apr 6, 2024 18:41 | | Subject: | Getting logged out/Search function | | Viewed: | 86 times | | Topic: | Problem | |
|
| How do I stop this website from logging me out on mobile browsers despite the
preferences cookies being enabled? I’ve been logged out four times today.
Why is the search function absolute garbage? I tried to look for solutions using
a few words and they were all excluded from the search results.
|
|
| Author: | infinibrix | | Posted: | Apr 5, 2024 19:23 | | Subject: | Re: Order Item Removal Requests Too Complicated! | | Viewed: | 34 times | | Topic: | Problem | |
|
| In Problem, hpoort writes:
| | In Problem, infinibrix writes:
| | In Problem, Bricklord writes:
| | I would posit that the problem isn't with the process being overly complicated
but with the users themselves. Most are simply too lazy to read anything, and
couple that with the managements insistence on pandering to those glued to their
phones as opposed to using a proper computer and that accounts for 90%+ of the
issues with Buyers claiming to have problems doing something on here. My experience
anyway.
|
This may be the case to an extent but if we're to accept that as the reason
then all the more reason to simplify and change the process. The thing is I'm
dealing with a newish buyer anyway and so the whole site to them no doubt already
looks quite complex. The other thing is from their point of view they just want
to order what they need. They don't want to read lots of processes, read
store terms or hunt around for links and so I feel they have every right to be
lazy in that respect and I think if Bricklink wants more people shopping here
then things overall need to be simplified.
For starters why is it you can cancel an order without a customers approval but
your can't amend an order without their approval?
Even if I've made a stock oversight and its my own fault. I still have to
make the change to the order regardless of whether the customer approves or not?
Therefore why bother having to inconvenience the customer even further with having
to approve/accept the change. The process for the customer should be simple,
either they accept the changes I've made to the order or we agree to cancel
the order in its entirety there is no need for them to need to hunt down a link
to approve anything?
|
Or approach it differently and don't bother the buyer at all:
- you were offering the items for sale and according to TOS had them in hand
- you made the stock oversight if you accidentally didn't have them in hand
- you are well versed on Bricklink and can easily buy the missing parts
- you can simply inform the buyer that a slight delay may occur because you are
doing your best to provide them with the quality parts that they expect of you
- and you ship out the order complete.
|
And all your comments here come from your own personal experience of selling?
Your viewpoint here only shows me that you lack all tolerance and understanding.
A transaction works both ways, You expect sellers to provide you with everything
you need, a complex, diverse range of tiny parts whilst holding them fully accountable
for even the smallest of oversights and this is prior to an order even having
been paid for??
Sellers may very well pander to your expectations but if they feel your being
too one sided they may not wish to do business with you for a second time - Red
Flag Alert!
|
|
| Author: | hpoort | | Posted: | Apr 5, 2024 12:30 | | Subject: | Re: Order Item Removal Requests Too Complicated! | | Viewed: | 28 times | | Topic: | Problem | |
|
| In Problem, infinibrix writes:
| | In Problem, Bricklord writes:
| | I would posit that the problem isn't with the process being overly complicated
but with the users themselves. Most are simply too lazy to read anything, and
couple that with the managements insistence on pandering to those glued to their
phones as opposed to using a proper computer and that accounts for 90%+ of the
issues with Buyers claiming to have problems doing something on here. My experience
anyway.
|
This may be the case to an extent but if we're to accept that as the reason
then all the more reason to simplify and change the process. The thing is I'm
dealing with a newish buyer anyway and so the whole site to them no doubt already
looks quite complex. The other thing is from their point of view they just want
to order what they need. They don't want to read lots of processes, read
store terms or hunt around for links and so I feel they have every right to be
lazy in that respect and I think if Bricklink wants more people shopping here
then things overall need to be simplified.
For starters why is it you can cancel an order without a customers approval but
your can't amend an order without their approval?
Even if I've made a stock oversight and its my own fault. I still have to
make the change to the order regardless of whether the customer approves or not?
Therefore why bother having to inconvenience the customer even further with having
to approve/accept the change. The process for the customer should be simple,
either they accept the changes I've made to the order or we agree to cancel
the order in its entirety there is no need for them to need to hunt down a link
to approve anything?
|
Or approach it differently and don't bother the buyer at all:
- you were offering the items for sale and according to TOS had them in hand
- you made the stock oversight if you accidentally didn't have them in hand
- you are well versed on Bricklink and can easily buy the missing parts
- you can simply inform the buyer that a slight delay may occur because you are
doing your best to provide them with the quality parts that they expect of you
- and you ship out the order complete.
|
|
| Author: | runner.caller | | Posted: | Apr 5, 2024 11:21 | | Subject: | Re: Order Item Removal Requests Too Complicated! | | Viewed: | 47 times | | Topic: | Problem | |
|
| In Problem, infinibrix writes:
| | My customers always seem to have trouble following the process of approving an
item removal request therefore can these steps not be simplified?
A buyer has asked me to reduce the quantities they have ordered on a couple of
items from their order and whilst I have no issue submitting the request they
always seem to struggle to approve it despite me spending lots of extra time
trying to explain and direct them to 'MY BL' and then 'MY ACTIVITY'
to locate and approve the request
Does it even really need the customer to approve the change? If so why?
If this is required it really needs to be much, much easier for the customer
to do as the last thing I want is to frustrate my customer unduly before we've
even started especially since they actually originally asked me to cancel the
whole order so they could re-order what they needed (They asked me this twice
already!) but since it was only a couple of small adjustments I suggested against
this on the basis that cancelled orders make things messy and are not an ideal
look for a seller (Potential fee avoidance attempts from BL's point of view!)
any other sellers experience similar problems?
|
I've never gotten it to work when it's an IC order, so I just end up
eating the selling fees on items that were sold, refunded. And then I re-list
the item later.
I guess if Bricklink made it easier, they would miss out on revenue so they're
actually incentivized not to make it easier.
|
|
| Author: | Stellar | | Posted: | Apr 5, 2024 11:17 | | Subject: | Re: Order Item Removal Requests Too Complicated! | | Viewed: | 30 times | | Topic: | Problem | |
|
| In Problem, qwertyboy writes:
| | In Problem, infinibrix writes:
| | My customers always seem to have trouble following the process of approving an
item removal request therefore can these steps not be simplified?
A buyer has asked me to reduce the quantities they have ordered on a couple of
items from their order and whilst I have no issue submitting the request they
always seem to struggle to approve it despite me spending lots of extra time
trying to explain and direct them to 'MY BL' and then 'MY ACTIVITY'
to locate and approve the request
|
We always send them the link that goes directly to that page:
https://www.bricklink.com/retractOrderItem.asp
Niek.
|
Me too!
Sergio
|
|
| Author: | qwertyboy | | Posted: | Apr 5, 2024 10:34 | | Subject: | Re: Order Item Removal Requests Too Complicated! | | Viewed: | 41 times | | Topic: | Problem | |
|
| In Problem, infinibrix writes:
| | My customers always seem to have trouble following the process of approving an
item removal request therefore can these steps not be simplified?
A buyer has asked me to reduce the quantities they have ordered on a couple of
items from their order and whilst I have no issue submitting the request they
always seem to struggle to approve it despite me spending lots of extra time
trying to explain and direct them to 'MY BL' and then 'MY ACTIVITY'
to locate and approve the request
|
We always send them the link that goes directly to that page:
https://www.bricklink.com/retractOrderItem.asp
Niek.
|
|
| Author: | infinibrix | | Posted: | Apr 5, 2024 06:32 | | Subject: | Re: Order Item Removal Requests Too Complicated! | | Viewed: | 45 times | | Topic: | Problem | |
|
| In Problem, Bricklord writes:
| | I would posit that the problem isn't with the process being overly complicated
but with the users themselves. Most are simply too lazy to read anything, and
couple that with the managements insistence on pandering to those glued to their
phones as opposed to using a proper computer and that accounts for 90%+ of the
issues with Buyers claiming to have problems doing something on here. My experience
anyway.
|
This may be the case to an extent but if we're to accept that as the reason
then all the more reason to simplify and change the process. The thing is I'm
dealing with a newish buyer anyway and so the whole site to them no doubt already
looks quite complex. The other thing is from their point of view they just want
to order what they need. They don't want to read lots of processes, read
store terms or hunt around for links and so I feel they have every right to be
lazy in that respect and I think if Bricklink wants more people shopping here
then things overall need to be simplified.
For starters why is it you can cancel an order without a customers approval but
your can't amend an order without their approval?
Even if I've made a stock oversight and its my own fault. I still have to
make the change to the order regardless of whether the customer approves or not?
Therefore why bother having to inconvenience the customer even further with having
to approve/accept the change. The process for the customer should be simple,
either they accept the changes I've made to the order or we agree to cancel
the order in its entirety there is no need for them to need to hunt down a link
to approve anything?
|
|
| Author: | Bricklord | | Posted: | Apr 5, 2024 00:38 | | Subject: | Re: Order Item Removal Requests Too Complicated! | | Viewed: | 44 times | | Topic: | Problem | |
|
| I would posit that the problem isn't with the process being overly complicated
but with the users themselves. Most are simply too lazy to read anything, and
couple that with the managements insistence on pandering to those glued to their
phones as opposed to using a proper computer and that accounts for 90%+ of the
issues with Buyers claiming to have problems doing something on here. My experience
anyway.
In Problem, infinibrix writes:
| | My customers always seem to have trouble following the process of approving an
item removal request therefore can these steps not be simplified?
A buyer has asked me to reduce the quantities they have ordered on a couple of
items from their order and whilst I have no issue submitting the request they
always seem to struggle to approve it despite me spending lots of extra time
trying to explain and direct them to 'MY BL' and then 'MY ACTIVITY'
to locate and approve the request
Does it even really need the customer to approve the change? If so why?
