Etsy sending emails with Personal adress for order that were not made in email.

[HephaestusForgeCraft]

Currently getting emails from etsy for orders I did not place and do not show up on my purchases page.

the emails are from Etsy's official no reply email and have provided a link:[This content has been removed by Moderation. Please do not share unsafe links in the Forums.]

that leads to nothing and the email shows My personal shipping address.

I am currently speaking with Etsy support but Even I do not think they know whats going on.

If my personal/home address is listed in the email and everything including the email from etsy appears to be genuine from the no reply email then I have reason to believe that etsy's no reply email has been hacked and customer information has been leaked.

I am posting this for documentation purposes and time log/stamp purposes if this post is deleted by etsy than it could be considered as evidence and that the deletion of this post and record could be construed as coverings up evidence.

[HephaestusForgeCraft]

I have sent screenshots and time stamps over to a family members email as well as keeping screenshots of my own email and everything else as Etsy support regardless of being buyer or seller has failed to solve any if most issues at hand.

personally I have too much BS too deal with but may pursue legal action if things do not sort them selves out.

[HephaestusForgeCraft]

Etsy has revoved the links provided:claiming unsafe links but they lead to non existent URL's and act as evidence to everything stated.

this could be construed as covering up evidence.

and in some states is a Felony.

[TheVintagePineapple]

Scammers have been hitting on established sellers for a while now, not just new sellers.  Are you sure the emails aren't some type of scam?  Are there any other links in those messages that the sender wants you to click?

[HephaestusForgeCraft]

THE EMAILS ARE FROM ETSY'S OFFICIAL NO REPLY EMAIL WOULD YOU LIKE COPIES/and was on phone with etsy support time stamped and all.

like I said if etsy's email.no reply services was hacked then customer information might have been leaked and any /all messages under this forum can and should be considered as evidences.

I don't think it would be right to provide info according too etsy's TOU's/in conflict.

As stated I am posting this for documentation purposes.

[TheVintagePineapple]

Ok then. No, no copies necessary.  You should add to your OP with something like ''not looking for replies''.

[Martybugs]

"THE EMAILS ARE FROM ETSY'S OFFICIAL NO REPLY EMAIL"

It's actually very easy to send emails that appear to come from a specific address.  Spoofing the "from" address is a very common technique by scammers / spammers.

You would need to look at the email headers in detail to see if it actually came through Etsy's mailserver.

[ChillwolfArt]

@ModAngie  Can you assist the OP. Thank You in advance.

[Amaradorn]

The Etsy noreply email is a legit notification that you have a message in the Etsy Messages system. The message it links to has probably been removed because it was from a scammer.  It's best not to click on links in emails - go directly to your Etsy shop manager (either on a browser or using the app) and check your messages there.

Either that or it was possibly a legitimate Sale notification, in which case it will include the seller's address (your address) - however If you are not seeing that sale on your Orders page then it was probably cancelled by the transaction processor (probably due to using a stolen credit card).

If it really is a purchase notification and you know nothing about it then it could be a phishing email. If you clicked on any links in the email and then logged into your Etsy account (or a fake website) then I recommend you change your password immediately. I also suggest you check the security of your account, sign-in log and enable 2 factor authentication (this is done in your user account settings, not Shop manager).

Scammers have been known to change the display email address in phishing emails, so you may need to inspect the email more closely to find the real email address of the sender to verify if it really came from Etsy.

[TheVintagePineapple]

@HephaestusForgeCraft  I see your second post directed to me has been removed.  Be aware that I didn't get a chance to report it and I did not have any hand in getting your live link removed. I'm not a paid snitch or any of the names you called me.   You must think I have some kind of power here!  lol

HOWEVER, I was going to report your reply to me but apparently someone else beat me to it.

Good luck with your problem.

[CanningCrafts]

I was in the middle of replying to that post when it went poof! That was rather harsh & out of line considering you were trying to help the OP!

[TheVintagePineapple]

@CanningCrafts So glad you had the chance to read it!  

