Ok here it goes I have been reluctant to post this, but at this point there really isn?t anything else I can do. Someone has stolen my identity and is attempting to pass themselves off as me. Somehow they gained access to my user name and password I used for a lot of sponsors, FTP, email you name it. They went down a list of adult sponsors and whenever they found a combo that worked they change the payout information to their epass info. At first they stuck to sponsors that I had already preselected epass as a payment. There were 4-5 of them.
As the payments were small I didn?t notice the missing payments first. Later one of my sponsors told me their logs showed he would change the information right before the payout was due to his and then right after the payouts went out he would change it back to my info so if I looked I wouldn?t have noticed. To make it worse two of the epassporte accounts he is using are a slight variation of mine so if you don?t look closely you will miss it. I went through changed passwords on everything I had email, sponsor accounts and so forth. I also reinstalled the os on my computers to make sure nothing was on my end. I thought things would get better.
After he got shut out of my sponsor accounts two things happened 1. He tried to register new sponsor accounts directly with the sponsors with slight variations of my user ids. Then he jacked the links on my pages to the new accounts. 2. I found out someone made an exact copy of one my sites and registered the domain with an email account that was almost identical to one I use. I got the site pulled with a DMCA, but I don?t know if there are any more copies out there. Things had been quiet for a week or so then yesterday I noticed one my blogs wasn?t working and all evidence looks to me like it was hacked.
Today, I noticed an unusual sales volume and chargeback rate over the past two days with another sponsor that had always paid me by check. As I looked closer I noticed someone had changed the payout information on the account to epassporte and it was one of those epassporte addresses he had used before. Yes, he was sending fake joins to boost the epass payment before he received it.
I urge all sponsers, webhosts and so forth to check their accounts for these three epassporte names.
[email protected],
[email protected],
[email protected] the second and third ones are variations of my epass account that I have used for years.
I contacted epassporte right away (weeks ago) with the information on two of these accounts, but they said there was nothing they could do because the sponsor was the victim not me. Since one of my sponsor accounts was recently changed to one of these I suspect the accounts are still open. Anyway I don?t know what else I can do at this point so there you have it.
If anyone from a sponser/host wants me to contact them please provide their contact info in this thread and I will do so.