R189 unaccounted for, OOB shark or something else?

[VC-1]

A mate of mine had a similar problem with content services billing and Vodacom billing dept "Blocked" his SIM from "content services" as Mtn has a simple Ussd comd that does the same.
These services use a WAP Link on websites like Mira etc.
Hope this clears up some mystery.

 

[HideInLight]

Careful, the WASPs will accuse you of "hacking" their systems.

I wish, because that would of meant I was smart. This is just plain retarded, all you have to do is change one letter...
But I was unable to access my account's "control panel" on the site I "subscribed" to so it does not explain my case, but it could explain many others problem. Unless you subscribe for a day, and you literally just change "your number" to someone else's number.

No "hacking" required on that one, but that part is just theory. I'm interested in this so called Double OPT verification message that seems to be MIA

I have received the WASPA report though, who here should I send it to?

*My argument
Apparently I signed up with links that give you a 404.
The links doesn't correspond to that of a normal legit sign up process for that specific site at all.

They show two sms message send to me.

First one is a confirmation message that I registered. (was already billed at this point)
Other on is a reminder send much later (not much of a reminder among other WASPA spam)

However during a legit sign up process where you enter a number, it clearly states you must reply Yes to some kind of verification SMS. That verification SMS doesn't exist, which SMS did I apparently reply Yes to?
I have send one SMS that entire month with that number, and it shows up on my bill as my friend's number.

How can their site have two completely different registration processes and links? The ones I apparently registered from giving a 404 error almost as if they trying to hide something?

edit: Might as well
http://www.sendspace.com/file/7q5hyk

There's the report.

 

[ginggs]

I wish, because that would of meant I was smart. This is just plain retarded, all you have to do is change one letter...

Where have you been?
http://mybroadband.co.za/news/security/84993-true-story-behind-joburgs-online-security-problems.html

 

[HideInLight]

http://www.reportacrime.co.za/CrimeReport.aspx?ID=4767

More people caught out by them:

Comment by: Sue
Comment

Yup, that is what get's me: they dont require the confirmation - the first I got was a sms telling me that I had subscribed and would be debited. I was like WTF....seriously. The gentleman at Cellspice had the cheek to tell me that I had subscribed as it was my cellphone number and I had been on the website and the more I told him my phone was with me and I HAD NOT, the numbnut said I had. He then "admitted" someone "might" have put in the wrong number and he would cancel/delete and then "block" my number from ever being used. TWITS

Date: 9 October 2013
- See more at: http://www.reportacrime.co.za/CrimeReport.aspx?ID=4767#sthash.pKdrSD75.dpuf

and that's about how much time I have left to deal with this crap...
That confirmation SMS from Vodacom that was suppose to protect me, where is it? Why did they get the go ahead anyways?

 

[DominionZA]

So if you did not double opt in it cannot happen?

My wife is with Vodacom and she got klapped with a R600 bill last month for mira networks or something.
I asked her if the double opt in thing happened and she said not even a single. She called Vodacom and got the standard "not my problem" response. No one was willing to assist her.
She asked the agent about the double opt in that was supposed to protect her and agent had no clue about it.

Seems double opt in is only something mybb members know about.

So she is R600 down and not a chance of getting her money back.

So glad I ported.

 

[HideInLight]

Interesting read:
http://www.waspa.org.za/code/download/18530.pdf

The user was redirected to Vodacom Double Opt in confirmation page and clicked the call to action button.

Can someone please kindly post a link that has this confirmation page, apparently it doesn't matter if you enter a blank page, it can detect your IP and MSISDN, no need to enter it, heck a blank might register you anyways according to the document above.

Unfortunately the links I visited (if that's even my ISP) has been disabled for some odd reason so I can't examine them. Also if Vodacom runs that system, why isn't there a big fat authentic Vodacom endorsed banner on the site with it's own ToS and information on double OPT.

 

[HideInLight]

http://www.mobpartner.com/en/campaign/amateur_809

Conversion User Flow:

a) Carrier Traffic (single opt-in):
1. User arrives on the landing page and clicks on the confirmation button

b) Wifi/Opera Mini Traffic (double opt-in):
1. User arrives on the landing page, enters mobile number and clicks on the action button
2. User receives an SMS and clicks on the link
3. User arrives to the confirmation page and clicks on the confirmation button

Single Opt-in...
Meh all this technicalities giving me a headache.

edit: Please note to take care of the links I post, I'm using them as reference.
http://odigger.com/affiliate-offer/za-wap-amateur-cellspice-2/

Affiliate Offer Description:


Hot mobile offer in ZA

User/Action-Flow

MSISDN FLOW
1. User arrives the landing page
2. Click on the action button.
3. Click on the confirmation button.

NO MSISDN FLOW
1. User arrives the landing page and introduces the telephone number.
2. Click on the action button and receives an SMS with a link to click.
3. Click on the link and arrives to the confirm page.
4. Click on the confirmation button.

