ÌÇĐÄvlog

Skip to content
NOWCAST ÌÇĐÄvlog News on METV at 9pm Sundays
Watch on Demand
Advertisement

A DoorDash driver was locked out of her account after being hacked. Security experts weigh in

A DoorDash driver was locked out of her account after being hacked. Security experts weigh in
DE SEMANA. BUT EVENTUALMENTE EXTRA ADDITIONAL BRINGING IN CASH IN BETWEEN JOBS. FREQUENCY. MARY PRIMERA SAYS SHE STARTED DELIVERING FOOD FOR DOORDASH FOUR YEARS AGO. IT WAS THIS FEBRUARY. SHE GOT LOCKED OUT. RECEIVED AN EMAIL SAYING HER PASSWORD WAS CHANGED. THE PROBLEM SHE DIDN’T CHANGE IT DECENT. LA QUINTA. NO POR LA QUINTA ENTREGA PUEDEN VER EN EL DIA REGISTRADO ACTIVIDAD DENTRO DE LA QUINTA BAJO NUMERO SEGURO DE SOCIAL SOMEONE MAKING DELIVERIES, CONTACTING CUSTOMERS AND TAKING THE MONEY ALL WITHOUT BEING VERIFIED BY DOORDASH. WITH THESE APPS AND ACCOUNTS, WHETHER IT’S IT’S DOORDASH OR UBER OR LYFT, YOU ARE GOING TO SEE DESPERATE PEOPLE LOOKING TO TAKE OVER THOSE ACCOUNTS. EVA VELASQUEZ WITH THE IDENTITY THEFT RESOURCE CENTER SAYS PEOPLE MAY TAKE OVER ACCOUNTS IF THEY DON’T HAVE THEIR OWN SOCIAL SECURITY NUMBER OR OTHER WORK CREDENTIALS. WE ARE ACTUALLY SEEING A SLIGHT AND IT’S A VERY SLIGHT UPTICK, BUT IT’S NOTICED ALL NUMBER OF INDIVIDUALS WHO ARE CALLING US AND SAYING THAT THEY’RE CREDENTIALS, I.E. THEIR SOCIAL SECURITY NUMBER IS BEING USED FOR EMPLOYMENT PURPOSES IN 2021, 99 PEOPLE WERE CHARGED IN A NATIONWIDE SCHEME SETTING UP FRAUDULENT DRIVER ACCOUNTS WITH RIDESHARE AND DELIVERY COMPANIES. SECURITY EXPERTS SAY IT COULD START HAPPENING MORE OFTEN. DOORDASH ACCOUNTS THAT ARE IN GOOD STANDING MAY HAVE VALUE ON THE DARK WEB, AND BAD ACTORS MAY LOOK TO FIND THEM TO PICK UP A SIDE GIG ON THEIR OWN. A QUICK SEARCH ON FACEBOOK MARKETPLACE REVEALS SIDE GIGS FOR SALE. DOZENS OF ADS FOR RENTED ACCOUNTS. UBER TELLS US THEY DON’T ALLOW ACCOUNT SHARING. INSTACART SAYS A SHOPPER MAY NOT ALLOW ANOTHER PERSON TO MAKE DELIVERIES ON THEIR ACCOUNT FOR ANY REASON. UNDER DOORDASH RULES, DRIVERS CAN ASSIGN SOMEONE ELSE THEIR DELIVERIES AS LONG AS THEY HAVE THEIR OWN VALID ACCOUNT. BUT IN PRIMERAS CASE, SHE NEVER AUTHORIZED ANYONE TO TAKE OVER. WE ASKED DOORDASH FOR A STATEMENT. A SPOKESPERSON SAID, QUOTE, WHILE THESE INCIDENTS OF FRAUD ARE NOT UNIQUE TO DOORDASH WERE SADDENED THAT THIS DASHER WAS THE VICTIM OF SUCH A SOPHISTICATED ACCOUNT TAKEOVER SCAM. COMUNICADO CON SEE NO AS A ABOGADOS. YOU KNOW, WE ANOTHER SOLO MOVIE, A LIMITED LOSS NINGUNA RESPUESTA PRIMERA SAYS A DOORDASH REPRESENTATIVE FINALLY CALLED HER ONE DAY AFTER WE GAVE THEM HER NAME TO TELL HER THAT HER ACCOUNT HAD BEEN CLOSED. SHE’S CONCERNED HER TROUBLES AREN’T OVER. UNFORTUNATELY, SHE’S GOING TO HAVE TO PAY A VERY CLOSE EYE ON THE WAGES REPORTED EARNINGS AND WAGES REPORTED TO THE IRS AND THE SOCIAL SECURITY ADMINISTRATION. EL PROBLEMA. GAVE US MUCH MUCHO MAYOR ANDREA FLORES, KCRA THREE NEWS. DOORDASH SAYS THAT PRIMERA IS ACCOUNT WAS CLOSED APRIL 4TH, NEARLY TWO MONTHS AFTER SHE WAS LOCKED OUT. SHE SAYS THAT SHE WAS INFORMED IT WAS CLOSED ABOUT A MONTH LATER. AND WE ASKED WHY IT TOOK SO LONG TO CLOSE THE ACCOUNT. DOORDASH SAID THAT THEY’RE CONDUCTING WHAT THEY’RE CALLING A THOROUGH INTERNAL INVESTIGATION INTO WHAT WENT WRONG. YOU KNOW, I HAVE TO SAY, AS A MOM, WE DO ORDER DELIVERED FOOD SOMETIMES IF WE’RE LEAVING THE KIDS HOME, MAYBE DURING THE AFTERNOON AND IT’S IT’S EYE OPENING. I MEAN, IT’S A GOOD REMINDER TO, YOU KNOW, EITHER MAKE SURE THAT. IT’S LEFT ON THE PORCH OR YOU MAKE SURE YOU’RE HOME WHEN THE FOOD COMES BECAUSE THE LEGIT DRIVERS ARE VETTED. YOU KNOW, THESE THESE SCAMMERS ARE COMING. YOU KNOW, YOU DON’T KN
Advertisement
A DoorDash driver was locked out of her account after being hacked. Security experts weigh in
