Tuesday 22 March 2016

McCheckup also known as "Support4sure", "United Works Media", "SecureProHelp.com"

Their incident numbers can also start with S4S, as well as MC.  S4S stands for Support4Sure.  The Support4Sure.com website is down but the whois info is pasted below.
Additionally, searching for the McCheckup phone numbers:
Turns up the following additional websites

United Works Media
DN51, MERLINE INFINITE, OFFICE No. 1001
SECTOR V,SALT LAKE , KOLKATA 700091
Toll Free : +1 - 888-993-3353
Phone : +91 - 8584898468

8512 167th Street, 2nd Fl, Jamaica, NY, 11432 USA 
"To be clear, Secureprohelp.com is just a means created by cyber crooks for the final purpose of collecting illegal money by scaring computer users with fake security alert to trick them into by calling the given number 1-800-776-712 or 0-800-410-1075 for immediate support."

Searching for the McCheckup contact info

Turns up a company registered at that address called "St Tech Security Inc."
Department of State (DOS) ID4776419
Current Entity NameST TECH SECURITY INC.
Entity TypeDOMESTIC BUSINESS CORPORATION
Initial DOS Filing Date06/17/2015
County IncorporatedQueens
Jurisdiction State or CountryNEW YORK
DOS Process AddressSHAH M RAHMAN
8512 167TH STREET 2ND FL
JAMAICA
NEW YORK 11432



Whois Server Version 2.0

Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.

Domain Name: SUPPORT4SURE.COM
Registrar: TUCOWS DOMAINS INC.
Sponsoring Registrar IANA ID: 69
Whois Server: whois.tucows.com
Referral URL: http://www.tucowsdomains.com
Name Server: NS1.HSPHEREPLUGINS.COM
Name Server: NS2.HSPHEREPLUGINS.COM
Status: clientDeleteProhibited https://www.icann.org/epp#clientDeleteProhibited
Updated Date: 08-aug-2015
Creation Date: 13-jul-2006
Expiration Date: 13-jul-2016

>>> Last update of whois database: Tue, 22 Mar 2016 09:04:27 GMT <<<

For more information on Whois status codes, please visit https://icann.org/epp

NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar. Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.

TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability. VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.

Domain Name: SUPPORT4SURE.COM
Registry Domain ID: 517119852_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.tucows.com
Registrar URL: http://tucowsdomains.com
Updated Date: 2015-06-14T04:10:28Z
Creation Date: 2006-07-13T03:50:38Z
Registrar Registration Expiration Date: 2016-07-13T03:50:38Z
Registrar: TUCOWS, INC.
Registrar IANA ID: 69
Registrar Abuse Contact Email: @tucows.com
Registrar Abuse Contact Phone: +1.4165350123
Reseller: HelpingHost.com
Domain Status: clientDeleteProhibited
Registry Registrant ID: 
Registrant Name: Contact Privacy Inc. Customer 0112836387
Registrant Organization: Contact Privacy Inc. Customer 0112836387
Registrant Street: 96 Mowat Ave
Registrant City: Toronto
Registrant State/Province: ON
Registrant Postal Code: M6K 3M1
Registrant Country: CA
Registrant Phone: +1.4165385457
Registrant Phone Ext: 
Registrant Fax: 
Registrant Fax Ext: 
Registrant Email: @contactprivacy.com
Registry Admin ID: 
Admin Name: Contact Privacy Inc. Customer 0112836387
Admin Organization: Contact Privacy Inc. Customer 0112836387
Admin Street: 96 Mowat Ave
Admin City: Toronto
Admin State/Province: ON
Admin Postal Code: M6K 3M1
Admin Country: CA
Admin Phone: +1.4165385457
Admin Phone Ext: 
Admin Fax: 
Admin Fax Ext: 
Admin Email: @contactprivacy.com
Registry Tech ID: 
Tech Name: Contact Privacy Inc. Customer 0112836387
Tech Organization: Contact Privacy Inc. Customer 0112836387
Tech Street: 96 Mowat Ave
Tech City: Toronto
Tech State/Province: ON
Tech Postal Code: M6K 3M1
Tech Country: CA
Tech Phone: +1.4165385457
Tech Phone Ext: 
Tech Fax: 
Tech Fax Ext: 
Tech Email: @contactprivacy.com
Name Server: NS1.HSPHEREPLUGINS.COM
Name Server: NS2.HSPHEREPLUGINS.COM
DNSSEC: unsigned
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/
>>> Last update of WHOIS database: 2015-06-14T04:10:28Z <<<

Registration Service Provider:
HelpingHost.com, @HelpingHost.com
310-691-5428
http://www.HelpingHost.com
HelpingHost.com needs to be contacted for domain login/passwords,
DNS/Nameserver changes, and general domain support questions.

This domain's privacy is protected by contactprivacy.com. To reach the domain contacts,
please go to http://www.contactprivacy.com and follow the instructions.

The Data in the Tucows Registrar WHOIS database is provided to you by Tucows
for information purposes only, and may be used to assist you in obtaining
information about or related to a domain name's registration record.

Tucows makes this information available "as is," and does not guarantee its
accuracy.

By submitting a WHOIS query, you agree that you will use this data only for
lawful purposes and that, under no circumstances will you use this data to:
a) allow, enable, or otherwise support the transmission by e-mail,
telephone, or facsimile of mass, unsolicited, commercial advertising or
solicitations to entities other than the data recipient's own existing
customers; or (b) enable high volume, automated, electronic processes that
send queries or data to the systems of any Registry Operator or
ICANN-Accredited registrar, except as reasonably necessary to register
domain names or modify existing registrations.

