Description

Incident Summary:I was targeted by a phishing and impersonation scam designed to steal sensitive merchant account data.Details of the Incident:Initial Contact: I received a voicemail from (202) 449-4733 requesting a callback to (520) 314-3558. The caller identified himself as "Gary from the Corrective Billing Department" and specifically asked to speak regarding our Clover account. The Call: Upon calling back, I spoke with an individual who already possessed our business information and provided fake confirmation numbers to appear legitimate.The Pitch: The representative claimed they were directly affiliated with Clover and responsible for ensuring outside sales companies complied with agreed-upon rates. They promised a 50% reduction in our processing fees and a monthly refund of approximately $800. The Scam: Under the false impression that I was dealing with our actual merchant processor, I was instructed to email a copy of our Clover merchant statement to [email protected]. Due to exhaustion and a false sense of security regarding the statement's data safety, I complied and sent the email. Impact:The scammers successfully obtained our sensitive Clover merchant statement through deceptive impersonation tactics.