If this is required it really needs to be much, much easier for the customer
to do as the last thing I want is to frustrate my customer unduly before we've
even started especially since they actually originally asked me to cancel the
whole order so they could re-order what they needed (They asked me this twice
already!) but since it was only a couple of small adjustments I suggested against
this on the basis that cancelled orders make things messy and are not an ideal
look for a seller (Potential fee avoidance attempts from BL's point of view!)
any other sellers experience similar problems?
|
|
|
| Author: | infinibrix | | Posted: | Apr 4, 2024 21:44 | | Subject: | Re: Order Item Removal Requests Too Complicated! | | Viewed: | 46 times | | Topic: | Problem | |
|
| In Problem, Nubs_Select writes:
| | | | any other sellers experience similar problems?
|
yup, its extremely confusing to use. id strongly recommend if the item missing/not
wanted is not that expensive then simply refund the customer and let them know
if paid and if unpaid then to add a credit to the order value. if done it this
way for a long time and haven't had any issues
|
I'm glad I'm not the only one then
However the customer hasn't paid or even received an invoice from me yet
since I can't do this until changes have been approved
When picking lots of orders I think it important that the quantities display
within the order correctly else I'll more than likely end up picking the
order incorrectly hence I don't think the credit option would work for me
|
|
| Author: | Nubs_Select | | Posted: | Apr 4, 2024 21:35 | | Subject: | Re: Order Item Removal Requests Too Complicated! | | Viewed: | 34 times | | Topic: | Problem | |
|
| | | any other sellers experience similar problems?
|
yup, its extremely confusing to use. id strongly recommend if the item missing/not
wanted is not that expensive then simply refund the customer and let them know
if paid and if unpaid then to add a credit to the order value. if done it this
way for a long time and haven't had any issues
|
|
| Author: | infinibrix | | Posted: | Apr 4, 2024 21:32 | | Subject: | Order Item Removal Requests Too Complicated! | | Viewed: | 136 times | | Topic: | Problem | |
|
| My customers always seem to have trouble following the process of approving an
item removal request therefore can these steps not be simplified?
A buyer has asked me to reduce the quantities they have ordered on a couple of
items from their order and whilst I have no issue submitting the request they
always seem to struggle to approve it despite me spending lots of extra time
trying to explain and direct them to 'MY BL' and then 'MY ACTIVITY'
to locate and approve the request
Does it even really need the customer to approve the change? If so why?
If this is required it really needs to be much, much easier for the customer
to do as the last thing I want is to frustrate my customer unduly before we've
even started especially since they actually originally asked me to cancel the
whole order so they could re-order what they needed (They asked me this twice
already!) but since it was only a couple of small adjustments I suggested against
this on the basis that cancelled orders make things messy and are not an ideal
look for a seller (Potential fee avoidance attempts from BL's point of view!)
any other sellers experience similar problems?
|
|
| Author: | MrUzagi | | Posted: | Apr 2, 2024 06:14 | | Subject: | Re: Shpment went AWOL, Refund is complete | | Viewed: | 47 times | | Topic: | Problem | |
|
| In Problem, axaday writes:
| | You don't need to worry or do anything about it. If the seller cancels the
order, they get their fees back, but depending not he size of the order that
might not feel worth their time. In six months they order will disappear.
|
Ok, I'll just file it away then. That seems to be the simplest course of
action for me. Thanks.
|
| Author: | MrUzagi | | Posted: | Apr 2, 2024 06:13 | | Subject: | Re: Shpment went AWOL, Refund is complete | | Viewed: | 29 times | | Topic: | Problem | |
|
| In Problem, yorbrick writes:
Alright. That seems like the road of least resistance. I will probably do that
then. Thanks.
|
|
| Author: | axaday | | Posted: | Apr 2, 2024 05:43 | | Subject: | Re: Shpment went AWOL, Refund is complete | | Viewed: | 40 times | | Topic: | Problem | |
|
| In Problem, MrUzagi writes:
| | I've searched for this issue and I'm not sure what to do.
I placed an order over two months ago and according to the seller the shipment
got lost by the shipping company shortly after. The seller has been nothing but
professional through the whole thing and I have received a full refund of my
order a couple of weeks ago. Both the seller and I gave each other positive reviews.
But the order is still sitting as "Shipped" and now I'm not sure
what to do. Should I just change it to "Completed" even though the parts
never arrived? I have no option to cancel the order at this stage, that seems
to be the prerogative of the seller, however only if done before shipping if
I understand correctly. There seems to be an option to cancel through the "Problem
Order" page, but that doesn't quite sit right with me either as it looks
like it would file a NSS alert, which is not really the case. I believe the seller
did what they could and I don't want to give them any more trouble over this.
Any advice?
|
You don't need to worry or do anything about it. If the seller cancels the
order, they get their fees back, but depending not he size of the order that
might not feel worth their time. In six months they order will disappear.
|
|
| Author: | yorbrick | | Posted: | Apr 2, 2024 04:59 | | Subject: | Re: Shpment went AWOL, Refund is complete | | Viewed: | 41 times | | Topic: | Problem | |
|
|
File it or ignore it.
|
|
| Author: | MrUzagi | | Posted: | Apr 2, 2024 04:44 | | Subject: | Shpment went AWOL, Refund is complete | | Viewed: | 137 times | | Topic: | Problem | |
|
| I've searched for this issue and I'm not sure what to do.
I placed an order over two months ago and according to the seller the shipment
got lost by the shipping company shortly after. The seller has been nothing but
professional through the whole thing and I have received a full refund of my
order a couple of weeks ago. Both the seller and I gave each other positive reviews.
But the order is still sitting as "Shipped" and now I'm not sure
what to do. Should I just change it to "Completed" even though the parts
never arrived? I have no option to cancel the order at this stage, that seems
to be the prerogative of the seller, however only if done before shipping if
I understand correctly. There seems to be an option to cancel through the "Problem
Order" page, but that doesn't quite sit right with me either as it looks
like it would file a NSS alert, which is not really the case. I believe the seller
did what they could and I don't want to give them any more trouble over this.
Any advice?
|
|
| Author: | 1001bricks | | Posted: | Apr 1, 2024 08:41 | | Subject: | Re: Weird Seller | | Viewed: | 49 times | | Topic: | Problem | |
|
| In Problem, PaulOfBricks writes:
| | I don't usually have many problems but this weekend I have a weird seller
offers PayPal for international customer
quoted me PayPal on my quote
but then invoiced IBAN
and says use IBAN or I think he wants to give me NPB
refuses to accept PayPal because "the British" always complain about
his orders.
|
Do report the shop!
https://www.bricklink.com/problemMember.asp
A shop can't propose PayPal and ask for IBAN.
Maybe the shop isn't even authorized to propose IBAN?
I'm confident that if you get an NPB it'll be removed by an Admin.
|
|
| Author: | yorbrick | | Posted: | Apr 1, 2024 08:39 | | Subject: | Re: Weird Seller | | Viewed: | 44 times | | Topic: | Problem | |
|
| | | refuses to accept PayPal because "the British" always complain about
his orders.
|
If every British person that buys from him complains, then chances are he sends
poor quality parts.
Can't you just file a cancellation request, if he refuses then report for
not allowing paypal even though it is offered. Asking for IBAN when offering
paypal is no different to offering PayPal then demanding friends and family.
|
|
| Author: | PaulOfBricks | | Posted: | Apr 1, 2024 06:35 | | Subject: | Re: Weird Seller | | Viewed: | 55 times | | Topic: | Problem | |
|
| In Problem, StarBrick writes:
| | This reads more like changing of terms AFTER the order was placed.
THAT is what starts of an entire cascade of incorrect steps including the taking
hostage of the buyer with a NPB thread.
Report this behaviour at @Admin_Russell or the Helpdesk please!
|
thanks I thought at much, I will see what happens with the seller first, it they
come to any sence
|
|
| Author: | StarBrick | | Posted: | Apr 1, 2024 06:11 | | Subject: | Re: Weird Seller | | Viewed: | 40 times | | Topic: | Problem | |
|
| This reads more like changing of terms AFTER the order was placed.
THAT is what starts of an entire cascade of incorrect steps including the taking
hostage of the buyer with a NPB thread.
Report this behaviour at @Admin_Russell or the Helpdesk please!
|
|
| Author: | infinibrix | | Posted: | Apr 1, 2024 06:00 | | Subject: | Re: Weird Seller | | Viewed: | 43 times | | Topic: | Problem | |
|
| In Problem, PaulOfBricks writes:
| | I don't usually have many problems but this weekend I have a weird seller
offers PayPal for international customer
quoted me PayPal on my quote
but then invoiced IBAN
and says use IBAN or I think he wants to give me NPB
refuses to accept PayPal because "the British" always complain about
his orders.
Firstly this business store in Germany Surely regardless of payment method, they
should have certain legal requirements, such returns etc, that regardless of
payment method they should adhere to, which I think they probably feel they can
get out of with bank transfer.
I should have avoided this seller tbh as they already just replied 'dont
order' to my questions with regard to the variants, (lots of cheap rare variant
listing), I thought id take the gamble, but then after my issues I checked their
feedback, I should of done this first. many many complaints of rudeness. Oh well
happy easter!
but my point is can a seller give me a NPB for failing to pay after they refuse
to accept a payment method that they quoted with but later changed.
|
This illustrates again why I think the whole process of filing NPB's against
buyers should be scrapped. No seller should have a hold over a buyer in this
way. If the buyer doesn't agree to the invoice or the terms of sale (Nobody
has sufficient time to read every sellers terms in full) then they should be
within their right to cancel the order or as I've suggested recently turn
manual orders into quotes so there is no commitment to place an order:-
https://www.bricklink.com/message.asp?ID=1461685
In your specific case I would ask the seller to mutually agree to cancel since
they do not accept paypal which differs from their original terms. If they start
filing a NPB then I would report to Bricklink whilst directing them to your post
here which shows you raised your initial concerns prior to receiving the NPB
|
|
| Author: | PaulOfBricks | | Posted: | Apr 1, 2024 05:36 | | Subject: | Weird Seller | | Viewed: | 195 times | | Topic: | Problem | |
|
| I don't usually have many problems but this weekend I have a weird seller
offers PayPal for international customer
quoted me PayPal on my quote
but then invoiced IBAN
and says use IBAN or I think he wants to give me NPB
refuses to accept PayPal because "the British" always complain about
his orders.
