Our latest safety information on spoof emails and websitesTuesday 15 July 2014, by The Media Team
The biggest threats to the security of your Gumtree account are fraudulent ‘spoof’ and ‘phishing’ emails or SMS messages.
These messages look like real Gumtree emails but include links to “phishing” web sites, or services that they claim are endorsed by Gumtree.
SMS phishing tends to come as an SMS reply to your ad. It might contain a link that looks like Gumtree, but isn’t.
Gumtree will NEVER SMS you, or ask you for your password or bank details. If you do receive an SMS you believe is a scam or SPAM – don’t reply, forward it to 7726, to report it to your network provider. You should also contact us, and we’ll try to get any phishing websites taken down.
Also, be careful of SMS messages that invite you to reply to a new or different email address. This is a common tactic fraudsters use to get email addresses that they intend to spam.
Spoof emails typically tell you that your Gumtree account has been “disabled”, “locked out” or “suspended”, or that it “requires verification”. The email may even show a link to Gumtree that appears to be genuine, but when you click it, it goes to the phishing website. To be safe, always double-check the web address after you click on any links in an email to make sure they are actually from Gumtree. We also suggest you use the latest version of your web browser and use an anti-virus program to stay protected.
Spoof Phishing websites
Both Phishing SMS and Emails tend to send you to websites that look like Gumtree but aren’t. While phishing websites may look like Gumtree, they are designed by scammers to steal your Gumtree user name and password.
You can keep your Gumtree account secure by only signing in to Gumtree when your web browser tells you the page is secure with a Padlock notification.
Never sign in unless these icons show up in your browser and the web address is https://my.gumtree.com/login
Here is an image of a very convincing Phishing site designed to steal your password:
You can see that there is no Padlock icon to indicate the page is secure, and the website you would be logging into is not a https://my.gumtree.com/login page, even though it uses gumtree as part of the URL.
Spoof Fraudulent Escrow Services
Sometimes Spoof emails will actually link to Gumtree.com or a spoof website that looks very similar to Gumtree, and will claim that we endorse escrow or secure payment websites.
Gumtree do not endorse or supply any secure payment or car delivery schemes. If you receive an email or see a site that looks like Gumtree suggesting we do, it is a fraud.
Here is an example of a Spoof email promoting a fraudulent service:
You can always forward any suspicious email addresses, SMS and web sites to Safety@Gumtree.com – we’ll work to get it shut down so others don’t fall for it.
And there’s loads more information on how to protect your Gumtree account in our help section.
The Gumtree team