About the BOGO iPhone 8+

How I got conned into getting a second phone and why I don’t mind.

Back in September, when I was on vacation in Washington, DC, I upgraded my old iPhone 7 to an iPhone Xs. It was just under 2 years since my last upgrade, but the iPhone 7 had a tiny scratch on the camera lens. I was facing either $80 to repair a two-year-old phone or $1000+ to buy a new phone with a much better camera. I went with the upgrade.

While I was there at the Verizon store in Union Station, the salesperson excitedly told me that because I was 55 or older, I qualified for a buy one get one free offer on a second phone. “I don’t need a second phone,” I told her. “I’m one person.”

“But it’s free,” she said.

“What kind of phone?” I asked, figuring I could get it and sell it on Craig’s List. “An old flip phone?”

“Any phone we sell that lists for under $1,000,” was the surprising answer.

“And what about using it?” I asked. “Do I have to pay more every month to have it?”

“No, she told me. “Your monthly service cost will be the same. You just have to keep it for two years.”

Red iPhone 8+
It’s pretty and I am partial to red.

This sounded too good to be true, even though I couldn’t sell it right away. The way I saw it, it would be an insurance policy; if I broke my other phone, I could use this one. I was hooked. I picked out a red iPhone 8+, which is known for having a good camera. That’s the big screen iPhone. Too big for everyday use, in my opinion, but what the hell. It was free.

Except it wasn’t. I had to pay sales tax on it. That was nearly $80.

She activated my iPhone Xs and I tossed the boxes for both phones in a shopping bag. I finished my vacation 2 weeks later, packed them in my luggage, and brought them home. I put the boxes on a shelf in my office, never even bothering to take out the red phone.

Fast forward to the other day. After getting a phone call while I was recording a video, I decided it might be nice to use a different camera for all these YouTube videos I’ve been making. I thought immediately of the red phone still in its box. The big screen would make it easier for my 55+ eyes to see what I was shooting. I retrieved it, plugged it in to charge its dead battery, and called Verizon to make sure I could activate it and use it without paying additional fees.

I was on the phone for over an hour with the customer service person. Turns out that the Union Station salesperson wasn’t exactly truthful. Although my bill was about what I expected every month — higher than the old bill but just enough to cover the cost of the $1200 iPhone Xs I was paying off over 2 years — I was paying extra for that new phone. I didn’t know it because I never bothered looking at my bill. Service was $40 each per phone and I’d been paying $40/month since September for a phone in a box just draining its battery.

Imagine how pissed off I was. Maybe you can’t. I can get pretty pissed off. I could feel my blood pressure rise.

She did more research and we discovered that my old plan had been $85/month for my one phone. That included unlimited talk, text, and data. The new plan with the BOGO phone was $60/month for one phone or $40/month per phone for more than one phone. So, in reality, I was paying slightly less for my plan every month with two phones than I had been paying for one phone.

But I would be paying $20/month less if I had just one phone. Still, $20/month wasn’t going to break me. Hell, I hadn’t even noticed the difference.

I thought about the situation I’d found myself in. In my mind, I was basically getting two phones for the price of one. At the end of my two year period, I could sell both phones and come out fine. (I keep my phones in pristine condition with cases and screen covers.) In the meantime, I could use this new phone for video stuff; it had exactly the same plan as the one I was using every day.

To sweeten the deal, the Verizon customer service rep put a $100 credit on my account, basically covering 5 months of what I’d paid ($80/month paid – $60/month what I would have paid with one phone = $20/month).

Of course, I wound up keeping the phone. It was a hell of a lot easier than fighting with Verizon about taking it back. And I really do like the phone for the video work I’m doing. The big screen rocks and the camera quality is better than I need.

But I did learn a valuable lesson: The next time I upgrade my phone, I’m taking my bill along with me and will compare the current bill with the new bill. I’m not going to pay for equipment I’m not using again.

