Information about several Jumei Youpin users is suspected to be leaked

Since July 21, more than 30 consumers have complained that the amount of fraud has reached 200,000 yuan, of which a single user has been cheated up to 47,200 yuan.

"Hello, XXX, I am Jumei Youpin's customer service. There is a problem with your return order. You need to confirm it with you in person before you can get a normal refund."

On July 15, 2016, Guangzhou consumer Liu Jie received a call from Guangzhou. The other party claimed to be Jumei Youpin's customer service and accurately reported the product information she purchased on Jumei Youpin's platform. After completing the designated return operation of the customer service, Liu Jie's bank card 47,200 yuan has been removed.

"The other party knows all the order information, including the model, price and purchase time of the goods, so he relaxed his vigilance. Who would have thought that the other party was a fake customer service?" Liu Jie told reporters. On July 14, she applied for a refund on the Jumei Youpin platform. On the 15th, she received a call from a fake customer service. She then reported the case to the police and complained to Jumei Youpin customer service, but the investigation has not made any progress.

Liu Jie is not an isolated case when she was cheated by fake customer service.

On July 21, several Jumei Youpin users complained to reporters that their shopping information at Jumei Youpin was leaked and they encountered Jumei fake customer service fraud.

Many netizens said they were cheated by fake customer service

The reporter found on Weibo that many netizens reported that they had encountered the same scam.

On July 15, Xiao Ping, a newly graduated Hubei consumer, received a call from Shaoxing, Zhejiang. After the call was answered, the other party called her name directly, claiming that she was Jumei Youpin customer service.

Xiao Ping thought that she had applied to return a skirt on Jumei Youpin these days, and then the scammer said that there was a problem with the return order and needed to reconfirm that it was indeed the one he had returned, and then the refund could be made normally.

"I didn't believe it at first, but the other party knew all the order information." Xiao Ping was also alert at first, but when the other party mentioned the model, style, color, when to buy, and price of the skirt, it also dispelled her concerns.

Afterwards, she received a web link from the other party. After clicking on it, it was indeed a login page related to Jumei Youpin. She then filled in her bank card and ID number. Soon she received a return verification code, entered the verification code and clicked for a refund.

Immediately afterwards, the bank sent a bank card deduction message, and at this time the 5,000 yuan in her bank card was gone.

Xiao Ping said in an interview with reporters that she is not the only one who has been deceived. The reporter of this magazine found from a "Jumei Return Scam Victim" QQ group that two other consumers were cheated at 3,400 yuan and 2,089 yuan respectively. They said that according to the quick money reminder, the flow of their cheated funds was: Hunan Tongxinyuan Network Technology Co., Ltd.

Their method of being cheated is basically similar: the scammers have grasped the consumer's orders and personal information, and lie about a system problem during the return process, and ask for a refund again. After the consumer follows the specified process, he steals the bank card.

According to incomplete statistics from reporters of this magazine, since July 21, more than 30 consumers have complained to reporters that the amount of fraud has reached 200,000 yuan, of which a single user has been cheated up to 47,200 yuan.

Jumei Youpin responds: User information will not be leaked

According to the recent investigation by reporters of this magazine, such fake customer service fraud is not an isolated case. Since 2013, counterfeit customer service fraud has been on the Jumei Youpin platform. Although Jumei Youpin official also reminds users to beware of counterfeit customer service scams through channels such as Weibo and SMS, it seems that the results are very little.

In response, the reporter of this magazine consulted Jumei Youpin customer service as a consumer. The customer service said: Jumei Youpin will not disclose customer information. They are currently searching for the specific reasons for the loopholes and have reported the relevant situation to their superiors.

"In terms of internal management, Jumei regards customer information as the highest level of confidentiality information, and there is no problem of leaking customer information." On July 26, the reporter of this magazine contacted Jumei Youpin's staff, and the staff responded, "Jumei Network Security has been inspected by the network security department and complies with national laws and there is no problem."

"At present, in the face of such a situation, we are also in the process of investigation. It is recommended that customers use different account passwords (including online platforms, bank accounts, game accounts, etc.) on different websites, and Jumei will actively cooperate to solve this problem." said the staff member.

Lawyer analysis: The responsibility of the website cannot be shirked

In recent years, more and more consumers have been cheated due to similar information leakage. According to relevant reports on July 26, a man was deceived into using Alipay to fake customer service and was cheated of 8,000 yuan for refunding 31 yuan. Previously, the media also reported that Damai.com was hit by the database and caused information to be leaked, and 39 users were cheated of more than one million yuan.

Regarding the fraud caused by personal information leakage, the reporter of this magazine consulted lawyer Liu Caifeng from Guangdong Guangqiang Law Firm. She pointed out that there are many possibilities for online information leakage. "It may be the information leak caused by the intrusion of other companies, or the information leak caused by consumers themselves, and another possibility is that they encountered a hacker hitting the library."

Crashing the library means that on the Internet, people sometimes use the same login name and password on multiple platforms, and sometimes criminals will steal user information and try to log in on multiple websites. After logging in successfully, they will then cheat the user.

Lawyer Liu believes that according to the "Regulations on the Security Protection and Management of Computer Information Network International Internet Security", the website has the responsibility to improve the program code and try to avoid loopholes. Once the user's account is invaded, it should also make up for the loopholes as soon as possible, reduce losses, and strive to maintain user information security as much as possible.

Regarding Jumei Youpin's responsibilities in it, Article 29 of the newly revised "Consumer Rights Protection Law" clearly stipulates that operators and their staff must strictly keep the consumer personal information collected and must not be disclosed, sold or illegally provided to others. Operators should take technical measures and other necessary measures to ensure information security and prevent the leakage or loss of consumer personal information. Remedial measures should be taken immediately when information leakage or loss occurs or may occur.

However, Liu Caifeng also said that such fraud is suspected of criminal crimes. Consumers need to wait for the results of the police to handle the matter after reporting the case. As for recovering money, it is very difficult. The lost property may be spent by scammers before recovering it. Moreover, such frauds are sometimes overseas cooperation, which is more complicated.

She suggested that if consumers encounter telephone fraud or QQ fraud, in addition to complaining to the local business administration department and other relevant departments, they should also call the police as soon as possible to protect their rights and interests. At the same time, consumers set different account passwords on the website, and it is also recommended that various consumer platforms provide more user-operated SMS reminder functions to reduce such frauds.