The compilation, repackaging, dissemination or other use of this Data is
expressly prohibited without the prior written consent of Tucows.

Tucows reserves the right to terminate your access to the Tucows WHOIS
database in its sole discretion, including without limitation, for excessive
querying of the WHOIS database or for failure to otherwise abide by this
policy.

Tucows reserves the right to modify these terms at any time.

By submitting this query, you agree to abide by these terms.

NOTE: THE WHOIS DATABASE IS A CONTACT DATABASE ONLY. LACK OF A DOMAIN
RECORD DOES NOT SIGNIFY DOMAIN AVAILABILITY.

Friday 12 February 2016

Is McCheckup a scam?

Background: My sweet, trusting, eldery mother was browsing the internet on Feb 11 2016 and a pop-up box appeared telling her she had a virus on her computer, and that she could get help by calling McCheckup on 1-800-776-712.

Mum, bless her, called the phone number.

She ended up spending three hours on the phone to technical support people at McCheckup (Roy, and others).  They guided her through the installation of TeamView software on her computer so that they could gain remote access to it, and they informed her that she needed AVG Internet Security.  They charged her USD$99 for "fixing the issue" and she paid USD$59 for the AVG software.

It's possible that AVG found "malicious cookies" or something when they ran the scan, sure.  Were they causing mum problems?  No.

Is this a scam?
It depends on your definition of scam.  [actually it was, see below] She had no virus on her computer, so the initial "problem" that they sought to "fix" was in fact a non-problem.  Yes they did install a legitimate piece of third party software (AVG Internet Security), but did she really need it?

If you want AntiVirus software, you can get AVG for free from here http://free.avg.com/

If you need help with your computer, try calling friends or family first.  If you would like to take it to a professional, try a local company and support your local businesses.  A quick search on google will find you plenty of local PC Fixit guys.  As your friends who they use.

If you have any problems with a local company then you can report them to your local enforcement agencies, the police, the fraud office etc.   McCheckup operate over the internet so your local enforcement agencies are unlikely to be able to do anything about them if they do operate fraudulently.

An analogy
Imagine your sweet elderly mother is sitting at home watching her favourite program on the TV, and then the doorbell rings.  There stands a man in overalls with a clipboard. His overalls and the van parked on the street have a big "McFumigate" logo on them.  The man tells your mother that he believes there are dustmites in her house.  "Really??" she says.  "Oh yes madam - they can cause allergies and even anaphylactic shock!".  "Oh no!"

The man convinces your mother to pay USD $99 to have the house fumigated, and USD $59 for a dehumidifier that will reduce the likelihood of dustmites "returning".

How would you feel about that?

What now?
I rang McCheckup on their UK number (0-800-920-2033) and after talking with Roy was put through to Ronnie in compliance/customer services.  I have politely requested a full refund because
1/ They invented the problem that they then claim to have fixed
2/ We do not need their services going forwards
3/ AVG offer a 30 day no-questions asked refund: https://support.avg.com/support_sales?l=en_US

They said that it will take them 24-48hours to come back to me.  Ronnie says that it's likely they will have to make a deduction.

Do you think that McFumigate should keep any of the $158, or should they give the $158 back to your mother and take the dehumidifier away?

Personally I hope they do the honourable thing and give a full refund.  I will keep you posted.

UPDATE (14 Feb):
Mum just told me that when she was on the phone to them she said she would just turn it off and call me.  They told her that she couldn't do that because the computer might never work again.  Manipulation & deception.

UPDATE 2 (16 Feb):
After being told on 13 Feb by Damien Hunter in "Compliance" at McCheckup that mum would be refunded the $99 service fee, no money has arrived nor any other communication.

Separately I have verified with AVG that the license key McCheckup "sold" to mum was in fact refunded on Feb 9.  (2 days before mum supposedly bought it).  This is a clear-cut case of fraud.  We have activated the fraud department at mum's bank.

FYI the fraudulently sold AVG key was registered to the email address purchasing@rainnetworks.com

UPDATE 3 (11 March)
Obviously no refund has arrived so I called again.

Teresa in billing says that Damien Hunter has left the company.

"Just give me a minute"

"It has been refunded and will take 10-11 days to arrive in your account"

I asked when the refund was initiated, after "checking some details" for a minute, she said "It was initiated however don't have the details and will ask the billing team.  "

Teresa is now no longer in the billing team it seems

I also explained that the AVG license was illegitimate and that they needed to refund that as well.   She said she needed to look into it and would contact me in a few hours.

UPDATE 4 (14 March)
They called both me and my mum to say that they needed additional details.  I just spent 10 minutes on the phone to them where they tried to tell me that they had accidentally sent the wrong license key and would like to send a new one.  Of course, no email from AVG arrived with any license details so this is just another ploy.  Selling someone a stolen car and then offering to replace it with a non-stolen one does not absolve the seller of all crimes.  I explained that a full refund was the only acceptable outcome.  They are going to call me back.

UPDATE 5 (22 March)
Just spoke to "Teresa" at 9:10am UK time, and she told me that the refund was initiated yesterday, for the full amount.  She indicated that it could take 10-15 business days to be processed.  I will check again in 3 weeks and if there has been no refund then I will hand it over to mum's bank to deal with.  Since they have said they would give a full refund, not giving it is 100% clear-cut fraud.

UPDATE 6 (28 March)
McCheckup have provided a full refund now.
I was quite persistent...