Firstly this business store in Germany Surely regardless of payment method, they
should have certain legal requirements, such returns etc, that regardless of
payment method they should adhere to, which I think they probably feel they can
get out of with bank transfer.
I should have avoided this seller tbh as they already just replied 'dont
order' to my questions with regard to the variants, (lots of cheap rare variant
listing), I thought id take the gamble, but then after my issues I checked their
feedback, I should of done this first. many many complaints of rudeness. Oh well
happy easter!
but my point is can a seller give me a NPB for failing to pay after they refuse
to accept a payment method that they quoted with but later changed.
|
|
| Author: | StarBrick | | Posted: | Mar 28, 2024 14:56 | | Subject: | Re: Failed to authenticate to Bricklink as a user | | Viewed: | 40 times | | Topic: | Problem | |
|
| In Problem, BricksOfMidgard writes:
| | Hello,
I need someone to help me with Brickstore.
When I try to download a Bricklink inventory to Brickstore.
There is pop up window with message “ brickstore failed to authenticate with
bricklink as user bricksofmidgard. invalid device information!”
I changed password on bricklink and updated it in Brickstore and nothing.
I even installed a new Brickstore and still nothing.
Can someone help please.
Slawomir
|
Follow this thread: https://www.bricklink.com/message.asp?ID=1461759
|
|
| Author: | BricksOfMidgard | | Posted: | Mar 28, 2024 14:51 | | Subject: | Failed to authenticate to Bricklink as a user | | Viewed: | 92 times | | Topic: | Problem | |
|
| Hello,
I need someone to help me with Brickstore.
When I try to download a Bricklink inventory to Brickstore.
There is pop up window with message “ brickstore failed to authenticate with
bricklink as user bricksofmidgard. invalid device information!”
I changed password on bricklink and updated it in Brickstore and nothing.
I even installed a new Brickstore and still nothing.
Can someone help please.
Slawomir
|
|
| Author: | 1001bricks | | Posted: | Mar 28, 2024 12:14 | | Subject: | Re: all my store sales past october gone | | Viewed: | 27 times | | Topic: | Problem | |
|
| In Problem, macebobo writes:
| | In Problem, 1001bricks writes:
| | Just FYI, it's 6 months exactly, not 180 days or any number of days.
And yes it's written in the Invoice template 180 days, it's an error,
but you could edit it in your template, or don't care of course.
|
Merci beaucoup mon ami !
It now reads:
Note: All orders (except orders in NSS, NRS, NPB, or NPX status) and all items
in those orders are purged from the BrickLink website exactly 6 months after
the order date. Please download your orders regularly for record-keeping purposes:
https://www.bricklink.com/orderExcel.asp".
|
Ah sure - I'm using an older one not default, so it stayed showing 180 days
|
|
| Author: | macebobo | | Posted: | Mar 27, 2024 20:57 | | Subject: | Re: all my store sales past october gone | | Viewed: | 54 times | | Topic: | Problem | |
|
| In Problem, 1001bricks writes:
| | Just FYI, it's 6 months exactly, not 180 days or any number of days.
And yes it's written in the Invoice template 180 days, it's an error,
but you could edit it in your template, or don't care of course.
|
Merci beaucoup mon ami !
It now reads:
Note: All orders (except orders in NSS, NRS, NPB, or NPX status) and all items
in those orders are purged from the BrickLink website exactly 6 months after
the order date. Please download your orders regularly for record-keeping purposes:
https://www.bricklink.com/orderExcel.asp".
|
|
| Author: | 1001bricks | | Posted: | Mar 27, 2024 20:45 | | Subject: | Re: all my store sales past october gone | | Viewed: | 42 times | | Topic: | Problem | |
|
| In Problem, macebobo writes:
| | In Problem, Droffats017 writes:
| | im a seller and all records of my sales past october are gone. anyone else experiencing
this. need to know what i made so i can pay taxes
|
https://www.bricklink.com/messageThread.asp?ID=355504&nID=1461411
and also at the bottom of all order emails.
Note: All orders (except orders in NSS, NRS, NPB, or NPX status) and all items
in those orders are purged from the BrickLink website 180 days after the order
date. Please download your orders regularly for record-keeping purposes: https://www.bricklink.com/orderExcel.asp.
|
Just FYI, it's 6 months exactly, not 180 days or any number of days.
And yes it's written in the Invoice template 180 days, it's an error,
but you could edit it in your template, or don't care of course.
|
|
| Author: | macebobo | | Posted: | Mar 27, 2024 20:39 | | Subject: | Re: all my store sales past october gone | | Viewed: | 39 times | | Topic: | Problem | |
|
| In Problem, Droffats017 writes:
| | im a seller and all records of my sales past october are gone. anyone else experiencing
this. need to know what i made so i can pay taxes
|
https://www.bricklink.com/messageThread.asp?ID=355504&nID=1461411
and also at the bottom of all order emails.
Note: All orders (except orders in NSS, NRS, NPB, or NPX status) and all items
in those orders are purged from the BrickLink website 180 days after the order
date. Please download your orders regularly for record-keeping purposes: https://www.bricklink.com/orderExcel.asp.
|
|
| Author: | stranqe | | Posted: | Mar 27, 2024 20:23 | | Subject: | Re: all my store sales past october gone | | Viewed: | 39 times | | Topic: | Problem | |
|
| In Problem, Droffats017 writes:
| | im a seller and all records of my sales past october are gone. anyone else experiencing
this. need to know what i made so i can pay taxes
|
bricklink only stores 6 months detailed data. go here to get a report with more
than 6 months:
https://www.bricklink.com/orderExcel.asp?orderType=received
|
| Author: | Droffats017 | | Posted: | Mar 27, 2024 20:18 | | Subject: | all my store sales past october gone | | Viewed: | 108 times | | Topic: | Problem | |
|
| im a seller and all records of my sales past october are gone. anyone else experiencing
this. need to know what i made so i can pay taxes
|
| Author: | SylvainLS | | Posted: | Mar 25, 2024 10:06 | | Subject: | Re: Unable to change qty in wanted lists. | | Viewed: | 31 times | | Topic: | Problem | |
|
| In Problem, kukunder writes:
| | Hello,
From couple of days I haven't able to change the wanted qty of any item from
any wanted list.
Every time I received error :
"Only one item/color combination is allowed per Wanted list"
That's for ALL of my wanted lists.
Any idea ?
Regards !
|
https://www.bricklink.com/message.asp?ID=1455953
(It’s because parts were merged in the catalogue.)
|
|
| Author: | kukunder | | Posted: | Mar 25, 2024 04:18 | | Subject: | Unable to change qty in wanted lists. | | Viewed: | 65 times | | Topic: | Problem | |
|
| Hello,
From couple of days I haven't able to change the wanted qty of any item from
any wanted list.
Every time I received error :
"Only one item/color combination is allowed per Wanted list"
That's for ALL of my wanted lists.
Any idea ?
Regards !
|
| Author: | ou_sooners_1 | | Posted: | Mar 25, 2024 00:44 | | Subject: | Re: Phishing email just received | | Viewed: | 62 times | | Topic: | Problem | |
|
| We got it too. And I agree, it was a good one
Mike
In Problem, POPS_BLOCK_SHOP writes:
| | Watch out this is a really good one. The email address blservice gave it away.
|
|
| Author: | popsicle | | Posted: | Mar 24, 2024 22:02 | | Subject: | Re: Phishing email just received | | Viewed: | 71 times | | Topic: | Problem | |
|
| In Problem, POPS_BLOCK_SHOP writes:
| | Watch out this is a really good one. The email address blservice gave it away.
|
https://www.bricklink.com/message.asp?ID=1460563
|
| Author: | POPS_BLOCK_SHOP | | Posted: | Mar 24, 2024 21:58 | | Subject: | Phishing email just received | | Viewed: | 160 times | | Topic: | Problem | |
|
| | Watch out this is a really good one. The email address blservice gave it away. |
|
| Author: | ccroxton | | Posted: | Mar 24, 2024 21:29 | | Subject: | No order notifications | | Viewed: | 61 times | | Topic: | Problem | |
|
| I have not been notified of any orders for several days. Then today I happened
to click on the Orders button, and there is a pile of orders, waiting to be shipped!
How do I get the notifications to work???
|
|
| Author: | rainbowmist | | Posted: | Mar 22, 2024 18:53 | | Subject: | Re: WARNING! Login from new device phishing emai | | Viewed: | 65 times | | Topic: | Problem | |
|
| In Problem, chetzler writes:
| | I had a couple of these this in my inbox this morning. They looked completely
legitimate. I did login in to BL from my work computer yesterday. When I have
logged in from work before, I have never gotten an email like this, but I thought
that maybe it was a new security feature.
Anyway, with a very official looking email in hand, I clicked the suggested logout
from all devices link and had just about entered my credentials in the new window
to log back in when I noticed two minor things that seemed just a bit off. I
won’t mention those things in case the fraudsters are reading. I looked at the
URL and it was very close to BrickLink’s (it was not the .net one that was mentioned
before). Needless to say, I immediately changed my PW and reenabled the one-time
PIN (I had turned it off because I was being repeatedly prompted for a new PIN
over very short time spans even when I hadn’t logged out). I’ll also be downloading
my inventory
BE DILIGENT! I’m a pretty suspicious person when it comes to online activity,
but, in my groggy state when I woke up this morning, I almost fell for a phishing
scheme presented as a very authentic looking email.
I don’t know why BrickLink has suddenly become such a juicy target. These people
have no hope of accessing any of my monetary accounts. I assume the goal is
to gain access to a legitimate shop so they can list high-dollar items to scam
other members.
I don’t envy the task that management has ahead of them, but they need to take
some substantive action soon. This is not a primary income stream for me, so
at some point, when all the gummy spam, phishing attempts, and slow helpdesk
response times become too much, I may simply close my store for a while. I don’t
need the extra headache of worrying about online security for a part-time job.
