Skip to content
0:00 / 0:00

#defcon#ninakollars#triangulationfraud

Nina Kollars - Confessions of an Nespresso Money Mule - DEF CON 27 Conference

DEFCONConference

419K subscribers • 61 videos on Hallway • Conference channel

YouTube
  • Recommended by 4 people: 4 on Hacker News.
  • A classic. People kept recommending it from 2020 to 2025.
  • Presented by Nina Kollars, cybersecurity researcher

Beginner. No background in the topic needed.

596K views6 years ago4 recommendations

SecurityPrivacy and surveillanceExploits and vulnerabilities

Nina Kollars shares her investigation into an eBay Nespresso pod scam, detailing how triangulation fraud and reshipping networks operate.

In 2018 I somewhat innocently bought very expensive coffee (Nespresso capsules) online from Ebay. What followed was a series of unexpected additional packages from the manufacturer Nespresso and a lurking suspicion that something had gone terribly--if not criminally--wrong as a result of my purchase. This talk chronicles the obnoxious amounts of obsessive research and tracking that became my new hobby--stalking Nespresso fraudsters and my decidedly non-technical attempts at developing a generic search profile and reporting the fraudsters to anyone who would listen, to include : the persons whose identities had been stolen, Nespresso, Ebay, and the FBI. Ultimately I just ended up with a LOT of coffee; a lingering sense that I had committed several crimes; and no faith left in humanity. Nina Kollars Nina Kollars is writing a book about the ways in which hackers contribute to national security. She is a political scientist whose main research is in technological adaptation by users. Kollars is Associate Professor for the Naval War College in the Strategic and Operational Research Department. She conducts research on military weapons and the humans who use them. Largely unsatisfied with sitting still, Kollars has also worked for the Library of Congress' Federal Research Division, the Department of Afro-American Studies at Harvard University, the World Bank, an anti-glare coating factory on the third shift, and volunteers for BSides. She is the former viceroy of the DC strategy group Cigars, Scotch, and Strategy. She is also a certified bourbon steward. Twitter: @nianasavage

Why it's here

4 people recommend this

What people say. Recommended as an entertaining and clear explanation of triangulation fraud and online reshipping scams.

rozabon Hacker News • Recommends

On “G2A pays Factorio developer $40k over illegally obtained game keys”

Here's a tangentially related def con about the strange economics of that whole scam. Basically, everyone in the chain apart from the cardholder benefits. link to this video

Mountain_Skieson Hacker News • Recommends

On “The 'brushing' scam that's behind mystery parcels”

Nina Kollars had a nice related talk during Defcon on a similar scam buying what she thought was gray market Nespresso pods whose "seller" bought for her using a stolen credit card. They also gave her a free Nespresso machine, presumably to give her motive to keep quiet. link to this video

clutchdudeon Hacker News • Recommends

On “Who's Behind the Swat USA Reshipping Service?”

In addition to the other commenters, here's an excellent defcon talk on what these some groups do: Nina Kollars - Confessions of an Nespresso Money Mule - DEF CON 27 Conference link to this video Essentially, they wait for a buyer of a product to come along to a listing and order it - they'll then buy it using stolen credentials, have it drop-shipped or reshipped to the end user. Everyone but the person with the original card comes out ahead, which is then pushed to all of us via higher fees if they notice and report the fraud.

h3xadecima1on Hacker News • Recommends

On “I made $100K from a dick joke”

Nina Kollars gave an interesting talk on scammers selling coffee through eBay using stolen credit cards. Signature way of knowing is they're shipped direct from nespresso and the purchase price is 40-50% cheaper than retail. I ordered some keurig pods and experienced the same direct shipping and cheap prices. link to this video

sgillenon Hacker News • Mentions

On “Jeff Bezos has returned to day-to-day management of Amazon”

You may be a money mule! And you may want to report this, someone vulnerable could be racking up massive debt paying for free stuff. see : link to this video

numpad0on Hacker News • Mentions

On “Tell HN: I was permanently banned from eBay in one hour”

ID could be faked or stolen credit cards can be used. In fact, dropshipping(ordering items on the fly, automatically, from a backend webstore - e.g. Amazon, Aliexpress, taobao) on stolen credit cards, or even pretending to do that without shipping part, is so prevalent there's a DEF CON talk1 on that topic. 1: link to this video

ValueAddedRSon Hacker News • Mentions

On “eBay, Etsy and Other Markets Now Have to Disclose Seller Details with Inform Act”

3P mule accounts have been a thing on eBay for years and eBay has been very much aware of it since at least 2015 when Brian Krebs wrote about it. link See also Confessions of a Nespresso Money Mule by Nina Kollars. link to this video In 2020, I personally reported 150+ hijacked eBay accounts used to commit $160k+ in triangulation fraud against a company I worked for at the time - eBay did very little to help. In February 2022, I collected about 80 reports from people who received 1099-Ks from eBay even though they had never knowingly created an account on the site - their PII (names, addresses, and in some cases even correct SSNs) were used to create fraudulent accounts that sold tens of thousands of…