[CanningCrafts]

I did & I was typing really fast & hard but not fast enough  

[HephaestusForgeCraft]

Honestly If you want to report me go ahead but orver the past year with the few posts I have made and you replying and some of em/most of em being reported/taken down when you are present.

I find it questionable at the very least and simply spoke my mind.

Is that a problem?

[TheVintagePineapple]

I don't typically report posts because I prefer leaving them so others can read them.   If I had replied in any previous OPs of yours, then it was purely coincidental that your posts were removed.  Were those deleted replies that you wrote similar to the one you wrote to me?  

[SmudgePlant]

@TheVintagePineapple  I've always known you to be helpful. 

I guess they deleted OP's reply in an effort to delete evidence. 

[CarpetCollectionAU]

@HephaestusForgeCraft Anyone can report a post / comment but, if there is nothing offensive or against Community Policy for participation in Forums, then the Mods will have no cause to remove it. Just something to think about before you "hit the keyboard".

Not sure why you think it is appropriate to use the Forum Space to record your own personal issue when the exact issue is unclear and your extreme reaction could, conceivably, unnecessarily alarm others.

As no one else had reported anything similar, it is most probable that your issue is not the result of any "hacking" of Etsy but, more, a local issue with email delivery or a more sophisticated targetted scam attempt.

I see you claim below to have a certain expertise with all things "computer", but even the best of us can, sometimes, look in the wrong dirrection for explanations.

[HephaestusForgeCraft]

Etsy's no reply email as stated provided both My personal address and A URL link: to a nod existent URL/address.

and again I was on the phone when this post was made plus have an Email stating that a supervisor will contacts me.

because of Etsy supports history and not resolving issues to satisfaction I personally asked for things in email.

[DianesK9Creations]

@HephaestusForgeCraft 

Major data leak exposes 1.6M Etsy, TikTok Shop customer emails

https://cybernews.com/security/etsy-tiktok-shop-customer-data-leak/

Most of the exposed shipping details come from the global e-commerce company Etsy, although researchers noted that some entries come from TikTok shops, Poshmark, and Embroly.

Most of the files are email versions of shipping confirmations, meaning the exposed include:

• Full names
• Home addresses
• Email addresses
• Shipping order details

[CanningCrafts]

That story was posted about a few weeks ago here:

https://community.etsy.com/t5/Technical-Issues/Etsy-data-breach-reported-today-does-anyone-have-more...

Sounds like it was maybe just one shop that had their offsite order data stolen, not actually Etsy.

[BagmakerSupply]

@HephaestusForgeCraft: eMail addresses are easily forged and spoofed - have you checked the eMail headers to confirm by server name / IP address that the eMail was actually sent from one of Etsy's mail servers?

[HephaestusForgeCraft]

I'm not some novice when it comes to data collection/Internet security,I run linux and personally have locked down my own system with permissions,folders and keep my hard drives encrypted.

[HephaestusForgeCraft]

you mean

email@email.etsy.com the email address I received things from?

cause I am sure I will be able to magically scan the Ip address it was sent from.

even if the Email is being spoofed the certificates cannot be easily obtained.

the way phishing emails normally work is by making a similar email/webste url in order to fool people.

the fact that Etsy's no reply email with everything being in order save for what is being received.

makes me think that things were hacked as well as the fact that I use a 12 plus random character password generator to made my passwords with each one being different.

[Martybugs]

"email@email.etsy.com the email address I received things from?

cause I am sure I will be able to magically scan the Ip address it was sent from."

Have a look at the email  headers to confirm if the email actually came through Etsy's mailservers.

It's very easy to spoof the "from" address of emails.

As you're clearly not a novice, and a security expert, checking the email headers should be trivial for you

[BagmakerSupply]

@HephaestusForgeCraft: "cause I am sure I will be able to magically scan the Ip address it was sent from." It is not magic - it is just looking at the eMail's headers. If you are not a novice then you know how to look at the headers. You want the 'received' line(s) in particular and if it is from Etsy it will say something like "from o3.ptr6308.mail.etsy.com (o3.ptr6308.mail.etsy.com [149.72.156.135])".