Trendyol aur Hepsiburada Phishing: Turkey mein nakli shopping scam kaise pehchanein

Turkey ka e-commerce bazaar haaliyon mein teji se badha hai, Trendyol aur Hepsiburada rozana lakho orders process karte hain. Is bade transaction volume ne phishing dhokhebazon ke liye ek upjau shikar ka maidan bana diya hai jo in platforms ki nakal karke payment information, credentials aur personal data churate hain.

Agar aap Turkey mein online shopping karte hain, to aap ek target hain. Yahan bataya gaya hai ki ye scam kaise kaam karte hain aur apni suraksha kaise karein.

Sabse pramukh e-commerce phishing takneekein

1. Nakli delivery SMS (Sahte Kargo SMS)

Sabse aam attack vector. Aapko ek SMS milta hai jaise: "Trendyol siparisininiz kargoya verildi. Takip icin tiklayin: [khatarnak-link]." Link ek nakli tracking page par le jaata hai jo aapke credit card details "customs fee" ya "delivery surcharge" ke liye maangta hai.

Ye messages bade shopping events jaise 11.11 (Singles' Day), Black Friday aur Efsane Cuma promotions ke dauran badh jaate hain.

2. Jali checkout pages

Dhokhebaaz Trendyol aur Hepsiburada ke checkout pages ki bilkul sahi nakal banate hain. Victims in pages par pahunchte hain:

• Social media ads ke zariye jo "bahut achhe" deals dikhate hain
• Google Ads jo asli search results se upar dikhte hain
• "Order confirmation" links wale phishing emails

3. Nakli customer service accounts

Jab shoppers social media par shikayat karte hain, dhokhebaaz official support ki nakal karne wale accounts se jawab dete hain. Ve "samadhan" karne ki peshkash karte hain aur order numbers, personal details aur card information maangte hain.

4. Nakli seller storefronts

Marketplace platforms par, dhokhebaaz chori ki product images aur bahut kam prices ke saath stores banate hain. Aapke pay karne ke baad, "seller" gayab ho jaata hai. Kuch to valid tracking number generate karne ke liye khali boxes ya random items bhi bhejte hain.

Asli vs. nakli URLs kaise pehchanein

E-commerce phishing se bachne ke liye yeh sabse zaroori skill hai:

Jaanch	Asli	Sandehaspd
Domain	trendyol.com, hepsiburada.com	trendyol-siparis.com, hepsiburada-kargo.net
Protocol	Hamesha HTTPS	HTTPS na ho ya certificate warning ho
URL path	Saaf paths jaise /orders/detail	Random strings, zyada parameters
Redirects	Seedhi navigation	Landing se pehle kai redirects
Certificate	Valid, company ke naam par issued	Self-signed ya anjaan entity ko issued

Tez URL verification steps

1. SMS ya email mein links par click na karein. Seedhe Trendyol ya Hepsiburada app kholein.
2. Domain dhyan se check karein. Dhokhebaaz tricks istemal karte hain jaise trendyo1.com (akshar "l" ki jagah number "1") ya hepsiiburada.com (double "i").
3. Turkish characters dhundhein. Kuch nakli domains aise characters istemal karte hain jo browser bar mein asli domain jaisa dikhta hai.
4. Official app istemal karein. Agar aapko kisi order ke baare mein notification mile, to ise official app se verify karein, kisi link se nahi.

Phishing attack ki anatomy

Yahan ek typical Trendyol phishing attack ka step-by-step vivran hai:

1. Chaara: Victim ko "failed delivery" ka SMS milta hai aise samay jab unke paas sachmuch pending orders hain
2. Click: Link ek vishwasniya Trendyol-branded page kholta hai
3. Capture: Page "order status check" karne ke liye login credentials maangta hai
4. Escalation: Login ke baad, 9.99 TL ki "redelivery fee" ke liye credit card details maangta hai
5. Loot: Dhokhebaaz churai hui credentials aur card info ka istemal purchases karne ya data bechne mein karte hain

Mausami scam calendar

Phishing ke prayaas Turkey ke shopping calendar ke anusaar hote hain:

Avadhi	Event	Aam scam prakar
January	Winter sales (Kis Indirimleri)	Nakli discount links
March	Women's Day campaigns	Nakli gift card offers
June-July	Summer sale (Yaz Indirimleri)	Jali checkout pages
August	Back to school	Nakli delivery notifications
November	Black Friday / Efsane Cuma	Sabhi prakar 3-5x badh jaate hain
December	New Year shopping	Nakli order confirmations

Account aur payment info ki suraksha

Sabhi security features enable karein

• Trendyol: Two-factor authentication enable karein, login alerts set karein, payments ke liye in-app wallet istemal karein
• Hepsiburada: Premium security features activate karein, Hepsiburada ka apna payment system (HepsiPay) istemal karein, notification preferences enable karein

Virtual credit cards istemal karein

Bahut se Turkish banks (Garanti BBVA, Isbank, Yapi Kredi) virtual credit card services dete hain. Online purchases ke liye spending limit ke saath temporary card number generate karein. Agar number chori bhi ho jaye, nuksan seema mein rehta hai.

Saved payment methods check karein

Samay samay par apne e-commerce accounts se unused payment methods check karein aur hatayein. Jitni kam cards stored hongi, utni chhoti attack surface hogi.

Agar aapne phishing link par click kar diya to kya karein

Agar aapko lagta hai ki aapne nakli site par apne credentials daal diye hain:

1. Turant apna password badlein asli Trendyol/Hepsiburada site par
2. Apne bank se sampark karein agar aapne payment details daale hain to credit card block karwayein
3. 2FA enable karein agar abhi tak nahi kiya hai
4. Apna order history check karein unauthorized purchases ke liye
5. Phishing URL ki report karein Trendyol/Hepsiburada support aur USOM (National Cyber Incident Response Center) ko
6. Police report darj karein (e-Devlet ya local police station)

Order aur payment information safely share karein

Bahut se Turkish users dost ya parivaar ke liye purchases coordinate karte samay WhatsApp ya SMS ke zariye order details, tracking numbers aur payment confirmations share karte hain. Isse sensitive information ka trail ban jaata hai jiska galat istemal ho sakta hai.

Jab aapko order credentials, tracking details ya payment confirmations share karni hon, LOCK.PUB ka istemal karke password-protected memo banayein. Recipient information dekhne ke liye password enter karta hai, aur aap ise dekhne ke baad automatically expire hone ke liye set kar sakte hain. Koi bhi sensitive data chat histories mein nahi rehta.

Scam-resistant shopping habits banayein

Sabse achhi suraksha ek consistent routine hai:

• Trendyol aur Hepsiburada ki asli URLs bookmark karein aur hamesha bookmarks se navigate karein
• Official apps sirf Google Play Store ya Apple App Store se install karein
• SMS ya email mein link se pahunchi page par kabhi bhi payment information na dalein
• Kisi bhi promotional message par action lene se pehle official app se sabhi deals verify karein
• Dusron ko sensitive information bhejte samay plain text ki jagah LOCK.PUB jaise password-protected sharing tools ka istemal karein

Phishing dhokhebaaz is par bharosa karte hain ki aap jaldi mein hain. Dhire chalein, verify karein aur apni digital shopping life ki suraksha karein.

---

Smart khareedari karein, surakshit rahein. Jab kisi link par sandeh ho, click na karein — seedhe app par jayein.