Reply
cancel
Showing results for 
Search instead for 
Did you mean: 
Reply

Possible ID theft scan

blakemitchell55
Ace Contributor
Blake M Member Since: Feb 24, 2017
1 of 5

Hello,

I am wondering about something kind of strange. I have been getting what look like perfectly legitmate notifications much like the ones I get, on a regular basis, from Upwork. They always say the same thing, that my account has been accessed by an unknow device, often when I am actually logged in myself, at an unknown location typically at least 1,000 miiles from where I live. The notification suggests I change my password and contain links, in the E-mail, where one can supposedly to change it. The last thing the E-mail says is a question: "Was this you who did this?". Well, I virtually never login on an unknown device and the notifications, again, usually show up while I am using the save device I always use.

So, question is, have you guys been sending me notifications that my account has been logged into, by an unknown device, generally speaking, from many places across the entire United States, with it being a different, apparently random, location every time?

egaruth
Moderator
Nikola S Moderator Member Since: Jul 2, 2020
2 of 5

Hi Blake,

 

I am sorry for the late response. I shared your concern with our team and one of our agents already reached out to you directly via a support ticket to assist you further. You can access your ticket on this page.

 

~ Nikola

Untitled
blakemitchell55
Ace Contributor
Blake M Member Since: Feb 24, 2017
3 of 5

Gentlemen,

I think we may have a serious problem. I continue to get notifications, supposedly from Upwork, saying an unknown device, or browser, has been used to login to my account. This seems to happen at the same time I am already logged in and using my account. The apparent notification suggests I change my password immediately and there are links in the E-mail to do so, and/or contact the support team. I have now changed my password twice, and yet I still keep getting what are beginning to look very much like BOGUS notifications. I had asked before if Upwork is sending these and got NO reply. The last time I reset my password was on 5/23/21 and I got the latest "notification" today, 5/30/21. The latest password is 20 characters long including letters (upper and lower case), numbers and special characters. This is an EXTREMELY strong password and I find the idea that it could have been cracked in 7 days to be absolutely unacceptable. So, either these are fake notifications, from a scammer somewhere, who happens to know my E-mail address, or you people have an internal security problem. That is, someone, in your company, may be stealing user's passwords from your encrypted database and handing them out, or selling them, to scammers. I sincerely hope it is the first case and not the second, as the second would represent a VERY serious problem to your company in many untold ways. But at this point, I honestly don't know which is the truth.

2a05aa63
Community Guru
Viacheslav K Member Since: Sep 9, 2015
4 of 5

Try changing your email password as well, enable 2 factor authorization  and check your machine with some antivirus.

andregutierrez22
Moderator
Andrea G Moderator Member Since: Jul 7, 2020
5 of 5

Hi Blake,

 

I checked and it looks like our team has reached out to you with more information regarding this concern and to assist you further. Could you please confirm if you received their email or are able to access your support ticket here? If you have any further questions, please feel free to reply to the team directly as they are the ones who can best assist you.

 

~Andrea
Upwork
TOP SOLUTION AUTHORS
TOP KUDOED MEMBERS