Had I fallen victim to this phishing attempt, I’m really not sure how much effort
I would have put into trying to recover my account. BrickLink just feels like
a dicier selling proposition lately.
|
Had one last night and it went right to my spam folder. Could tell right away
it was not from Bricklink.
|
|
| Author: | yorbrick | | Posted: | Mar 22, 2024 09:32 | | Subject: | Re: WARNING! Login from new device phishing emai | | Viewed: | 68 times | | Topic: | Problem | |
|
| | | I almost feel tempted to mess with these people a bit by following the link,
then entering "BIGSC" as the username and "AMMER" as the password.
Maybe even submitting random jumbles of letters, numbers, and quotation symbols
as both the username and password.
|
I did a few yesterday with fake details. They instantly ask you for the OTP once
you have entered the account details, so presumably they are not being read by
a human but just automatically scraped and submitted to bricklink to generate
the OTP passcode request to be sent to your email, which the scammed user is
then meant to give to the scammer through their website.
|
|
| Author: | rsjarobinson | | Posted: | Mar 22, 2024 08:44 | | Subject: | Re: WARNING! Login from new device phishing emai | | Viewed: | 43 times | | Topic: | Problem | |
|
| In Problem, Llewyn writes:
| | In Problem, UTLF writes:
| | Somehow, a large list of Bricklink account emails was acquired within the last
few months
|
Not necessarily in the last few months, there have been waves of spam targeted
at sellers several times previously - I know I had several around April 2022
purporting to be from a genuine store here about bulk purchasing, and there were
a lot of comments from others about the same thing.
It's very easy to get sellers' emails at least, all it needs is a little
automation rather than any hacking. Every time someone sends you a contact message
enquiring about an item in your store, if they request a copy to their email
I believe it will include the seller's address. I think we all get obvious
timewaster enquiries from time to time and just dismiss them.
I'd be very curious if people with only buyer privileges have also had these
spam messages.
|
I am a buyer only and I have gotten several of these emails in the last several
days. I have only been on the platform for about a year so if there was a release
of emails it is fairly new.
|
|
| Author: | Hardstone | | Posted: | Mar 22, 2024 07:39 | | Subject: | Re: WARNING! Login from new device phishing emai | | Viewed: | 52 times | | Topic: | Problem | |
|
| In Problem, chetzler writes:
| | I had a couple of these this in my inbox this morning. They looked completely
legitimate. I did login in to BL from my work computer yesterday. When I have
logged in from work before, I have never gotten an email like this, but I thought
that maybe it was a new security feature.
Anyway, with a very official looking email in hand, I clicked the suggested logout
from all devices link and had just about entered my credentials in the new window
to log back in when I noticed two minor things that seemed just a bit off. I
won’t mention those things in case the fraudsters are reading. I looked at the
URL and it was very close to BrickLink’s (it was not the .net one that was mentioned
before). Needless to say, I immediately changed my PW and reenabled the one-time
PIN (I had turned it off because I was being repeatedly prompted for a new PIN
over very short time spans even when I hadn’t logged out). I’ll also be downloading
my inventory
BE DILIGENT! I’m a pretty suspicious person when it comes to online activity,
but, in my groggy state when I woke up this morning, I almost fell for a phishing
scheme presented as a very authentic looking email.
I don’t know why BrickLink has suddenly become such a juicy target. These people
have no hope of accessing any of my monetary accounts. I assume the goal is
to gain access to a legitimate shop so they can list high-dollar items to scam
other members.
I don’t envy the task that management has ahead of them, but they need to take
some substantive action soon. This is not a primary income stream for me, so
at some point, when all the gummy spam, phishing attempts, and slow helpdesk
response times become too much, I may simply close my store for a while. I don’t
need the extra headache of worrying about online security for a part-time job.
Had I fallen victim to this phishing attempt, I’m really not sure how much effort
I would have put into trying to recover my account. BrickLink just feels like
a dicier selling proposition lately.
|
I almost feel tempted to mess with these people a bit by following the link,
then entering "BIGSC" as the username and "AMMER" as the password.
Maybe even submitting random jumbles of letters, numbers, and quotation symbols
as both the username and password.
|
|
| Author: | yorbrick | | Posted: | Mar 22, 2024 03:21 | | Subject: | Re: WARNING! Login from new device phishing emai | | Viewed: | 61 times | | Topic: | Problem | |
|
| | |
You have some very good points here. The whole communication architecture on
BrickLink is definitely in need of some upgrades. They may want to start looking
into it sooner rather than later.
For example, every transaction I have on eBay has everything done through the
eBay platform. There is never any communication outside of the platform between
myself and anyone that I purchase something from. In that way, the user on the
other end remains completely anonymous. It would be a good model to look into.
|
That is partly so they can monitor communication and partly (probably mostly)
to stop deals being done outside of eBay. Anonymity is just a by-product. Here,
any businesses selling on ebay (or elsewhere) are required to have their identity
and address shown before a buyer decides to buy.
|
|
| Author: | randyf | | Posted: | Mar 22, 2024 03:06 | | Subject: | Re: WARNING! Login from new device phishing emai | | Viewed: | 57 times | | Topic: | Problem | |
|
| In Problem, chetzler writes:
| | In Problem, waltzking writes:
| | As someone not in any LEGO groups (or at least not using my BL email address),
and am still getting the scam emails, I am certain it related to either the hack
or fake contact/orders on BL that can harvest seller emails. Had a lot of these
orders, immediate cancel request, and no contact there after a few months back.
I know it was to phish my seller info as often as the pattern was repeated exactly.
But even messages we reply to can do this as the system still lonks our email
to those. It really should not do this unless an order is placed, or even confirmed
as paid by the system (instant or seller marked). Simply put, contact info should
remain better protected until a transaction is deemed legit. BL is largely an
open book for all seller info if the party wanting to phish it knows how the
site works.
Waltzking
|
Is there any need at all for buyers/sellers to see each other's email contact
info even on legitimate orders? Maybe I've been using instant checkout and
the pay now button for so long I have forgotton, but it has been a while since
a buyer has made a payment directly to my email address. Since BrickLink implemented
sales tax collection, all (at least all of my) payments are negotiated through
PayPal Marketplace.
Maybe other payment methods require an email address.
I know some people send photos via email (if only we could attach photos to a
BL message!).
I'd be perfectly happy to have "public-facing email address" be an
option that I can enable/disable at will.
|
You have some very good points here. The whole communication architecture on
BrickLink is definitely in need of some upgrades. They may want to start looking
into it sooner rather than later.
For example, every transaction I have on eBay has everything done through the
eBay platform. There is never any communication outside of the platform between
myself and anyone that I purchase something from. In that way, the user on the
other end remains completely anonymous. It would be a good model to look into.
|
|
| Author: | 1001bricks | | Posted: | Mar 21, 2024 21:22 | | Subject: | Re: WARNING! Login from new device phishing emai | | Viewed: | 60 times | | Topic: | Problem | |
|
| In Problem, CCBricks writes:
| | Well, I'll be one of the first to say that I did click the link. I noticed
the .com.co and knew something wasn't right. I'm not happy
with myself, but I immediately went in and changed the password...three times.
I'm going to say that I got lucky (extremely) and caught it at the right
time.
|
Thanks to be honest!
You've got a pretty quick and sane reaction, that's VERY fine, congratulations!
Remember to check if you used this pass somewhere else, and then change it there...
| | I did a download of my inventory with BrickStore to compare totals. This is what
I found: the total number of items (parts) is off by 4 and the dollar amount
is off by $2.56. This is possibly due to a couple of lots that I have retained
that are not zeroed out. I also looked at the "newest items" to see
if any were added, which I can confirm nothing was added. I also verified the
lot totals were correct (main store and stock rooms).
|
Yes, also some parts may be in the 10 min checkout "reservation" and/or
minor glitches.
As you said a $2 discrepency (I'm sure you can explain later on) isn't
a problem.
| | I strongly suggest every seller download BrickStore and performing a back up,
especially each day, or after sales. I usually do one a day.
|
Absolutely - I repeat it like every week in forum, but hey?
And/or, at the MINIMUM download your Inventory in XML, as BrickStore can open
it later on:
https://www.bricklink.com/invExcel.asp
| | Hopefully BrickLink will post a banner on the main page to warn EVERY user about
this.
|
Yep, but for this we'd need an internal Notification system...
That is VERY needed in fact and IMO.
|
|
| Author: | CCBricks | | Posted: | Mar 21, 2024 21:12 | | Subject: | Re: WARNING! Login from new device phishing emai | | Viewed: | 51 times | | Topic: | Problem | |
|
| Well, I'll be one of the first to say that I did click the link. I noticed
the .com.co and knew something wasn't right. I'm not happy
with myself, but I immediately went in and changed the password...three times.
I'm going to say that I got lucky (extremely) and caught it at the right
time.
I did a download of my inventory with BrickStore to compare totals. This is what
I found: the total number of items (parts) is off by 4 and the dollar amount
is off by $2.56. This is possibly due to a couple of lots that I have retained
that are not zeroed out. I also looked at the "newest items" to see
if any were added, which I can confirm nothing was added. I also verified the
lot totals were correct (main store and stock rooms).
I strongly suggest every seller download BrickStore and performing a back up,
especially each day, or after sales. I usually do one a day. It is super easy
to "jump the gun" as I did, and it caught me off guard.
Hopefully BrickLink will post a banner on the main page to warn EVERY user about
this. As of this post, I didn't see anything, so BL should jump on the ball,
like yesterday.
Brian
In Problem, chetzler writes:
| | I had a couple of these this in my inbox this morning. They looked completely
legitimate. I did login in to BL from my work computer yesterday. When I have
logged in from work before, I have never gotten an email like this, but I thought
that maybe it was a new security feature.
Anyway, with a very official looking email in hand, I clicked the suggested logout
from all devices link and had just about entered my credentials in the new window
to log back in when I noticed two minor things that seemed just a bit off. I
won’t mention those things in case the fraudsters are reading. I looked at the
URL and it was very close to BrickLink’s (it was not the .net one that was mentioned
before). Needless to say, I immediately changed my PW and reenabled the one-time
PIN (I had turned it off because I was being repeatedly prompted for a new PIN
over very short time spans even when I hadn’t logged out). I’ll also be downloading
my inventory
BE DILIGENT! I’m a pretty suspicious person when it comes to online activity,
but, in my groggy state when I woke up this morning, I almost fell for a phishing
scheme presented as a very authentic looking email.
