Purchasing as a "guest" is a convenient way to checkout without registering for an account or logging in. Unfortunately, bots can also abuse it to create fraudulent orders en masse.
We experienced such an event for the first time in our store's history, with thousands of incomplete orders along with dozens of completed orders for a single small item. All of these were from guest accounts with a VPN proxy. It appears that a bot attack was carried out, possibly hitting other online retailers as well.
To address this, we are turning off "Guest" accounts. This means to make a purchase, you must create a free store account with us. Registering also provides the benefit of joining our FA Rewards program.
If you already have an account, simply login at checkout or use the convenient login with email link feature.
Due to the extensive trouble caused by this attack, and the potential for more, we may have to disable guest accounts permanently. We are currently monitoring the situation.
I've never visited your store before but got a "complete your purchase" email. Why?
If you received this message, you are potentially a victim of ID theft. Bot attacks can use thousands of real names and email accounts to make purchases with stolen credit card information. Those names and emails were randomized, meaning that many email messages have the wrong first and last name attached to them. We advise you to do the following:
- First, you will want to check with your bank or credit card service as your credit card details may have been compromised through a dark web leak.
- To stop receiving those emails, please click the "unsubscribe" link, located near the bottom of the email message.
Does FA Store Credit Cards?
FA is part of the BigCommerce network. BigCommerce never stores credit card data. You must enter it at checkout each time you wish to make a purchase using a credit-card. Alternatively you can use Paypal.
I placed an order. How do I delete my account?
If you no longer wish to place future orders with us, or wish to reduce your online footprint, please send a message to orders@focusattack.com requesting to remove your account. Please note that upon removing your account, you can no longer access your order history. It is recommended that you at least wait until your order arrives and you have your products installed and working before requesting to remove your account.
Comments