Merivett Primera had been a DoorDash delivery driver for four years as a way to earn some extra money on the weekends. She says she never ran into any issues, but earlier this year, that all changed.Primera says on Feb. 13, she received an email from DoorDash saying her password had been reset. The problem? She never reset it and she was locked out of her account.She tried to contact the company to clear up the mistake, but she says she wasn’t able to prove that someone else was logging into her account. “I managed to prove I’m the owner of the account because this is my birthday, it’s all my data, but they tell me the email and phone number do not match," Primera told sister station KCRA in Spanish.Primera said eventually, she just tried to close the account, to be sure no one else was using it. But that didn’t work either.“I called to close the account, they said no, the account is still open. They say even today, they have made deliveries. They can see the activity in the account under my Social Security number," she said. That’s when Primera realized someone was actually taking over her account, operating as if they were her.“With these apps and accounts, whether it’s DoorDash or Uber or Lyft 
 you are going to see desperate people looking to take over those accounts,” said Eva Velasquez, president and CEO of the Identity Theft Resource Center.Velasquez says people may take over accounts like this for a variety of reasons, including that they don’t have their own social security number or can’t meet other employment criteria.“We are actually seeing a very slight uptick, but a noticeable number of individuals, who are calling us and saying that their credentials, i.e., their social security number, is being used for employment purposes,” Velasquez said.In 2021, 19 people were charged in a nationwide scheme, accused of setting up fraudulent driver accounts with various rideshare and delivery companies. As part of the scheme, Clovis Placido of Citrus Heights was charged with conspiracy to commit wire fraud and aggravated identity theft. Prosecutors say the defendants were renting and selling fraudulent accounts to drivers who might not otherwise qualify to drive for those services.Security experts say this kind of crime could start happening more often.“DoorDasher accounts that are in good standing might have value on the dark web, and bad actors may look to find them to pick up a side gig,” said Sean McNee, vice president of internet intelligence company DomainTools.A quick search on Facebook Marketplace reveals side gigs for sale. There are dozens of ads for rented accounts. According to the DoorDash website, under DoorDash rules, drivers are allowed to have others drive for them or drop off deliveries, but that person would also need a valid Dasher account.In Primera’s case, she never authorized anyone else to take over.KCRA asked DoorDash for comment. In a statement, the company said: "While these incidents of fraud are not unique to DoorDash, we’re saddened that this Dasher was the victim of such a sophisticated account takeover scam. We have been in direct contact with the Dasher to resolve the issue, offer our support and get them back on our platform securely.We regularly remind Dashers to keep their account information secure and frequently share tips with them on how to avoid these types of attacks. If a Dasher ever receives a request for any of their account details or suspects their account has been compromised in any manner, we urge them to contact DoorDash Support immediately."Primera says a DoorDash representative called her one day after KCRA gave them her name and asked about her claims. She says that the person informed her that her account had been closed. The company told us the account had been closed on April 4.She’s concerned even though the account is closed, her troubles aren’t over."Unfortunately, she's going to have to pay a very close eye on the earnings and wages reported to the IRS and the Social Security Administration," Velasquez said."Right now, I'm only seeing a small piece of the problem," Primera said. "But I'm sure that it will be much, much greater."

