FS: Video Card Possible Scammer / Dont trade

  • Notice: Market Section Posting Privileges

    Dear Guest,

    We appreciate your interest in participating in the Marketplace. To maintain a safe and reliable trading environment, posting privileges are granted only to users who meet the following criteria:

    • Minimum 25 forum posts in technical sections
    • Account age of at least 30 days

    Alternatively, you can gain accelerated access by upgrading to Enclave Plus Membership, which includes additional perks and privileges.

    If you have any questions or wish to learn more about becoming an Enclave Plus member, please feel free to reach out to us using the 'contact us' form in the footer..

W8 how did get that account? Seems fishy. Dont you need mail and password? I think they are both in on it. The OP and original account owner. The name in his gpu photo also looks edited and not handwritten. Hmm I joined 3 months back and this is the second scam case. Is it always like this before as well?
 
Request all members to also enable 2FA
I believe this was already enabled by default for every single account after an account got compromised and used for a scam in a similar manner. I remember it being enabled on mine even though I never did.

the OP is old, he is responding, he has good seller reviews from past...
Time and time again, this is one of the reasons why I don't give 2 shits about the seniority or age of an account, just because you bought or sold something here 5 years back doesn't mean you're still trustworthy today and like we have seen before, accounts get hacked from some other database leaks. Doesn't take a genius to copy a sale thread's photo style and handwriting.


Honestly though, have some sense, we're a tech forum, not a charity organisation.
Whoever paid 11k for an rtx 3070 FE, I really hope you can get your money back (unlikely) but this is just stupidity from your side as well. Even if the listing was real in some universe, it might not even be fully functional for all we know.
 
Last edited:
W8 how did get that account? Seems fishy. Dont you need mail and password? I think they are both in on it. The OP and original account owner. The name in his gpu photo also looks edited and not handwritten. Hmm I joined 3 months back and this is the second scam case. Is it always like this before as well?
No It isn't like this before. If a scammer is identified and blacklisted all other members don't engage with them anymore.

Sometimes it happens and also TE is in a transformation mode, so maybe these might have got hold of the info somehow as I also don't know how and is scamming TE members. Maybe.
 
For now all old accounts with more than 6-10 months of inactivity should be immediately blocked.
Agree with this.
If not blocked, then at least their market privileges should be temporarily revoked and can be enabled by going through the same 1 month / x number of messages system that we have in place.

In addition to this, 2FA should be made mandatory for all accounts.
It's 2025 this is a basic security measure now!
 
Did both of them got money back or lost it? I think the scammer might have gotten hold of the account through TE WhatsApp group. Looks like it though but cant say how exactly.
No, we both lost it...
I believe this was already enabled by default for every single account after an account got compromised and used for a scam in a similar manner. I remember it being enabled on mine even though I never did.


Time and time again, this is one of the reasons why I don't give 2 shits about the seniority or age of an account, just because you bought or sold something here 5 years back doesn't mean you're still trustworthy today and like we have seen before, accounts get hacked from some other database leaks. Doesn't take a genius to copy a sale thread's photo style and handwriting.


Honestly though, have some sense, we're a tech forum, not a charity organisation.
Whoever paid 11k for an rtx 3070 FE, I really hope you can get your money back (unlikely) but this is just stupidity from your side as well. Even if the listing was real in some universe, it might not even be fully functional for all we know.

I did some quick compare, there was a 3080 FE sale here for 19900 (just recent), the last sold 3070 FE was for 17000; this one came up for 11k... Yes, it was totally skeptical but could become a very good deal due to the stellar pricing
I read through the old sale threads of the same member, they seemed legit, and his last sale was on 2022, I have previously made deals with old members who came back alive after almost 5 years...

Yes, and there were signs... I knew that this would be a gamble (but the probability was 50-50 when I just had enough information to get in)... I just lost it...

It's easy to connect the dots after you know the big picture...

Will be careful the next time, lesson learnt...
 
  • Sad
Reactions: bssunilreddy
To me , this forum is more than olx alternate. More than just to sell.
I try to check who I'm dealing with. If you look, warning sign may be spotted.
There are people doing a lot to help fellow members without even asking. You can see that there , this community is more than buy/sell.

Whoever made the payment first, Not updating the thread with a comment upon the payment was also big mistake.

I'm 200% sure that these scammers still come back on this site to buy/sell , know about deals etc .. so be extra careful ppl, they spoil the water for everyone.

I think there should be additional requirements to post anything above 10k .. i know mods team already have a lot to handle but this community should definitely take another step
 
Last edited:
Did TE have a breach? I've seen a bunch of old-timers' accounts being used to scam of late. With this one I'm still not sure if there are two different people. The same guy could've just decided to do it.
 
  • Like
Reactions: bssunilreddy
I believe this was already enabled by default for every single account after an account got compromised and used for a scam in a similar manner. I remember it being enabled on mine even though I never did.


Time and time again, this is one of the reasons why I don't give 2 shits about the seniority or age of an account, just because you bought or sold something here 5 years back doesn't mean you're still trustworthy today and like we have seen before, accounts get hacked from some other database leaks. Doesn't take a genius to copy a sale thread's photo style and handwriting.


Honestly though, have some sense, we're a tech forum, not a charity organisation.
Whoever paid 11k for an rtx 3070 FE, I really hope you can get your money back (unlikely) but this is just stupidity from your side as well. Even if the listing was real in some universe, it might not even be fully functional for all we know.
If you look closely then you will find that both of those threads have the same handwriting. I believe this current scam is also by the same guy.
He somehow was able to get in via the same method thrice.
 