I don’t know why BrickLink has suddenly become such a juicy target. These people
have no hope of accessing any of my monetary accounts. I assume the goal is
to gain access to a legitimate shop so they can list high-dollar items to scam
other members.
I don’t envy the task that management has ahead of them, but they need to take
some substantive action soon. This is not a primary income stream for me, so
at some point, when all the gummy spam, phishing attempts, and slow helpdesk
response times become too much, I may simply close my store for a while. I don’t
need the extra headache of worrying about online security for a part-time job.
Had I fallen victim to this phishing attempt, I’m really not sure how much effort
I would have put into trying to recover my account. BrickLink just feels like
a dicier selling proposition lately.
|
|
|
| Author: | waltzking | | Posted: | Mar 21, 2024 20:06 | | Subject: | Re: WARNING! Login from new device phishing emai | | Viewed: | 62 times | | Topic: | Problem | |
|
| In Problem, chetzler writes:
| | In Problem, waltzking writes:
| | As someone not in any LEGO groups (or at least not using my BL email address),
and am still getting the scam emails, I am certain it related to either the hack
or fake contact/orders on BL that can harvest seller emails. Had a lot of these
orders, immediate cancel request, and no contact there after a few months back.
I know it was to phish my seller info as often as the pattern was repeated exactly.
But even messages we reply to can do this as the system still lonks our email
to those. It really should not do this unless an order is placed, or even confirmed
as paid by the system (instant or seller marked). Simply put, contact info should
remain better protected until a transaction is deemed legit. BL is largely an
open book for all seller info if the party wanting to phish it knows how the
site works.
Waltzking
|
Is there any need at all for buyers/sellers to see each other's email contact
info even on legitimate orders? Maybe I've been using instant checkout and
the pay now button for so long I have forgotton, but it has been a while since
a buyer has made a payment directly to my email address. Since BrickLink implemented
sales tax collection, all (at least all of my) payments are negotiated through
PayPal Marketplace.
Maybe other payment methods require an email address.
I know some people send photos via email (if only we could attach photos to a
BL message!).
I'd be perfectly happy to have "public-facing email address" be an
option that I can enable/disable at will.
|
Indeed, there is very little reason it needs to be shared at all. eBay and Amazon
(and other sites too) never share seller address with a buyer, and especially
not their emails. Email addresses can be handy at times (pics, custom instruction
files, etc.), but should be a voluntary thing to give, not granted without our
active consent to each case. It is a BIG security issue (and one I've brought
up to support numerous times) and what leads to all the recent spam and phishing.
If such non-imperative info was hidden, there would be no way to harvest it
for these attacks, baring an actual database hack. Sadly it all seems to fall
on def ears with the community suffering the consequences.
Waltzking
|
|
| Author: | chetzler | | Posted: | Mar 21, 2024 19:34 | | Subject: | Re: WARNING! Login from new device phishing emai | | Viewed: | 68 times | | Topic: | Problem | |
|
| In Problem, waltzking writes:
| | As someone not in any LEGO groups (or at least not using my BL email address),
and am still getting the scam emails, I am certain it related to either the hack
or fake contact/orders on BL that can harvest seller emails. Had a lot of these
orders, immediate cancel request, and no contact there after a few months back.
I know it was to phish my seller info as often as the pattern was repeated exactly.
But even messages we reply to can do this as the system still lonks our email
to those. It really should not do this unless an order is placed, or even confirmed
as paid by the system (instant or seller marked). Simply put, contact info should
remain better protected until a transaction is deemed legit. BL is largely an
open book for all seller info if the party wanting to phish it knows how the
site works.
Waltzking
|
Is there any need at all for buyers/sellers to see each other's email contact
info even on legitimate orders? Maybe I've been using instant checkout and
the pay now button for so long I have forgotton, but it has been a while since
a buyer has made a payment directly to my email address. Since BrickLink implemented
sales tax collection, all (at least all of my) payments are negotiated through
PayPal Marketplace.
Maybe other payment methods require an email address.
I know some people send photos via email (if only we could attach photos to a
BL message!).
I'd be perfectly happy to have "public-facing email address" be an
option that I can enable/disable at will.
|
|
| Author: | waltzking | | Posted: | Mar 21, 2024 19:16 | | Subject: | Re: WARNING! Login from new device phishing emai | | Viewed: | 64 times | | Topic: | Problem | |
|
| As someone not in any LEGO groups (or at least not using my BL email address),
and am still getting the scam emails, I am certain it related to either the hack
or fake contact/orders on BL that can harvest seller emails. Had a lot of these
orders, immediate cancel request, and no contact there after a few months back.
I know it was to phish my seller info as often as the pattern was repeated exactly.
But even messages we reply to can do this as the system still lonks our email
to those. It really should not do this unless an order is placed, or even confirmed
as paid by the system (instant or seller marked). Simply put, contact info should
remain better protected until a transaction is deemed legit. BL is largely an
open book for all seller info if the party wanting to phish it knows how the
site works.
Waltzking
|
|
| Author: | popsicle | | Posted: | Mar 21, 2024 19:13 | | Subject: | Re: WARNING! Login from new device phishing emai | | Viewed: | 61 times | | Topic: | Problem | |
|
| In Problem, Admin_Russell writes:
| | In Problem, Saitobricks.ca writes:
| | In Problem, Admin_Russell writes:
| | In Problem, randyf writes:
| | In Problem, chetzler writes:
| | I don’t know why BrickLink has suddenly become such a juicy target.
|
All of it started fairly shortly after all of the extremely unpopular part merges
started to actually occur. I have a strong feeling that a user here that was
very upset about the decisions made is having some "fun" at BrickLink's
expense.
|
Interesting theory. But the scammers that caused the November 3 incident are
the same ones that caused the problems last night, and the variant merge project
was not exposed to the public before January 2024.
As much as companies tend not to boast about the number of online attacks they
receive, we do see a remarkable increase in scammer activity across the board
- throughout many companies and across different industries. To us, it does not
feel like BrickLink is being singled out.
|
Does there happen to be a plan in the works to stop this activity?
|
Yes. In fact, most of what is being done to prevent this type of fraud is being
done behind the scenes, and BrickLink members are not aware that it is happening.
|
Makes sense. That being the case however, would not this suggestion slide perfectly
into the space between understandings: https://www.bricklink.com/message.asp?ID=1460563
|
|
| Author: | cosmicray | | Posted: | Mar 21, 2024 16:55 | | Subject: | Re: WARNING! Login from new device phishing emai | | Viewed: | 79 times | | Topic: | Problem | |
|
| In Problem, chetzler writes:
| | BE DILIGENT! I’m a pretty suspicious person when it comes to online activity,
but, in my groggy state when I woke up this morning, I almost fell for a phishing
scheme presented as a very authentic looking email.
|
There are a couple of takeaways from that ... first, steer away from the need
to reply IMMEDIATELY to anything you see prior to your first cup of java, tea,
or whatever. Second, do not trust any link that comes in an email, unless a site
is sending you a validation link, has told you it was just sent, and you just
received it. Everything else, including smishing attempts within SMS texts should
be considered suspect dangerous, and unreliable.
The whole paradigm of social engineering attacks is to make you react without
thinking it all the way thru. Take the slow paranoid path, log into the site
using a known good bookmark, and ignore any links that come via dangerous paths
(no matter how real they appear).
Nita Rae
|
|
| Author: | cosmicray | | Posted: | Mar 21, 2024 16:45 | | Subject: | Re: WARNING! Login from new device phishing emai | | Viewed: | 59 times | | Topic: | Problem | |
|
| In Problem, randyf writes:
| | And judging from the people who are receiving phishing emails (e.g I'm not),
the phisher is probably part of an online BrickLink group somewhere else (Facebook?
Discord?) that all of you are also part of or maybe they ordered from all of
the phishees in the past and already have all of your contact information to
use.
|
I have not received these phishing emails. That said, I am not a member of any
online BL groups, other than reddit, where I visit infrequently. So there may
be something to this theory.
Nita Rae
|
|
| Author: | SylvainLS | | Posted: | Mar 21, 2024 16:41 | | Subject: | Re: WARNING! Login from new device phishing emai | | Viewed: | 41 times | | Topic: | Problem | |
|
| In Problem, Saitobricks.ca writes:
We don’t know that. The most we know and can say is the person who registered
chose Ukraine for the country field.
|
|
| Author: | Saitobricks.ca | | Posted: | Mar 21, 2024 16:19 | | Subject: | Re: WARNING! Login from new device phishing emai | | Viewed: | 37 times | | Topic: | Problem | |
|
| In Problem, 1001bricks writes:
| | In Problem, UTLF writes:
| | | | I don't think it's appropriate to mention an invaded Country, right now in war, and BrickLink decision to merge a few parts in their Catalog.
|
That's not even close to what I was referring to: https://www.bricklink.com/message.asp?ID=1423027
|
Sorry, but then it's very certainly not a person from Ukraine, who
as a majority have very probably something better and more urgent to do than
attempt to hack a LEGO items site
|
You never know, just because he lives in Ukraine dosen't mean he is not bad.
Bad people are everywhere!
|
|
| Author: | 1001bricks | | Posted: | Mar 21, 2024 16:13 | | Subject: | Re: WARNING! Login from new device phishing emai | | Viewed: | 41 times | | Topic: | Problem | |
|
| In Problem, UTLF writes:
| | | | I don't think it's appropriate to mention an invaded Country, right now in war, and BrickLink decision to merge a few parts in their Catalog.
|
That's not even close to what I was referring to: https://www.bricklink.com/message.asp?ID=1423027
|
Sorry, but then it's very certainly not a person from Ukraine, who
as a majority have very probably something better and more urgent to do than
attempt to hack a LEGO items site
|
|
| Author: | Saitobricks.ca | | Posted: | Mar 21, 2024 16:03 | | Subject: | Re: WARNING! Login from new device phishing emai | | Viewed: | 48 times | | Topic: | Problem | |
|
| In Problem, Admin_Russell writes:
| | In Problem, Saitobricks.ca writes:
| | In Problem, Admin_Russell writes:
| | In Problem, randyf writes:
| | In Problem, chetzler writes:
| | I don’t know why BrickLink has suddenly become such a juicy target.
|
All of it started fairly shortly after all of the extremely unpopular part merges
started to actually occur. I have a strong feeling that a user here that was
very upset about the decisions made is having some "fun" at BrickLink's
expense.
|
Interesting theory. But the scammers that caused the November 3 incident are
the same ones that caused the problems last night, and the variant merge project
was not exposed to the public before January 2024.
