Has this happen to you?

My girlfriend was sorting through her inventory to remove the clutter and she came across an item she didn’t know where she got it from so she attached it to try it out. A yellow drop box came down saying “do you grant having your L’s paid to…etc, etc” and she couldn’t get rid of it. Then within seconds her lindens in her account where gone. She had over 5,600 in her account but was only left with 11 L’s after she re-logged. She created a ticket and sent it to Linden Labs but she wants to know if there is anything else she could do and I’ve never had this happen to me before so I’m not sure what I can tell her. Will she get refunded her L’s or is she screwed? Thanks in advance for anyone who can shed some light on this issue!

She did everything she can do, that I know of.

Word to the wise, unless you actively want something to take L$ (as in a game, a reseller vendor from a trusted source, etc), DO NOT CLICK YES.

Sad, but sometimes lessons are expensive. I wish her luck ... she can also find the object again in her inventory (if she hasn't trashed it) and put through an abuse report on the creator of the object (if she trashed it, it will be on her transactions list on the site).

Nope but now I know. That sounds a bit unusual. Sometimes we dont know where we get things that why its best to keep up with the inventory and see what you have and dont have. but yes clicking "yes" has it down points too. Maybe she can see where she had gotten this cause that does sound unusual.

The message box appeared and the only option to click was, "Yes".
I have been stuck in a teleporter with no logical way out. Could not teleport
or Stop All Animations.

Solution in both cases
1) Write down all information known at the time (including time
in top right corner of viewer):
a. object causing
problem - owner (in this case, unknown?), Name of object
(none of your business
b. Location of problem - The property or region you were in at the time
(located to left of time)
c. Any other information you can think of
2) Quit and log back on
3) Report it to Linden Support. Let them sort it out.

In the case of the Transporter it was probably a problem with the region
because i have since used the same transporter with no problems.

** In any case, especially when being griefed, always remember -- never forget --
you always have the option to quit. No one ever can force you to do anything
in SL you do not want to do

It has to do with packaging full perm[ission]s items in a public sandbox.
Just never do that. And if you do remember, you have been warned.

In any case, do not quit without gathering as much information as you can
about the incident so that you may report it to Support upon Logging back in.
Notlike that is going to happen tonight ;-/

Never play combat simulations if you do not want to be followed by eight year old kids.
And if you do - and even if you don't - but especially if you do - do not have sex anywhere
that is not identified as mature. I am not saying i did, but these kids are smart. they can follow you whether you give them permision or not. They can even make themselves
(invisible).

Just when you think you have seen it all, there is so much more. Do not even get me started on SL above 100 meters. it is another world up there

You friend was robbed.

The entire grant debit permissions system should be overhauled really.

It should require a "yes" and you should also have to have a toggle in your preferences checked allowing debits.

99%+ of people in SL do not need to allow debit permissions, why expose all of them to this potential scam to allow the <1% to easily give permission.

A toggle would work great for people who have vendors that make change, etc.



-----------------------------
Additionally you should be able to revoke debit permissions quickly if there is an issue. Basically every object you have given permissions to should be searchable and you should be able to revoke. You can revoke mod rights on objects from your friends, why is allowing things to take your money less functional?

The reason for quitting in a case like this is that will make the permissions request disappear without your having to click on it. When you log back on, it will be gone. Which is the reason to take copioous notes for your AR before you log off.

Slight correction... do NOT report the creator listed for the object. Scammers normally mod another creator's full-perm object to use it for this all too common scam, so the listed creator normally had nothing to do with it.

But you're right about checking the transactions history in the "My Account" section of the web site, as that will tell the victim what avatar the money was being sent to. Chances are it's a throw-away account, but LL may be able to trace where the money went to after that. I wouldn't count on getting the money back (in all the threads about this scam, I don't remember it ever happening), but hopefully it will help get the scammer banned.

I hope so because I'm the person Cleo is talking about. I didn't have a payment thing on my account so I couldn't get on the forums but I fixed it. I'm just really aggravated that this happens and was hoping I would be getting my L's back but I guess that won't be happening then. I guess it wouldn't be considered thief then since L's can be converted into real USA dollars? Wow, this really sucks, lol.

Oh yeah I also forgot to add that I looked up the person’s name on the object and couldn’t find an exacted match and also looked up the person’s name that the transactions went too and couldn’t find an exacted match for that either but yeah, I gave Linden Labs all the information and everything I was able to give them.

Have her check her transaction history to see who was paid the money in her account.

I did....

Because the one you had could be old, it's possible the person the script sends the money to has already been banned (banned or canceled accounts can still be seen in a variety of ways, but they won't show up in a direct people search). Unfortunately, that doesn't seem to prevent the object from taking your money and sending it to the account... it's just that they can't access it anymore. On the bright side, if LL sees that your money is being sent to a banned or cancelled account, they might be willing to restore it to you.

Just to make sure, you are dealing with this using the support system, right? Abuse reports have some value, but you generally won't get any response from them. If you want LL to work with you to solve a problem, you need to go through support (we can help with that if you're not familiar with it).

Good luck to you, I know this is a sucky thing to deal with. Oh, and do NOT rez the thing inworld again or attach it... now that it has your permission to take your money, it can keep doing it over and over as long as it's rezzed.

One last thing, for both Cleo and Peach... welcome to the forums!

Thanks for the advice I will remember that. I've gotten rid of the object so it won't be a problem (at least I hope it won't) and I now know what to look out for but thank you all is appericated for any advice given to me from everyone!

When checking out what unknown items in the inventory are, one should go to a place where scripting is disabled to do it, such as Sandbox Newcomb. Check for the no-script icon at the top of the screen.

I've resurrected an old feature suggestion I put on the old feature voting tool and placed it on the JIRA in response to this:
http://jira.secondlife.com/browse/VWR-3387

Basically, it allows a user to grant debit permissions but the object can only give as much money as it has received, thus preventing the scam from having any effect.

The bigger issue though is that you can't simply ignore/dismiss or mute permissions dialogues, there are several JIRA issues for this, one of which has patches and has been marked fixed internally, but I don't see where it's been added.
Here is the (resolved) issue:
http://jira.secondlife.com/browse/VWR-2502