Bluehost Domain Deactivated Scam

Another day, another phishing attempt.

This morning, I got an email like this for three of the domains I host at Bluehost.

Bluehost Scam
I found one of these in my email inbox for three of my domain names this morning. I added the red underline; I explain why below.

Here’s the text, in case you can’t read it:

MARIA LANGER

Your web hosting account for flyingmair.com has been deactivated (reason: site causing performance problems).
Although your web site has been disabled, your data may still be available for
up to 15 days, after which it will be deleted.

If you feel this deactivation is in error, please contact customer support via:
http://my.bluehost.com.[redacted].piknini.org/account/8236/reactivation.html

Thank you,
BlueHost.Com Support
http://www.bluehost.com
For support go to http://helpdesk.bluehost.com/
Toll-Free: (888) 401-4678

I have to say that it looked very real. Simple, to the point. From “admin@bluehost.com”. All the links I pointed to actually went to where they said they were.

What really made me almost believe they were real was the fact that I’d made some changes to my domain setup a few weeks ago to lower my hosting costs with a slight hit to performance (which I hoped to be able to minimize with a new cache plugin). So the fact that performance might be causing issues just happened to make sense in my world.

Except, not for the domains it reported: flyingmair.com, flyingmproductions.com, and gilesrd.com. You see, none of those sites get any significant traffic. The only one of my sites that does get significant traffic is the one you’re reading this on right now, and I didn’t get an email message for it.

And then I took a closer look at the link I was supposed to click to resolve the issue. It started off fine: http://my.bluehost.com. But instead of a slash (/) after the domain, there was a dot and an alphanumeric string followed by the real domain I’d be going to if I clicked.

I switched to my browser and manually typed in www.flyingmair.com. The site came right up. It sure didn’t look deactivated to me.

I went up to my loft-based office where I could look at the email on a real computer (rather than an iOS device). I didn’t learn anything new, but by this time I was convinced it was another scam.

It bothered me that I’d almost been fooled. I called Bluehost and was told that they were already aware of the problem. Jeez. You think they’d send out an email warning us about it.

In any case, what I’ve always said about these things still applies: never click a link in an email message you were not expecting. If you think there’s any truth to a reported problem like this, manually type in the domain name of the site you can use to check — in this case, bluehost.com — and log in the usual way to follow up. Or just use the tech support number you should already have on hand to get more information.

Don’t get scammed.

And, for the record, I’d much rather blog about the things going on in my life that aren’t related to someone trying to rip me off than crap like this.

Apple ID Scam

Yet another scam for people dumb enough to click before they check.

Got this email today from “App Service”:

App Service Scam Email
Point to the link to see where it goes BEFORE you click it. In this case, the link does not go to Apple’s website or anything related to Apple.

Pointing to the link makes it pretty obvious that this is a scam. The bubble that pops up does not show a URL shown in the link, or to any other destination on Apple’s website. Clicking this link will likely install malware on your computer or direct you to a site that looks like Apple but is designed to gather your Apple login information, thus gaining access to your credit card, email, and other data you want to keep private.

Don’t click links in email messages unless you are expecting to receive a link.

Check out the text of the message when it’s copied and pasted! You can see a mix of alphanumeric codes and what looks like Chinese charaters embedded in the text.

Dear REDACTED@mac.com,

The following changes to your A96p17p23l98e11 28I98D86 were made on November 6, 2018

B40i40l55l54i52n87g56 Information

If you did not make these changes, or if you believe an unauthorized person has accessed your account, you should change your password as soon as possible from your Apple ID account page at manage.iforgot.service.com
Your Apple ID will be temporarely disabled until you verify your identitiy.
We will wait 24 hours for the verification, if we not receive any verification your Apple ID will be permanently disabled !
吃生薑
Sincerely,

Apple Support

What do you do if you think a message like this might be real? Close the message, go to your browser, and manually type in the URL to go to the site in question. Log in from that screen.