Merivett Primera had been a DoorDash delivery driver for four years as a way to earn some extra money on the weekends. She says she never ran into any issues, but earlier this year, that all changed.

Primera says on Feb. 13, she received an email from DoorDash saying her password had been reset. The problem? She never reset it and she was locked out of her account.

Advertisement

She tried to contact the company to clear up the mistake, but she says she wasn’t able to prove that someone else was logging into her account.

“I managed to prove I’m the owner of the account because this is my birthday, it’s all my data, but they tell me the email and phone number do not match," Primera told sister station KCRA .

Primera said eventually, she just tried to close the account, to be sure no one else was using it. But that didn’t work either.

“I called to close the account, they said no, the account is still open. They say even today, they have made deliveries. They can see the activity in the account under my Social Security number," she said.

That’s when Primera realized someone was actually taking over her account, operating as if they were her.

“With these apps and accounts, whether it’s DoorDash or Uber or Lyft 
 you are going to see desperate people looking to take over those accounts,” said Eva Velasquez, president and CEO of the Identity Theft Resource Center.

Velasquez says people may take over accounts like this for a variety of reasons, including that they don’t have their own social security number or can’t meet other employment criteria.

“We are actually seeing a very slight uptick, but a noticeable number of individuals, who are calling us and saying that their credentials, i.e., their social security number, is being used for employment purposes,” Velasquez said.

In 2021, , accused of setting up fraudulent driver accounts with various rideshare and delivery companies. As part of the scheme, Clovis Placido of Citrus Heights was charged with conspiracy to commit wire fraud and aggravated identity theft. Prosecutors say the defendants were renting and selling fraudulent accounts to drivers who might not otherwise qualify to drive for those services.

Security experts say this kind of crime could start happening more often.

“DoorDasher accounts that are in good standing might have value on the dark web, and bad actors may look to find them to pick up a side gig,” said Sean McNee, vice president of internet intelligence company DomainTools.

A quick search on Facebook Marketplace reveals side gigs for sale. There are dozens of ads for rented accounts. According to the DoorDash website, under DoorDash rules, drivers are allowed to have others drive for them or drop off deliveries, but that person would also need a valid Dasher account.

In Primera’s case, she never authorized anyone else to take over.

KCRA asked DoorDash for comment. In a statement, the company said:

"While these incidents of fraud are not unique to DoorDash, we’re saddened that this Dasher was the victim of such a sophisticated account takeover scam. We have been in direct contact with the Dasher to resolve the issue, offer our support and get them back on our platform securely.
We regularly remind Dashers to keep their account information secure and frequently share tips with them on how to avoid these types of attacks. If a Dasher ever receives a request for any of their account details or suspects their account has been compromised in any manner, we urge them to contact DoorDash Support immediately."

Primera says a DoorDash representative called her one day after KCRA gave them her name and asked about her claims. She says that the person informed her that her account had been closed. The company told us the account had been closed on April 4.

She’s concerned even though the account is closed, her troubles aren’t over.

"Unfortunately, she's going to have to pay a very close eye on the earnings and wages reported to the IRS and the Social Security Administration," Velasquez said.

"Right now, I'm only seeing a small piece of the problem," Primera said. "But I'm sure that it will be much, much greater."