Brazen crims selling stolen credit cards on Meta's Threads Brazen crooks are selling people's pilfered financial information on Meta's Threads, in some cases posting full credit card details, plus stolen credentials, alongside images of the cards themselves. SpyCloud security researcher Kyla Cardona says she spotted some of these posts while scrolling her feed. "I was like, what is …
How hard is it to automatically delete posts containing images of credit cards, or that list full credit card numbers (Facebook has the resources to verify they are real & valid numbers in real time) and suspend the accounts of posters who are repeat violators?
You don't need moderation for this, that they aren't doing this shows they simply don't care because there is no penalty for them for ignoring the problem.
"How hard is it to automatically delete posts containing images of credit cards"
Question should be "how hard is it to not post the material in the first place?" By which I am referring to Meta as the host and publisher of the material, not the criminal users (who obviously should also be liable).
It's about time Meta and orgs like it are held directly liable for whatever they host and display on their services. This isn't them selling equipment that some people take away and use for bad (like a car company whose product is used in a ram raid, a telecoms company whose phone service is used to plan a robbery, or a sports shop that sells a cricket bat that someone then uses to attack someone else with). This is meta actively soliciting any material from people then hosting it on their servers and making it widely available without any checks or responsibility. They shouldn't be able to hide behind the defence that it isn't them distributing the material. Users send the material to Meta, then Meta distribute it for them. Meta are (jointly) responsible.
My analogy is like me running a parish noticeboard in my local village hall. Someone hands me a list of stolen credit card details asking me "can you put this on your noticeboard?". At which point I immediately say no and report them to the police, rather than as Meta do and say " sure no problem, hey everyone look at this!".
That's a crappy analogy. It is more like you set up a noticeboard for people to put up whatever they want on their own, and you only check it once a day to remove pictures of naked people when they're put up, but people are arguing you should remove other stuff too.
This post has been deleted by its author
How long does it take to find out that someone has cloned it?
The criminals could easily be on a spending spree for longer than a month before the victim gets a statement and finds out what happened.
After that, there's often about a fortnight of phone calls (hours on hold), written proof and declarations to get the charges cancelled.
And waiting a fortnight to get a new physical card.
And contacting all your relevant genuine monthly and annual bills to update with the new card number.
Then there's the monitoring for the rest of your legal existence in case they stole your identity as well and took out other loans, registered businesses etc.
I'm sure I missed a few things. The victim absolutely will.
I see ads for shrooms, coke, weed, all sorts of obviously stolen goods, credit cards, gas meter bypass pipes, fake utility meter top up tokens, escort services, scams, all sorts of dubiously legal and downright illegal "services" and goods it's pretty obvious that there's nowhere near enough, if any, checking done on FB marketplace, it would be incredibly difficult to believe threads was any different
Picked up on a fake cycling store advert the other day. A supposed closing down sale with "too-good-to-be-true" reductions on stuff. Suspicion alarms were going off and indeed, the company in question simply did not exist. Post reported; "not removed", post-request review "not removed".
Meta don't give two hoots who is paying them for ad space, provided they are paying them.
I would ditch their stuff entirely but regrettably, the "usefulness" is still there despite the toxicity of the ecosystem around it.
Maybe some other enterprising El Reg readers would like to create a competitor that wasn't so.... dirty?
I find reporting pretty much anything to Meta provides nothing tangible.
Personally it takes a lot for me to be pissed off enough to report something, but apparently Meta's Community Guidelines are morally superior to anyone else.
You just get the "Feck you! We don't care what you think!" auto response from their bots.