Targeting-restrictions

Country-targeting: South Africa

Operator-targeting: Vodacom, MTN, CellC only

Device-targeting: no restricitons

Traffic-targeting: Wifi traffic is not allowed Opera Mini traffic is not allowed

You must be a member of Adjoozey to promote this offer. Click Here to join their network.
- See more at: http://odigger.com/affiliate-offer/za-wap-amateur-cellspice-2/#sthash.cvitc1tb.dpuf

Ok so picture of the girl pops up which you have to confirm if your 18+
If you click that button, they already have your phone number and they can use it anyway they wish. (2. Click on the action button)

If accidentally click the confirm button, even if asks your phone number and it's blank or the wrong phone number, or a pure accidental click they start billing you.
(3. Click on the confirmation button)

That's what I assume, from the information I've gathered, the landing sites work differently apparently.
They also temporary it seems, and it's when they active that the most complaints kick in.

 

[marine1]

My wife is with Vodacom and she got klapped with a R600 bill last month for mira networks or something.
I asked her if the double opt in thing happened and she said not even a single. She called Vodacom and got the standard "not my problem" response. No one was willing to assist her.
She asked the agent about the double opt in that was supposed to protect her and agent had no clue about it.

Seems double opt in is only something mybb members know about.

So she is R600 down and not a chance of getting her money back.

So glad I ported.

Really? Send these ****ers a lawyers letter or open a case against Vodacom for fraud.

 

[ginggs]

@OP: You may want to read through the following threads:
http://mybroadband.co.za/vb/showthr...-indifferent-attitude-to-content-charge-fraud
http://mybroadband.co.za/vb/showthr...e-Guru-from-Tarragon-Tech-amp-Integrat-SOLVED
http://mybroadband.co.za/vb/showthr...ne-to-a-content-service-without-their-consent

 

[DominionZA]

Really? Send these ****ers a lawyers letter or open a case against Vodacom for fraud.

They are basically untouchable dude. Why they do nothing about this problem, rape us with charges and OOB shark etc.. Not going to pay an attorney and lose more cash. Rather just change provider.

I suppose someone has to take them on. Just won't be me.

 

[HideInLight]

Really? Send these ****ers a lawyers letter or open a case against Vodacom for fraud.

Vodacom's double OPT system actually makes it easier for them to register you with zero keyboard input. Which means one wrong accidental click and your screwed.

The last confirmation should take place on the Vodacom page itself, with a warning, and detailed description to what your signing up with without all the candy coating. Vodacom too, must send a message that you've been subsribed to the service along with the wasps message in order to differentiate it from spam. Day to Day subscriptions should send out a notifications weekly not monthly and include the amount you've been billed this far.

Landing pages should be banned, since it bypasses the more secure (actual keyboard input and verification via replying to an actual SMS).

 

[VodacomData]

Hi HideInLight

According to the WASP team:

This customer has already lodged an official complaint to WASPA. The matter is out of our hands. WASPA now intervenes and liaises with the WASP company on the customer’s behalf.

Regards
VodacomData

 

[R13...]

Hi HideInLight

According to the WASP team:

This customer has already lodged an official complaint to WASPA. The matter is out of our hands. WASPA now intervenes and liaises with the WASP company on the customer’s behalf.

Regards
VodacomData

That's because its the only way you get a refund. I had a wasp issue and vodacom only gave me a number to call and the number didn't get answered so I lodged a complaint with waspa and got refunded. Vodacom just said sorry not our problem.

 

[DominionZA]

That's because its the only way you get a refund. I had a wasp issue and vodacom only gave me a number to call and the number didn't get answered so I lodged a complaint with waspa and got refunded. Vodacom just said sorry not our problem.

What happened to my wife. Must tell her to lodge a complaint with WASPA.

 

[ginggs]

Hi HideInLight

According to the WASP team:

This customer has already lodged an official complaint to WASPA. The matter is out of our hands. WASPA now intervenes and liaises with the WASP company on the customer’s behalf.

Regards
VodacomData

What happened to the trace and the double-opt in?

Won't you PM all the details to VD, please? The double Opt-In should not have allowed this. Let's trace and see what happened.

 

[VodacomData]

What happened to the trace and the double-opt in?

info was sent to HideInLight and dbl-opt in still in place.

 

[ginggs]

info was sent to HideInLight and dbl-opt in still in place.

So HideInLight (or someone using his device) did double opt-in?

 

[VodacomData]

So HideInLight (or someone using his device) did double opt-in?

for dbl opt in if a request is sent to the wasp Vodacom basically intercepts SMS or internet pop-up
then sends you and sms to confirm and if you click yes/ok that`s how you are opted in.

 

[HideInLight]

for dbl opt in if a request is sent to the wasp Vodacom basically intercepts SMS or internet pop-up
then sends you and sms to confirm and if you click yes/ok that`s how you are opted in.

So Vodacom sends me a SMS to confirm, what SMS? How do I know this SMS is from Vodacom?
The only SMS I got in time frame was one that said Welcome (meaning I'm already officially opted in from reading the WASPA guidelines)

Anyways I found one of their hidden landing sites, anyone want to volunteer their number?
Don't worry Double Opt will protect you.

 

[HideInLight]

So Vodacom sends me a SMS to confirm, what SMS? How do I know this SMS is from Vodacom?
The only SMS I got in time frame was one that said Welcome (meaning I'm already officially opted in from reading the WASPA guidelines)

Anyways I found one of their hidden landing sites, anyone want to volunteer their number?
Don't worry Double Opt will protect you.

If someone receives their message and click it, not taking any other action then closing the webpage, should they be registered or not?