DEV Community

Ayoub Hammoudi
Ayoub Hammoudi

Posted on AI-assisted

"Mandatory user verification" on DEV is a scam. Here's how to spot it in 30 seconds.

Spot homoglyph attacks using simple profile checks

If you got tagged by "Support Bot" on DEV, don't click.

It took one look at the profile:

  • The name isn't "Support". It's Cyrillic letters dressed as Latin ones: "Suрроrt Воt".
  • The account was created on Nov 4: 0 posts, 41 comments when I looked.
  • It tags 10 people per comment, in alphabetical order, ten at a time. Nobody at DEV works through the alphabet by hand.
  • The username has already changed: my notification says salemsalem123, the profile now says supportbot123.

No real platform verifies you through a stranger's comment, and none needs your card for it.

Clicked but typed nothing? Close the tab, clear that site's data, check your downloads.

Authorized something or typed a password? Revoke the app and change the password now.

Entered your card? Call your bank.

Then flag the account: profile, then "Flag" or "Mark as Spam".

Check the profile before the link. It takes ten seconds, and it would have stopped this one cold.

Top comments (3)

Collapse
 
francistrdev profile image
FrancisTRᴅᴇᴠ •

Thanks for letting everyone know!

Collapse
 
ayoub_hammoudi profile image
Ayoub Hammoudi •

Anytime! If more of these pop up, hit Flag on the profile. Way more useful than clicking to see where it goes 😄

Collapse
 
fiwon123 profile image
Felipe Inoue • • Edited

yeah we need to share this post and report the scammer