John Lewis Supplier/Buyer Phishing Scam

Whilst catching up with emails one morning, I spotted what looked like an enquiry appearing in my inbox. I opened it, and straight away my alarm bells were ringing! It was a John Lewis Scam!

It was addressed to me (not personally, but in a generic fashion) and claimed to be from Gabriel Jude who worked in the purchasing department at John Lewis. It looked reasonably legit, the email wasnt some crazy @yahoo.co.in or anything like that, in fact they registered the domain;

www.JohnLewisStores.uk & he had [email protected]

Easy to trick someone not in the know, as a lot of internal/company emails dont use the domain the main corporate website is on.

Amazingly, I had another email almost identical to the first but from Robert Collins, also in the Purchasing Department in John Lewis (apparently) except this email was from [email protected].co.uk, not just .uk.

I guess it’s the same people but i must be on multiple lists? Either way ive replied, lets see if they get back to me 🙂

Email 1;

from: Gabriel Jude <[email protected]>
reply-to: Gabriel Jude <[email protected]>

Compliment of the Seasons.

John Lewis Plc is a UK Wholeseller and retailer shop. We are looking for new products to buy, create new partnership with companies dealing with different products.

Could you please send us your catalog through e-mail to learn more about your products and wholesale quote.
We hope to be able to order with you and start a long-term friendly and solid business partnership.Our Payment Terms is within 15 days as we operate with all our suppliers .

Waiting for your response.

Gabriel Jude.
Purchasing Department.

www.johnlewis.com

Email 2;

from: [email protected]
reply-to: [email protected]

Hi,

John Lewis Plc is a UK Wholeseller and retailer shop. We are looking for new products to buy, create new partnership with companies dealing with different products.

Could you please send us your catalog through e-mail to learn more about your products and wholesale quote.
We hope to be able to order with you and start a long-term friendly and solid business partnership.Our Payment Terms is within 15 days as we operate with all our suppliers .

Waiting for your response.

Robert Collins.
Purchasing Department.

www.johnlewis.com

As you can see, practically the same even with the same typos.

A quick google of some of the key info and it seems its been going on a while with varying domains and varying success;

  • Different domain, same issue: https://www.thebrokersite.com/news.php?a=584
  • Different domain(s) same issue: https://www.thebrokersite.com/news.php?a=635
  • Same scam, different email wording: https://lkml.org/lkml/2018/5/8/960
  • Times article about someone they scammed: https://www.thetimes.co.uk/article/crooks-posing-as-john-lewis-reps-steal-prams-worth-200-000-pwh00kdr5

Remember, if its too good to be true, its probably a scam.

Leave a Reply

Your email address will not be published. Required fields are marked *