As much as companies tend not to boast about the number of online attacks they
receive, we do see a remarkable increase in scammer activity across the board
- throughout many companies and across different industries. To us, it does not
feel like BrickLink is being singled out.
|
Does there happen to be a plan in the works to stop this activity?
|
Yes. In fact, most of what is being done to prevent this type of fraud is being
done behind the scenes, and BrickLink members are not aware that it is happening.
|
What percentage of spam would you say has been stopped behind the scenes?
|
|
| Author: | randyf | | Posted: | Mar 21, 2024 16:02 | | Subject: | Re: WARNING! Login from new device phishing emai | | Viewed: | 54 times | | Topic: | Problem | |
|
| In Problem, Admin_Russell writes:
| | In Problem, randyf writes:
| | In Problem, chetzler writes:
| | I don’t know why BrickLink has suddenly become such a juicy target.
|
All of it started fairly shortly after all of the extremely unpopular part merges
started to actually occur. I have a strong feeling that a user here that was
very upset about the decisions made is having some "fun" at BrickLink's
expense.
|
Interesting theory. But the scammers that caused the November 3 incident are
the same ones that caused the problems last night, and the variant merge project
was not exposed to the public before January 2024.
As much as companies tend not to boast about the number of online attacks they
receive, we do see a remarkable increase in scammer activity across the board
- throughout many companies and across different industries. To us, it does not
feel like BrickLink is being singled out.
|
Good to know. Let's just hope that our beloved BrickLink can make it through
largely unscathed. I am sure I am not the only one that doesn't want a repeat
of November 2023 to happen, but everytime someone falls for one of these things,
we get closer to that happening again. I do feel bad for those getting targeted,
but people need to be cautious.
|
|
| Author: | Admin_Russell | | Posted: | Mar 21, 2024 15:58 | | Subject: | Re: WARNING! Login from new device phishing emai | | Viewed: | 97 times | | Topic: | Problem | |
|
|
BrickLink
ID CardAdmin_Russell
|
Location:  USA, California |
| Member Since |
Contact |
Type |
Status |
| May 9, 2017 |
 |
Admin |
|
|
| BrickLink Administrator |
|
| In Problem, Saitobricks.ca writes:
| | In Problem, Admin_Russell writes:
| | In Problem, randyf writes:
| | In Problem, chetzler writes:
| | I don’t know why BrickLink has suddenly become such a juicy target.
|
All of it started fairly shortly after all of the extremely unpopular part merges
started to actually occur. I have a strong feeling that a user here that was
very upset about the decisions made is having some "fun" at BrickLink's
expense.
|
Interesting theory. But the scammers that caused the November 3 incident are
the same ones that caused the problems last night, and the variant merge project
was not exposed to the public before January 2024.
As much as companies tend not to boast about the number of online attacks they
receive, we do see a remarkable increase in scammer activity across the board
- throughout many companies and across different industries. To us, it does not
feel like BrickLink is being singled out.
|
Does there happen to be a plan in the works to stop this activity?
|
Yes. In fact, most of what is being done to prevent this type of fraud is being
done behind the scenes, and BrickLink members are not aware that it is happening.
|
|
| Author: | Saitobricks.ca | | Posted: | Mar 21, 2024 15:48 | | Subject: | Re: WARNING! Login from new device phishing emai | | Viewed: | 43 times | | Topic: | Problem | |
|
| In Problem, Admin_Russell writes:
| | In Problem, randyf writes:
| | In Problem, chetzler writes:
| | I don’t know why BrickLink has suddenly become such a juicy target.
|
All of it started fairly shortly after all of the extremely unpopular part merges
started to actually occur. I have a strong feeling that a user here that was
very upset about the decisions made is having some "fun" at BrickLink's
expense.
|
Interesting theory. But the scammers that caused the November 3 incident are
the same ones that caused the problems last night, and the variant merge project
was not exposed to the public before January 2024.
As much as companies tend not to boast about the number of online attacks they
receive, we do see a remarkable increase in scammer activity across the board
- throughout many companies and across different industries. To us, it does not
feel like BrickLink is being singled out.
|
Does there happen to be a plan in the works to stop this activity?
|
|
|
| Author: | 1001bricks | | Posted: | Mar 21, 2024 15:34 | | Subject: | Re: WARNING! Login from new device phishing emai | | Viewed: | 44 times | | Topic: | Problem | |
|
| In Problem, UTLF writes:
| | | | A bad buyer who has been collecting data on sellers, when they make orders.
|
Let me guess, Mr. Evil from Ukraine that was banned back in August?
|
I don't think it's appropriate to mention an invaded Country, right now
in war, and BrickLink decision to merge a few parts in their Catalog.
|
|
| Author: | Saitobricks.ca | | Posted: | Mar 21, 2024 15:33 | | Subject: | Re: WARNING! Login from new device phishing emai | | Viewed: | 35 times | | Topic: | Problem | |
|
| In Problem, UTLF writes:
| | | | A bad buyer who has been collecting data on sellers, when they make orders.
|
Let me guess, Mr. Evil from Ukraine that was banned back in August?
|
How can they know for sure that he is gone and that he was the source of ALL
the problems?
He could just put down a fake address, make a new E-mail and go by a different
user name. Not that hard to return for more trouble.
|
|
| Author: | 1001bricks | | Posted: | Mar 21, 2024 14:22 | | Subject: | Re: WARNING! Login from new device phishing emai | | Viewed: | 56 times | | Topic: | Problem | |
|
| In Problem, randyf writes:
| | In Problem, chetzler writes:
| | I don’t know why BrickLink has suddenly become such a juicy target.
|
All of it started fairly shortly after all of the extremely unpopular part merges
started to actually occur.
|
Coincidence != causality.
There has been attempts before this, and probably hundreds we don't know
about, or thousands during those 24 yrs of BrickLink.
Apart this, hackers seem to be high on steroids; many many places including our
French Administration couple weeks ago, PayPal is asking me VERY often to 2FA
(while normally it's once per year maybe), etc.
|
|
| Author: | pashah | | Posted: | Mar 21, 2024 14:20 | | Subject: | Re: WARNING! Login from new device phishing emai | | Viewed: | 66 times | | Topic: | Problem | |
|
| In Problem, chetzler writes:
| | I had a couple of these this in my inbox this morning. They looked completely
legitimate. I did login in to BL from my work computer yesterday. When I have
logged in from work before, I have never gotten an email like this, but I thought
that maybe it was a new security feature.
Anyway, with a very official looking email in hand, I clicked the suggested logout
from all devices link and had just about entered my credentials in the new window
to log back in when I noticed two minor things that seemed just a bit off. I
won’t mention those things in case the fraudsters are reading. I looked at the
URL and it was very close to BrickLink’s (it was not the .net one that was mentioned
before). Needless to say, I immediately changed my PW and reenabled the one-time
PIN (I had turned it off because I was being repeatedly prompted for a new PIN
over very short time spans even when I hadn’t logged out). I’ll also be downloading
my inventory
BE DILIGENT! I’m a pretty suspicious person when it comes to online activity,
but, in my groggy state when I woke up this morning, I almost fell for a phishing
scheme presented as a very authentic looking email.
I don’t know why BrickLink has suddenly become such a juicy target. These people
have no hope of accessing any of my monetary accounts. I assume the goal is
to gain access to a legitimate shop so they can list high-dollar items to scam
other members.
I don’t envy the task that management has ahead of them, but they need to take
some substantive action soon. This is not a primary income stream for me, so
at some point, when all the gummy spam, phishing attempts, and slow helpdesk
response times become too much, I may simply close my store for a while. I don’t
need the extra headache of worrying about online security for a part-time job.
Had I fallen victim to this phishing attempt, I’m really not sure how much effort
I would have put into trying to recover my account. BrickLink just feels like
a dicier selling proposition lately.
|
It would be great if BrickLink allowed sellers to have multiple emails on file:
- a public-facing email with which to contact customers (when sending/receiving
pictures, etc.)
- a non-public-facing email used for two-factor authentication and for seller
account admin purposes (including log in notifications). it makes no sense to
have two-factor authentification if the public-facing email is exposed in a phishing
attack
|
|
| Author: | chetzler | | Posted: | Mar 21, 2024 14:15 | | Subject: | Re: WARNING! Login from new device phishing emai | | Viewed: | 56 times | | Topic: | Problem | |
|
| In Problem, randyf writes:
| | In Problem, chetzler writes:
| | I don’t know why BrickLink has suddenly become such a juicy target.
|
All of it started fairly shortly after all of the extremely unpopular part merges
started to actually occur. I have a strong feeling that a user here that was
very upset about the decisions made is having some "fun" at BrickLink's
expense.
|
That feels like a stretch. The people that tend to get upset about some of BL’s
unpopular decisions (myself included) get upset because they love BrickLink.
I’d have trouble believing that one of those people would put in the time and
effort required to launch a phishing scheme that damages the thing they love
and at the same time subjects their fellow members to the collateral damage.
| |
And judging from the people who are receiving phishing emails (e.g I'm not),
the phisher is probably part of an online BrickLink group somewhere else (Facebook?
Discord?) that all of you are also part of or maybe they ordered from all of
the phishees in the past and already have all of your contact information to
use.
|
I’m not active in any online groups.
|
|
| Author: | yorbrick | | Posted: | Mar 21, 2024 14:10 | | Subject: | Re: WARNING! Login from new device phishing emai | | Viewed: | 62 times | | Topic: | Problem | |
|
| In Problem, randyf writes:
| | In Problem, chetzler writes:
| | I don’t know why BrickLink has suddenly become such a juicy target.
|
All of it started fairly shortly after all of the extremely unpopular part merges
started to actually occur. I have a strong feeling that a user here that was
very upset about the decisions made is having some "fun" at BrickLink's
expense.
