Fake Fiverr payout page asks freelancers for card details

Who may be targeted: Freelancers on Fiverr, especially anyone told that a buyer has already paid and that a payout is waiting to be released.

What we are seeing

A copy of the Fiverr website tells a freelancer that a buyer has already paid and that the money is waiting. To release it, a support chat that opens by itself asks for bank card details and calls it a one-time identification. The card number, expiry date and security code are collected on a second website. Being paid never requires your card number or security code.

Warning signs

• A support chat opens by itself and asks for card details so that a payment can be directed to you.
• It calls the card step a secure identification or a one-time verification.
• A bank card is the only method the page will accept, even though other payment logos are shown.
• Labels on the page promise it is encrypted, a protected session, and that no charge will be made.
• The card number, expiry date and security code are asked for on a different website from the one you started on.
• A press and hold button is described as a security check before confirming your order.

Reported addresses

Written so they cannot be clicked. Do not retype them into your browser.

• clears-white[.]com
• finish-payments[.]com

← All alerts