Got an email from EtsyAllertsids@sheildsecurid.site saying to confirm order

[riasusama]

hello! I just saw in my email in the spam folder that I had an email saying this: 

Dear Seller,

A new order has been placed on Etsy#904227 - sell. Please review the details below and confirm the order to proceed with fulfillment.

Order ID: #904227

Item: Rainbow Heart Custom Sub Badges Emotes Bits for Twitch Cozy Stream Digital Download

Please confirm the order within 24 hours to ensure timely processing.

And then there's a button to confirm the order. 

This really is scam, right? When we make a sale, there's no need to confirm orders on email right? I used to sell things on etsy years ago but I dont remember how things work anymore and now I sell digital items, not physical ones, don't know if it works the same way. 

Thank you so much for your help!

[bradgoodell]

SCAM!

[NanaLetha]

SPAM!

[ButterflyFeetDigital]

Things to read:

https://community.etsy.com/t5/Announcements/Protect-Your-Account-From-Scammers/m-p/143158945#M1882

https://community.etsy.com/t5/Managing-Your-Shop/How-to-Spot-a-Scam-No-a-Buyer-Doesn-t-Need-Your-Ema...

https://community.etsy.com/t5/Announcements/New-From-Etsy-section-in-Messages/m-p/143722497#M1899

https://help.etsy.com/hc/en-us/articles/360000343128-How-to-Handle-Spam-and-Suspicious-Messages

If you receive an actual order, you will see it in your "Orders and Shipping" section and you will receive an email from Etsy notifying you that you have a sale, and there will be a notification in your dashboard as well.

[bradgoodell]

Click "Report" and send it to Spam.  

When you get a REAL sale, the sale will appear on your shop dashboard and the money in your shop payment account. You never need to "confirm" an order.

[ThePurplePuppy]

@bradgoodell 

She said it is already in spam. Etsy put it there--I would not suggest removing it and  then putting in "report". I would leave it alone and not touch it with a ten foot pole! LOL

But that is just me and what I would do.

[ThePurplePuppy]

"This really is spam, right? When we make a sale, there's no need to confirm orders on email right? "

RIGHT! RIGHT!

You are right--this is spam and nothing but. You do NOT confirm an order=Etsy and the payment provider do that by processing it--then it appears when it has finished processing on your dashboard under the link that says "Orders & Shipping." You then prepare the order and ship

Leave this spam in your spam folder where Etsy properly put it!

[riasusama]

what really amazes me is how they already got my email since I only use this email for etsy, literaly, and I dont even accept any kind of cookies.... 

[ThePurplePuppy]

@riasusama 

They seem to get emails and new shop openings almost immediately. They must have some kind of program that scraps Etsy constantly.

[PrimFun]

@riasusama   You mean messages not email?  Or do you mean email?  

If it was email, emails like telephone numbers are easy to find.

Cookies have nothing to do with it really but you have to have cookies or most sites will not operate.

Your shop is incomplete and scammers love incomplete shops hoping you fall for their scam. 

[ModKenneth · Accepted solution]

Hello,

Etsy is actively engaged in preventing scammers from targeting our community members. If you receive a suspicious message, please proceed with caution. Etsy Support will never ask you to provide personal information via Etsy Messages, such as your email address or password. Any legitimate message from us will show in your "From Etsy" folder.

If you receive a suspicious message, here’s how to report it:

1. Sign in to Etsy.com and go to Your Account.
2. Go to Messages. 
3. Select the suspicious message from your inbox. 
4. Choose Report.

You’ll find examples of common scammer techniques and phishing messages here in our Help Center. Read our Account Security Checklist in the Seller Handbook for more steps you can take to protect your account.

[riasusama]

hello! thank you for your help, but the real problem here is that it was actually an email and not a message on etsy.. that's what's upsetting me the most!!!! because how do they have my email????? 

[PrimFun]

@riasusama   If your email is available to your bank, medical or any other site then it is out there and it's easy for scammers to get lists of emails.

If you were ever part of any data breach, your information is out there.