And judging from the people who are receiving phishing emails (e.g I'm not),
the phisher is probably part of an online BrickLink group somewhere else (Facebook?
Discord?) that all of you are also part of or maybe they ordered from all of
the phishees in the past and already have all of your contact information to
use.
|
I checked earlier, the .net site is about two months old and the bricklink-com.co
just two weeks. Whether it is linked to merges, I don't know. Haven't
some people mentioned high value sets being added? That suggests financial fraud
rather than just messing about.
|
|
| Author: | randyf | | Posted: | Mar 21, 2024 13:46 | | Subject: | Re: WARNING! Login from new device phishing emai | | Viewed: | 85 times | | Topic: | Problem | |
|
| In Problem, chetzler writes:
| | I don’t know why BrickLink has suddenly become such a juicy target.
|
All of it started fairly shortly after all of the extremely unpopular part merges
started to actually occur. I have a strong feeling that a user here that was
very upset about the decisions made is having some "fun" at BrickLink's
expense.
And judging from the people who are receiving phishing emails (e.g I'm not),
the phisher is probably part of an online BrickLink group somewhere else (Facebook?
Discord?) that all of you are also part of or maybe they ordered from all of
the phishees in the past and already have all of your contact information to
use.
|
|
| Author: | macebobo | | Posted: | Mar 21, 2024 12:37 | | Subject: | Re: WARNING! Login from new device phishing emai | | Viewed: | 61 times | | Topic: | Problem | |
|
| In Problem, SylvainLS writes:
| | Besides, BrickLink is being helped by LEGO’s security team.
|
Let us hope this goes better than what "Award winning Lego support" team
is doing to help out the help desk.
|
|
| Author: | chetzler | | Posted: | Mar 21, 2024 12:27 | | Subject: | Re: WARNING! Login from new device phishing emai | | Viewed: | 57 times | | Topic: | Problem | |
|
| In Problem, SylvainLS writes:
| | In Problem, chetzler writes:
| | […]
I don’t envy the task that management has ahead of them, but they need to take
some substantive action soon.
|
But what kind of “substantive action” can BrickLink take?
|
I don’t know, that’s above my pay grade. It’s not my job to solve the problems
of a billion dollar multinational company, but I have trouble accepting that
LEGO is powerless to do anything. As others have pointed out, this level of
insecurity in simply not found to this degree in other online arenas: not in
any of my online banking or investment portals, not in any medical billing portals,
not in any government/tax portals, not in other online marketplaces I use, not
even at LEGO.com. BrickLink stands out as a site that is starting to make me
a little nervous.
I understand the gummy spam is probably a low security concern, but it should
represent a HUGE image concern. If our brick-and-mortar business had hawkers
out front all day handing out flyers to our customers, I’d be derelict in my
duties if I wasn’t chasing them off and taking steps to make sure they didn’t
return. If I couldn’t even do that much, how much faith should our customers
have that we would address more serious concerns? It really looks like BL management
simply does not care about a public-facing piece of their website.
I do know that, at my primary business, if our customers were being inundated
with spam and fishing attempts, we’d have a lot of angry customers and that would
result in a lot of bad word of mouth around the community if we didn’t figure
out a way to rectify the situation quickly. Worse yet, if one of our employee’s
response was a bunch of excuses followed up with, “eh, what do want us to do?
You need to look out for yourself!” that employee would probably be fired and
we’d be in serious danger of going out of business.
|
|
| Author: | yorbrick | | Posted: | Mar 21, 2024 12:07 | | Subject: | Re: WARNING! Login from new device phishing emai | | Viewed: | 48 times | | Topic: | Problem | |
|
| | | Anyway, with a very official looking email in hand, I clicked the suggested logout
from all devices link and had just about entered my credentials in the new window
to log back in when I noticed two minor things that seemed just a bit off. I
won’t mention those things in case the fraudsters are reading. I looked at the
URL and it was very close to BrickLink’s (it was not the .net one that was mentioned
before). Needless to say, I immediately changed my PW and reenabled the one-time
PIN (I had turned it off because I was being repeatedly prompted for a new PIN
over very short time spans even when I hadn’t logged out). I’ll also be downloading
my inventory
|
It must be a different one, as the .net one that goes to bricklink-com.co doesn't
really look anything like the frontpage of BL. No BDP banner, no "Browse"
box. Plus the login box is very different as it is a full page rather than a
pop-up. Also none of the buttons like "remember this login" tickbox work
if you click them.
|
|
| Author: | yorbrick | | Posted: | Mar 21, 2024 12:06 | | Subject: | Re: WARNING! Login from new device phishing emai | | Viewed: | 35 times | | Topic: | Problem | |
|
| | | MFA? They did that with OTP.
Mandatory OTP? They did that last week. It’s annoying and people are opting
out (like you did at first).
|
The OTP doesn't work anyway, as the scammers can get the user to send the
OTP code to them.
|
|
| Author: | Tracyd | | Posted: | Mar 21, 2024 11:42 | | Subject: | Re: WARNING! Login from new device phishing emai | | Viewed: | 53 times | | Topic: | Problem | |
|
| In Problem, chetzler writes:
| | I had a couple of these this in my inbox this morning. They looked completely
legitimate. I did login in to BL from my work computer yesterday. When I have
logged in from work before, I have never gotten an email like this, but I thought
that maybe it was a new security feature.
Anyway, with a very official looking email in hand, I clicked the suggested logout
from all devices link and had just about entered my credentials in the new window
to log back in when I noticed two minor things that seemed just a bit off. I
won’t mention those things in case the fraudsters are reading. I looked at the
URL and it was very close to BrickLink’s (it was not the .net one that was mentioned
before). Needless to say, I immediately changed my PW and reenabled the one-time
PIN (I had turned it off because I was being repeatedly prompted for a new PIN
over very short time spans even when I hadn’t logged out). I’ll also be downloading
my inventory
BE DILIGENT! I’m a pretty suspicious person when it comes to online activity,
but, in my groggy state when I woke up this morning, I almost fell for a phishing
scheme presented as a very authentic looking email.
I don’t know why BrickLink has suddenly become such a juicy target. These people
have no hope of accessing any of my monetary accounts. I assume the goal is
to gain access to a legitimate shop so they can list high-dollar items to scam
other members.
I don’t envy the task that management has ahead of them, but they need to take
some substantive action soon. This is not a primary income stream for me, so
at some point, when all the gummy spam, phishing attempts, and slow helpdesk
response times become too much, I may simply close my store for a while. I don’t
need the extra headache of worrying about online security for a part-time job.
Had I fallen victim to this phishing attempt, I’m really not sure how much effort
I would have put into trying to recover my account. BrickLink just feels like
a dicier selling proposition lately.
|
I feel slighted I have none.
From a cybersecurity standpoint you never click a link in a text or an email
about suspicious activity. You go straight to how you normally access the site
and see if there is a message there, if it is legitimate, you can then do what
is needed. Even if there isn't you might consider change your password. I
keep getting texts that my bank account is in jeopardy from a bank that I haven't
had an account with for 15 years, needless to say I don't click that link.
I have even gotten texts from PayPal about a dire issue, but when I access PayPal
normally there is nothing there. Thinking before you click is always your first
action. My job sends out test phishing emails. While some look official they
are never using a correct email address and are for things that I expect to be
notified of before an email requiring action.
|
|
| Author: | SylvainLS | | Posted: | Mar 21, 2024 11:31 | | Subject: | Re: WARNING! Login from new device phishing emai | | Viewed: | 39 times | | Topic: | Problem | |
|
| In Problem, zorbanj writes:
| | Whatever is being done for lego.com itself. I've never gotten phishing emails
related to lego.com.
|
But is that really because LEGO did something BrickLink didn’t do?
Besides, BrickLink is being helped by LEGO’s security team.
|
|
| Author: | SylvainLS | | Posted: | Mar 21, 2024 11:27 | | Subject: | Re: WARNING! Login from new device phishing emai | | Viewed: | 44 times | | Topic: | Problem | |
|
| In Problem, Mr_Rofl writes:
| | Maybe we can contact Pierogi from scammer payback or Jim Browning to make an
item about this kind of scam.
|
Didn’t know of any of them… but I’m hungry now: https://en.wikipedia.org/wiki/Pierogi
| | And put the video out on the website with a warning.
I`m not saying I will not fall for it, but I always save my username and password
in my browser. If the browser does not automatically come with my credentials,
then I go in maximum save guard. Usually closing all tabs from that website and
typing in the correct url to see what is wrong with my saved credentials.
|
Yeah, as Chetzler said, when you wake up and see these messages, you’re not at
your best.
That’s why you need to get those checks ingrained, so the alert pops up automatically
in your brain, foggy or not.
But only you can do that.
|
|
| Author: | Saitobricks.ca | | Posted: | Mar 21, 2024 11:27 | | Subject: | Re: WARNING! Login from new device phishing emai | | Viewed: | 30 times | | Topic: | Problem | |
|
| Your right, they don't have problems, so why do we have to suffer?
In Problem, zorbanj writes:
| | Whatever is being done for lego.com itself. I've never gotten phishing emails
related to lego.com.
In Problem, SylvainLS writes:
| |
But what kind of “substantive action” can BrickLink take?
|
|
|
|
| Author: | Saitobricks.ca | | Posted: | Mar 21, 2024 11:26 | | Subject: | Re: WARNING! Login from new device phishing emai | | Viewed: | 33 times | | Topic: | Problem | |
|
| In Problem, Mr_Rofl writes:
| | Maybe we can contact Pierogi from scammer payback or Jim Browning to make an
item about this kind of scam. And put the video out on the website with a warning.
|
That's a fantastic idea! I watch Jim's channel and he's good!
If you have not seen Jim Browning you should see what he's got going on.
Maybe if enough of us comment on his videos about this he will look into it.
|
|
| Author: | zorbanj | | Posted: | Mar 21, 2024 11:24 | | Subject: | Re: WARNING! Login from new device phishing emai | | Viewed: | 45 times | | Topic: | Problem | |
|
| Whatever is being done for lego.com itself. I've never gotten phishing emails
related to lego.com.
