Prevent Ticket Scams: Protect Your Online Tickets

Buying tickets online is supposed to be quick, easy, and secure—but for one Toronto Blue Jays fan, it turned into a digital nightmare. James Somersett had saved up to buy prime seats for his parents to enjoy the Blue Jays vs. Chicago White Sox game. Unfortunately, the tickets he purchased through StubHub were stolen right out of his account, leaving his parents without entry on game day. This incident serves as a cautionary tale and a reminder of the steps we can all take to prevent ticket scams from affecting our lives.

Lessons Learned from a Costly Ticket Scam

How the Scam Happened

James standing between his parents with his arms around them — *Image from CBC*

James Somersett purchased two valuable tickets for his parents via StubHub but encountered trouble just days before the game. On June 13, he began receiving password reset emails that he ignored. By June 19, the culprit had successfully reset his StubHub account password and transferred the tickets to an unknown email address. Consequently, Somersett was unaware of the theft until game day, forcing him to buy another set of tickets for $600 at the stadium gate.

Date of Ticket Theft: June 19
Method of Theft: Unauthorized password reset via compromised credentials
Result: Original tickets transferred fraudulently, replaced at full additional cost
Read full story on CBC News: https://www.cbc.ca/news/canada/toronto/blue-jays-fan-stubhub-tickets-1.7592146?cmp=rss

StubHub and the Blue Jays Respond

Toronto Blue Jays pitcher José Berríos waves to a crowd as he leaves the field — *Image from CBC*

Initially, StubHub dismissed Somersett’s complaint, claiming there was no evidence of unauthorized access. However, after CBC Toronto reached out for comment, StubHub reversed its position. As a result, they issued a full refund and a 25% coupon as compensation. Simultaneously, the Toronto Blue Jays stepped in with an offer of free tickets to a future game after identifying that their own support team could have noticed the missing tickets earlier in the process.

Cybersecurity Experts Weigh In

A man at an office in a blue shirt — *Image from CBC*

Experts believe that Somersett was the victim of a credential-stuffing attack, where hackers use leaked login data from other platforms to access accounts. Due to the absence of two-factor authentication on StubHub’s platform, his account was more easily hijacked. Therefore, specialists argue that ticket platforms must enhance their security measures to avoid being easy targets for fraudsters.

Most Likely Attack Vector: Credential stuffing using recycled passwords
Platform Weakness: No 2FA required for password changes

How to Prevent Ticket Scams Effectively

If you’re planning to buy tickets online, take these proactive steps to protect your investment and prevent ticket scams:

Change passwords regularly: Especially after major data breaches
Use multi-factor authentication: Prefer app-based 2FA over SMS
Avoid password reuse: Create unique credentials for each platform
Use virtual credit cards: Single-use cards can limit exposure
Confirm ticket ownership early: Get verification and transfer records in advance
Stick with mobile e-tickets: Use in-app delivery for added tracking and security
More safety tips from CBC: https://www.cbc.ca/news/business/login-credentials-leak-password-protection-1.7567621

Taking these precautions can save you time, money, and frustration. Furthermore, as platforms like StubHub evolve, pressure from users and public stories like Somersett’s help push for the improvements needed to safeguard future fans.

Remember, staying cyber-aware is your first line of defense against threats in today’s digital ticketing world. Above all, always stay vigilant and informed to help prevent ticket scams.

More…

How to Prevent Ticket Scams After a Blue Jays Fan’s Experience