That's why we all have to maintain the best security we can and be aware of scam attempts.  

[UniquelyDeveloped]

Thanks for the help

[riasusama]

@ThePurplePuppy that is really really bad.. our info is being leaked

[ThePurplePuppy]

@riasusama 

I am not a techie and no idea how this thing works but I do not think they can get to sensitive info like our CC or bank info.  They do however seem to know when a shop is new or reopened and the email ties to it.

[PrimFun]

@riasusama   Etsy does not leak your information.   Etsy it is more secure than other places.  Emails are obtained from many sources. 

One reason to have anti-virus software that scans messages.  

[UniquelyDeveloped]

yes I was wondering how they got my email address?? 

[TheVintagePineapple]

@riasusama When we get message on Etsy, we also get notified of that message in our regular email account if you have that option enabled for your account.  You don't see the whole message and by the time you check your Etsy messages in order to read it, the message may have already been placed in your spam folder if Etsy caught it in time.  Sometimes they are deleted completely.

The regular email was automatically sent by Etsy.  A scammer doesn't usually have access to your email unless they also purchased something; it's located at the bottom of the order receipt. 

[NEONMTN]

I'm with @riasusama - no message in Etsy inbox, but it is in my email.

I just opened my second shop and *as soon as I did* I started get spam emails. Immediately.

Right now, on my dashboard, it shows that I have a sold item, but I did not get a "Congratulations on your first sale" email from Etsy. Instead I got the spam email asking me to click a link to confirm the sale. I don't know how they're spoofing the sale on my dashboard. This happened when I listed to my first shop as well. I took a screenshot this time, and will take another when the sale magically disappears like it did before.

[bradgoodell]

If someone places and order and it pends due to verification, it shows on your dashboard.  Then it either clears or cancels.  Apparently the scammers have learned to trigger it with fake orders that won't complete.  The scammers have become pretty sophisticated.  

[TheConsultancyLeap]

I just set up an account and also got this.  What is more worrisome is that it is showing i sold one item in my store 30 mins after setting it up.   So they are integrated into Etsy, not only stealing data but also able to show it is sold in my dashboard.  scary.    

[ChillwolfArt]

@TheConsultancyLeap  Hi, I'm very sorry about this. There is an infestation of scammers here. Etsy catches some of them, but not nearly enough.
When you receive a TRUE Order, it will appear under "Order" (Left Column of Shop Manager). It will also show in your Payment Account. If it isn't there, you have no Order. *(If an Order showed in your Dashboard and then was poofed, it may be that Etsy caught it in time (stolen credit cards perhaps).
If a true Order is "Processing", it will say so (and you don't ship until it is cleared). If you get an Etsy Message from a scammer, just remember to select "Report" (to Mark as Spam), so you don't get dinged for Star Seller.

I hope this helps, and I really hope the scammer situation lessens for you and others. Sellers shouldn't have to deal with this nonsense when they are trying to set up Shop, not to the degree it is happening here.

[PatrioticPrism]

Also, Etsy doesn't comment too much on emails as that is usually the user's responsiblity since it is on your end. But, for examples on how to check emails are phishing emails, the emails will come right along with any scam messages you have received. Also, click the "show details" on the "to" section of your email platform and look at the info provided (I recently just got these two scam emails right after i listed the product):

 Etsyallerts - order #901642 [This content has been removed by Moderation. Please do not share unsafe email address in the Forums.]
 Etsy · Order Notify [This content has been removed by Moderation. Please do not share unsafe email address in the Forums.]

Notice that "Allert" is mispelled and no clue on the ".cfd" domain. And the recipient on the other is "[This content has been removed by Moderation. Please do not share unsafe email address in the Forums.]'? Come on! and neither from "@etsy.com". Be sure to report these emails as "Phishing emails" and block them.
This is the easiest way to know if phishing email or not. And basically, never click on any buttons or links until this information is verified

[PriveRoses]

I just got an email from this address: 

[This content has been removed by Moderation. Please do not share unsafe email address in the Forums.]

and it's phishing! Be careful out there.