In Problem, SylvainLS writes:
| |
But what kind of “substantive action” can BrickLink take?
|
|
|
| Author: | Saitobricks.ca | | Posted: | Mar 21, 2024 11:17 | | Subject: | Re: WARNING! Login from new device phishing emai | | Viewed: | 40 times | | Topic: | Problem | |
|
| In Problem, UTLF writes:
| | This is becoming quite worrisome; what I want to know is how/when did these hackers
get access to a list of emails? Was it during the Nov. 2023 "attack"
that we were told had no sign of any hack taking place?
It's just strange how these emails are going to Bricklink users in particular,
using a false Bricklink login page - if it was a case of leaked emails on another
platform, it would be normal email spam like online casinos, "you won X gift
card or prize", etc.
Somehow, a large list of Bricklink account emails was acquired within the last
few months
How?
|
A bad buyer who has been collecting data on sellers, when they make orders.
|
|
| Author: | Mr_Rofl | | Posted: | Mar 21, 2024 11:16 | | Subject: | Re: WARNING! Login from new device phishing emai | | Viewed: | 45 times | | Topic: | Problem | |
|
| Maybe we can contact Pierogi from scammer payback or Jim Browning to make an
item about this kind of scam. And put the video out on the website with a warning.
I`m not saying I will not fall for it, but I always save my username and password
in my browser. If the browser does not automatically come with my credentials,
then I go in maximum save guard. Usually closing all tabs from that website and
typing in the correct url to see what is wrong with my saved credentials.
In Problem, SylvainLS writes:
| | In Problem, chetzler writes:
| | […]
I don’t envy the task that management has ahead of them, but they need to take
some substantive action soon.
|
But what kind of “substantive action” can BrickLink take?
Buy the website names that may look like bricklink.com? The 3 millions of them
(org, .net, .«country», etc., briklink, brickslink, bricklinck, etc., brıcklınk.com¹,
briϲklink.com², etc.)?
MFA? They did that with OTP.
Mandatory OTP? They did that last week. It’s annoying and people are opting
out (like you did at first).
Send messages? They did that.
But they only talked about “brickslink” (or was it “bricklinks”?) and you almost
got caught by one of the 2,999,999 others. Should they send a list of the 3
millions possibilities?
Put a warning on the front page? One that can also be faked and diverted by
phishers?
Okay, what they could do is have a 24/7 helpdesk and quick procedures to at least
block an account… but then how do you ensure these procedures are fast and secure
and not abused? Another round of passwords and MFA? Another procedure that
can be copied / faked on a phishing website like they copied the OTP one?
In the end, phishing is a problem that can’t be avoided without the user being
diligent, without the user taking action.
———
¹ Dotless i.
² Greek sigma instead of c.
|
|
|
| Author: | SylvainLS | | Posted: | Mar 21, 2024 11:06 | | Subject: | Re: WARNING! Login from new device phishing emai | | Viewed: | 51 times | | Topic: | Problem | |
|
| In Problem, chetzler writes:
| | […]
I don’t envy the task that management has ahead of them, but they need to take
some substantive action soon.
|
But what kind of “substantive action” can BrickLink take?
Buy the website names that may look like bricklink.com? The 3 millions of them
(org, .net, .«country», etc., briklink, brickslink, bricklinck, etc., brıcklınk.com¹,
briϲklink.com², etc.)?
MFA? They did that with OTP.
Mandatory OTP? They did that last week. It’s annoying and people are opting
out (like you did at first).
Send messages? They did that.
But they only talked about “brickslink” (or was it “bricklinks”?) and you almost
got caught by one of the 2,999,999 others. Should they send a list of the 3
millions possibilities?
Put a warning on the front page? One that can also be faked and diverted by
phishers?
Okay, what they could do is have a 24/7 helpdesk and quick procedures to at least
block an account… but then how do you ensure these procedures are fast and secure
and not abused? Another round of passwords and MFA? Another procedure that
can be copied / faked on a phishing website like they copied the OTP one?
In the end, phishing is a problem that can’t be avoided without the user being
diligent, without the user taking action.
———
¹ Dotless i.
² Greek sigma instead of c.
|
|
| Author: | Llewyn | | Posted: | Mar 21, 2024 11:01 | | Subject: | Re: WARNING! Login from new device phishing emai | | Viewed: | 47 times | | Topic: | Problem | |
|
| In Problem, UTLF writes:
| | Somehow, a large list of Bricklink account emails was acquired within the last
few months
|
Not necessarily in the last few months, there have been waves of spam targeted
at sellers several times previously - I know I had several around April 2022
purporting to be from a genuine store here about bulk purchasing, and there were
a lot of comments from others about the same thing.
It's very easy to get sellers' emails at least, all it needs is a little
automation rather than any hacking. Every time someone sends you a contact message
enquiring about an item in your store, if they request a copy to their email
I believe it will include the seller's address. I think we all get obvious
timewaster enquiries from time to time and just dismiss them.
I'd be very curious if people with only buyer privileges have also had these
spam messages.
|
|
| Author: | Saitobricks.ca | | Posted: | Mar 21, 2024 10:46 | | Subject: | Re: WARNING! Login from new device phishing email | | Viewed: | 45 times | | Topic: | Problem | |
|
| In Problem, chetzler writes:
| | BE DILIGENT! I’m a pretty suspicious person when it comes to online activity,
but, in my groggy state when I woke up this morning, I almost fell for a phishing
scheme presented as a very authentic looking email.
|
That's how most get scammed, by chance they are waiting for a e-mail and
the scam shows up and they click it thinking all's good.
Double check everything! When I login from a new tab, I poke around a little
to see if it's real.
|
|
| Author: | Erikmax | | Posted: | Mar 21, 2024 10:44 | | Subject: | Re: WARNING! Login from new device phishing emai | | Viewed: | 43 times | | Topic: | Problem | |
|
| In Problem, chetzler writes:
| | I had a couple of these this in my inbox this morning. They looked completely
legitimate. I did login in to BL from my work computer yesterday. When I have
logged in from work before, I have never gotten an email like this, but I thought
that maybe it was a new security feature.
Anyway, with a very official looking email in hand, I clicked the suggested logout
from all devices link and had just about entered my credentials in the new window
to log back in when I noticed two minor things that seemed just a bit off. I
won’t mention those things in case the fraudsters are reading. I looked at the
URL and it was very close to BrickLink’s (it was not the .net one that was mentioned
before). Needless to say, I immediately changed my PW and reenabled the one-time
PIN (I had turned it off because I was being repeatedly prompted for a new PIN
over very short time spans even when I hadn’t logged out). I’ll also be downloading
my inventory
BE DILIGENT! I’m a pretty suspicious person when it comes to online activity,
but, in my groggy state when I woke up this morning, I almost fell for a phishing
scheme presented as a very authentic looking email.
|
Had the same about one week ago and also placed a warning in the forum. These
warnings cannot be repeated too much and I think there must be a permanent warning
for this on the welcome page. it certainly will prevent a lot of trouble. Not
everyone reads the forum and not everyone is aware of this.
| |
I don’t know why BrickLink has suddenly become such a juicy target. These people
have no hope of accessing any of my monetary accounts. I assume the goal is
to gain access to a legitimate shop so they can list high-dollar items to scam
other members.
I don’t envy the task that management has ahead of them, but they need to take
some substantive action soon. This is not a primary income stream for me, so
at some point, when all the gummy spam, phishing attempts, and slow helpdesk
response times become too much, I may simply close my store for a while. I don’t
need the extra headache of worrying about online security for a part-time job.
Had I fallen victim to this phishing attempt, I’m really not sure how much effort
I would have put into trying to recover my account. BrickLink just feels like
a dicier selling proposition lately.
|
|
|
| Author: | Erikmax | | Posted: | Mar 21, 2024 10:42 | | Subject: | Re: WARNING! Login from new device phishing emai | | Viewed: | 61 times | | Topic: | Problem | |
|
| In Problem, chetzler writes:
| | I had a couple of these this in my inbox this morning. They looked completely
legitimate. I did login in to BL from my work computer yesterday. When I have
logged in from work before, I have never gotten an email like this, but I thought
that maybe it was a new security feature.
Anyway, with a very official looking email in hand, I clicked the suggested logout
from all devices link and had just about entered my credentials in the new window
to log back in when I noticed two minor things that seemed just a bit off. I
won’t mention those things in case the fraudsters are reading. I looked at the
URL and it was very close to BrickLink’s (it was not the .net one that was mentioned
before). Needless to say, I immediately changed my PW and reenabled the one-time
PIN (I had turned it off because I was being repeatedly prompted for a new PIN
over very short time spans even when I hadn’t logged out). I’ll also be downloading
my inventory
BE DILIGENT! I’m a pretty suspicious person when it comes to online activity,
but, in my groggy state when I woke up this morning, I almost fell for a phishing
scheme presented as a very authentic looking email.
I don’t know why BrickLink has suddenly become such a juicy target. These people
have no hope of accessing any of my monetary accounts. I assume the goal is
to gain access to a legitimate shop so they can list high-dollar items to scam
other members.
I don’t envy the task that management has ahead of them, but they need to take
some substantive action soon. This is not a primary income stream for me, so
at some point, when all the gummy spam, phishing attempts, and slow helpdesk
response times become too much, I may simply close my store for a while. I don’t
need the extra headache of worrying about online security for a part-time job.
Had I fallen victim to this phishing attempt, I’m really not sure how much effort
I would have put into trying to recover my account. BrickLink just feels like
a dicier selling proposition lately.
|
Had the same about one week ago and also placed a warning in the forum. These
warnings cannot be repeated too much and I think there must be a permanent warning
for this on the welcome page. it certainly will prevent a lot of trouble. Not
everyone reeds the forum and not everyone is aware of this.
|
|
Next Page: 5 More | 10 More | 25 More | 50 More | 100 More
|
United Kingdom, England
France, Provence-Alpes-Côte d'Azur
Netherlands, Groningen
Spain, Comunidad Valenciana
Canada, Alberta
Sweden, Uppsala
Bulgaria, Sofia City