If you look closely then you will find that both of those threads have the same handwriting. I believe this current scam is also by the same guy.
He somehow was able to get in via the same method thrice.
+1
Now, i don't see any pictures on this thread. They were here yesterday. Can someone post them if they got hands on it?
Edit: he uses another country format on the handwritten note, not as Indian format. I mean not 22/01/22 but 01/22/22...(nvm, this is mentioned on that thread as well)
 
Last edited:
there was a 3080 FE sale here for 19900 (just recent)
I'll be honest, that one should have been a scam, it just wasn't lol. And for the most part the Seller was strict on it either being a local pickup or the buyer himself should arrange for it without him doing any packing.
 
passkey is there, totp is there. Email is not as good because if someone is careless with passwords, he is probably careless with email too. And email might get attacked first by chance and then TE.
Best is to have something that needs something physical.

I enabled 2nd factor today for TE.
Hmm, I guess 2FA isn't enabled for accounts post 2022. Or accounts created after it was enabled. 2fa was enabled on all the old accounts if I'm not wrong post these incidents.
Unless they used something like token grabbing? But that seems unnecessarily hard.
 
Hmm, I guess 2FA isn't enabled for accounts post 2022. Or accounts created after it was enabled. 2fa was enabled on all the old accounts if I'm not wrong post these incidents.
Unless they used something like token grabbing? But that seems unnecessarily hard.
Wild guess, he probably had email for 2fa. But still if this is the same guy who hacked into TE accounts earlier, did he hack TE first and then email again ?
Perhaps both had same password, which is terrible but people do that.

TE site could have a vulnerability too considering multiple breaches by same guy.
 
Last scam was from a Bihar, Patna guy who was a member since 2013 I think. This guy repeatedly made scam deals after which he was banned but he created 2 another accounts tried to scam by selling a already dead GPU and trying to buy it using another of his accounts.

Now is that guy and this guy are the same person or different person? Please tell me? Thanks.
 

the thing is, the person who replied in the whatsapp didnt explicitly said he has changed his password now. just said password changed. (that keeps me in doubt.
me to the person in screenshot to whom this account belonged to " abe tu bata raha hai ki puchh raha hai?? why do people hesitate to type/talk. par jab kisiko target karna hai, gariyana hai, negative light mai dikhana tab to paragraph par paragraph pel dete hai, nice try diddy jaise comment paas kiye jaate hair aur phir darke delete/edit bhi kar lete hai " )
-----------
scammer was quite adamant on paypal/crypto which give him chance to use same account but ability to bs on whether he is the same or different person.
-----------
the ip address in the whatsapp when i looked more about it points in maharashtra
------------

https://www.abuseipdb.com/check/152.58.0.194
-
The IP address 152.58.0.194 is associated with Reliance Jio Infocomm Limited, a major mobile internet service provider in India. This IP falls within the range 152.58.0.0/16, which is allocated to Reliance Jio and is commonly used for mobile broadband connections across various regions in India.WHOIS-Service+5WHOIS-Service+5IPAddress.com+
It's important to note that IP geolocation can sometimes be imprecise, especially with mobile networks, as IP addresses can be dynamically assigned and may not accurately reflect the user's physical location.

According to AbuseIPDB, this IP address has been reported twice for abusive activities, specifically for Brute-Force SSH attacks. The reports were filed in July and August 2024, with the most recent being approximately six months ago. The confidence of abuse is listed as 0%, which may indicate limited corroborating evidence or that the reports are outdated.
-----------------
According to AbuseIPDB, this IP address has been reported twice for abusive activities, specifically for Brute-Force SSH attacks. The reports were filed in July and August 2024, with the most recent being approximately six months ago. what does that mean???

Good question — let me explain it clearly:
  • Brute-Force SSH Attacks mean someone tried to force their way into a computer or server by rapidly guessing usernames and passwords over the SSH (Secure Shell) protocol.
    SSH is a secure way computers talk to each other, often used by system administrators to manage servers remotely.
  • Reported twice means that two different reports were filed by individuals or systems that detected suspicious or malicious behavior coming from that IP address.
  • In July and August 2024, means these hacking attempts (or suspected attempts) were detected around mid-2024, and no recent reports have been filed since then.
  • Approximately six months ago (since it's now April 2025) tells us that this IP hasn't been caught doing anything suspicious recently — or at least, not reported publicly.

In simple terms:
This IP address, belonging to Reliance Jio in India, was caught trying to hack into servers by guessing passwords about half a year ago. It hasn't been flagged recently, but it's not fully clean in reputation either.


Would you also like me to explain what risk you face if you interacted with this IP (and how serious it might be)?
It’s important depending on how you encountered the scammer.
4o

wait does that mean person tried or someone else tried to get in their account?

Good question — here's the clear answer:
It means that someone using that IP address tried to hack into other people's accounts or servers, not the other way around.
  • The IP (152.58.0.194) was the attacker, not the victim.
  • They (or someone using that internet connection) were sending thousands of password guesses trying to break into systems they did not own.
So they were the one trying to get into others' accounts, not someone trying to hack them.


Bottom line:
The IP you mentioned has a history of being used for hacking attempts — which supports your claim that the person might be a scammer.
(i had said might be a scammer to the chatgpt)
--------------
I am leaning towards that person may be same, nahi-to chatgpt galat hai. if not atleast he had tried to hack servers. also his account was online 6:41 pm today. but didnt bother to comment that he was hacked.
 
Last edited: