Your Digital Media Has Never Looked So Good

 
rodbailey
Topic Author
Posts: 1
Joined: Sun May 12, 2019 6:02 pm

Activation scam

Sun May 12, 2019 6:21 pm

I recently tried to activate a new ROKU Express unit.  When the 4 letter code didn't work, I got a note on my IPad (which I was using to try to activate the ROKU) from "roku.activates-online.com".  I didn't notice the following, also in the address line:  Not Secure.  Anyway, the note said Activation Failed and then listed a number of reasons why that might have happened.  And, it gave a phone number to "contact support team to fix this issue immediately."  (I won't put in the phone number because I don't want anyone else to get caught up in this - and I've sent a couple of emails to ROKU about this.)  Anyway, the foreign sounding person on the call asked me to get my computer (not my IPad) and he would help me out.  I was on the phone with him for probably at least 1/2 hour.  He ended up searching through my entire computer - I could see the lines of code streaming by as I was on the phone with him.  He finally informed my I had a Trojan in my computer and that was the issue.  He then said he could correct that for $500.  At that point I hung up.  I still have my fingers crossed that I don't have lots of malware in my computer (Norton scans say I'm clean).  But, for anyone trying to activate a new ROKU system...be aware of this scam.
 
User avatar
atc98092
Posts: 3799
Joined: Tue Dec 31, 2013 5:09 pm
Location: Auburn, WA

Re: Activation scam

Mon May 13, 2019 5:33 am

There are numerous scam sites on the Internet claiming to be Roku support. If it's a toll-free phone number, it's NOT Roku. If they ask for any money, it's NOT Roku. If they want to connect remotely to your computer, it's NOT Roku. All of these sites are either trying to get you to pay something that Roku does not charge for, or they want to connect to your computer and install a virus/bug onto your system. Fingers crossed he didn't install something on your PC, but I would download Malwarebytes and run it on your computer. It can find far more than standard anti-virus. 
Dan
Nvidia Shield, Roku Stick (3600), Ultra (4640), Premiere (3920), Insignia 720p Roku TV, Sharp 4K Roku TV, Windows 10 Pro x64 running Serviio and Plex on a wired Gigabit network.
 
ghb51
Posts: 327
Joined: Thu Jul 14, 2016 9:07 am

Re: Activation scam

Mon May 13, 2019 12:47 pm

I doubt he bothered with a virus, if you allowed him remote access he most likely has all the personal info he needs, you should really change all your passwords and keep an eye on credit cards and bank statements.
 
mikebdoss
** Valued Community Member **
Posts: 4968
Joined: Mon Oct 25, 2010 12:52 am

Re: Activation scam

Mon May 13, 2019 1:57 pm

rodbailey wrote:
When the 4 letter code didn't work, I got a note on my IPad (which I was using to try to activate the ROKU) from "roku.activates-online.com".


I'm wondering how the popup appeared. It's not like a spam site would hijack your internet connection just in case they see that you're trying to activate a device - you had to seek them out. Did you do a web search for more info? Go to the wrong site to start with? 
 
ghb51
Posts: 327
Joined: Thu Jul 14, 2016 9:07 am

Re: Activation scam

Mon May 13, 2019 6:47 pm

mikebdoss wrote:
rodbailey wrote:
When the 4 letter code didn't work, I got a note on my IPad (which I was using to try to activate the ROKU) from "roku.activates-online.com".


I'm wondering how the popup appeared. It's not like a spam site would hijack your internet connection just in case they see that you're trying to activate a device - you had to seek them out. Did you do a web search for more info? Go to the wrong site to start with? 

I tried the site rodbailey mentions on my iPad and entered a random activation code and got the same 'note', it's not a pop-up, just a new page saying your activation didn't work, may be stolen and so on, typical scam stuff, pretty well done though with a very convincing Roku logo, so I'm assuming it was just the wrong site to begin with, might be good to know why rodbailey thought that was the correct site so others can be forewarned.
 
User avatar
speechles
Posts: 165
Joined: Thu Aug 06, 2015 11:15 pm

Re: Activation scam

Wed May 15, 2019 8:30 am

Domain Name: ACTIVATES-ONLINE.COM
Registry Domain ID: 2294337331_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.domainshype.com
Registrar URL: http://www.domainshype.com
Updated Date: 2018-08-06T14:36:15Z
Creation Date: 2018-08-06T14:34:52Z
Registry Expiry Date: 2019-08-06T14:34:52Z
Registrar: Domainshype.com, LLC
Registrar IANA ID: 1660
Registrar Abuse Contact Email: abuse-contact@publicdomainregistry.com
Registrar Abuse Contact Phone: 1.2013775952
Domain Status: clientTransferProhibited https://icann.org/eppclientTransferProhibited
Name Server: NS1.BLUEHOST.COM
Name Server: NS2.BLUEHOST.COM
DNSSEC: unsigned
URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
Last update of whois database: 2019-05-15T15:28:49Z 

For more information on Whois status codes, please visit https://icann.org/epp

NOTICE: The expiration date displayed in this record is the date the
registrars sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrants agreement with the sponsoring
registrar. Users may consult the sponsoring registrars Whois database to
view the registrars reported date of expiration for this registration.
 
mikebdoss
** Valued Community Member **
Posts: 4968
Joined: Mon Oct 25, 2010 12:52 am

Re: Activation scam

Fri May 17, 2019 10:58 am

But why did OP go to this site instead of Roku's own site?
 
trekkeriii
** Valued Community Member **
Posts: 2559
Joined: Wed Dec 12, 2012 4:10 am

Re: Activation scam

Sat Jun 01, 2019 9:27 am

Should contact Bluehost and the domain registrar

https://my.bluehost.com/hosting/help/117

I used them as my webhost once upon a time. I just emailed them about this and showed this post. Hopefully they will take action soon.

Update: Site is down, and the phone number is being bot called  :D
http://trekkeriii.com/Roku_PHP_list.php
Router - ASUS RT-AC68U
ISP - TWC - 50 Mbps/5 Mbps
Net+ Cert

Who is online

Users browsing this forum: No registered users and 2 guests