Forum adverts like this one are shown to any user who is not logged in. Join us by filling out a tiny 3 field form and you will get your own, free, dakka user account which gives a good range of benefits to you: No adverts like this in the forums anymore. Times and dates in your local timezone. Full tracking of what you have read so you can skip to your first unread post, easily see what has changed since you last logged in, and easily see what is new at a glance. Email notifications for threads you want to watch closely. Being a part of the oldest wargaming community on the net. If you are already a member then feel free to login now.

Reaper Minitature has just posted the following on facebook and asked fans to spread the word


Reaper Miniatures


ALERT! ALERT! ALERT! ALERT!
If you receive an email from service@reapermini.com asking you for additional credit card information, this is a phish. DO NOT REPLY! We do not have a service@reapermini.com address so it is not actually coming from us. Someone is trying to rip you off!


(bad enough when it's paypal or your bank but you KNOW those are almost guaranteed to be spam, you might not be so careful if when it's a mini company, especially if you're waiting for replacement bits for your Bones KS shipment)

 OrlandotheTechnicoloured wrote:
Reaper Minitature has just posted the following on facebook and asked fans to spread the word


Reaper Miniatures


ALERT! ALERT! ALERT! ALERT!
If you receive an email from service@reapermini.com asking you for additional credit card information, this is a phish. DO NOT REPLY! We do not have a service@reapermini.com address so it is not actually coming from us. Someone is trying to rip you off!


(bad enough when it's paypal or your bank but you KNOW those are almost guaranteed to be spam, you might not be so careful if when it's a mini company, especially if you're waiting for replacement bits for your Bones KS shipment)

Is this one of those Mandelbaum things I've been hearing about?

Why does Reaper have rogue email addresses using their website?

@Begel, not, it is likely not a Mandelbaum thing. Not his MO.

decker_cky wrote:
Why does Reaper have rogue email addresses using their website?

It wont actually be the reapermini.com that you reply to, they use that as a mask over the real email address. Most people dont actually look that closely though and just click on through to reply or follow a link on a site.

decker_cky wrote:
Why does Reaper have rogue email addresses using their website?

I don't think they do (from their post)

Some scammer (probably with some knowledge of the gaming world) seems to be just sending out random emails (like you get emails pretending to be from banks/CC companies you don't even have accounts with) pretending to be from Reaper

folk outside of gaming will just ignore it, but Reaper customers risk thinking it's real thus the warning

It is odd that reaper has been singled out in this scam. I recall they had an issue a few years ago where their webshop (among a dozen other webshops with much higher profile that had nothing to do with gaming) had security issues. I wonder what reaper is doing to gain awareness from such unscrupulous individuals?

OP exalted for looking out for the community.

Has Reaper ever had their mailing list hacked?
If a scammer has a confirmed list, it's easiest to scam the customers of the victim company.
I've had various addresses (I have lots) taken, but none have targeting like this before. I get a gardening email address used to sell me casino time.

As to why Reaper seems to get hit but not GW my guess is it comes down to Reaper's style vs. GW's style. Reaper acts like a small bushiness with a small web team and one lawyer on the payroll and tells people about problems. Meanwhile GW has a good sized web team + Legal (appropriate for a publicly traded company with a pre-internet major international presence) that has it quietly dealt with so that the only members of the general public who know about it is the victims.

Just for a perspective thing....no one is "hitting reaper" they are just using a common name in the gaming industry to use as a cover.

Many scammers don't use confirmed lists, or they use other lists of similar topics (I have got phising emails before, for games I don't even have....)

The only reason why reaper is commenting here, is a proactive piece of information that "hey, this is not us if you get one of these".

Now, on topic a bit...

So, I think if we get one of these, we should track the site down, and have fun with him.

"Sorry, I don't have a credit card, but if you give me YOUR bank info, I can transfer you money....".

If the servers can accurately be identified, it should not be hard to turn this person over to authorities, etc.