The scammer then sends the buyer an #URL to either a fake courier service or a scam website mimicking a classified or a marketplace with a payment form, which is a scam page. As a result, the fraudster obtains #payment data or withdraws money through a fake #merchant website.

— Group-IB Global (@GroupIB) January 14, 2021