Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: SMS Donations Advertised via Twitter - Internet Security | DShield SANS ISC InfoSec Forums


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
SMS Donations Advertised via Twitter

We all like the convenience and speed of SMS messaging. As a result, a number of companies set up services to allow donations to be send via SMS message. The approach is pretty simple. You text a message identifying your cause (e.g. "HAITI") to a special short code configured by the recipient. A "short code" is a 5 or 6 digit number configured to receive your message pretty much like a regular phone number.

These short codes are frequently advertised via twitter in messages like "SMS x to yyyyyy to donate to cause z". One thing that doesn't fit into the twitter message is that the cost of the donation will be billed to your phone bill. Typically $5 or $10. Legitimate providers of this service appear to limit you to one donation per day.

However, there is no easy way for you to identify who you send the money too. I would suggest to be very careful with this form of donation and only to use the number if you receive it from the organization directly. Please avoid sending money "blindly" just because a friend "RT" it.

Two legitimate operators of this service appear to be:

http://www.mgive.com
http://mobilegivinginsider.com

Here are some of the messages we saw on twitter in connection with the Haiti earthquake:

Text "Yele" to ***** to donate $5 4 HAITI
Text "HAITI" to "*****" & ur donation of $10 will go 2 the Red Cross 2 help w/relief efforts in #Haiti

 (I replaced the SMS number with stars)

 

 

------
Johannes B. Ullrich, Ph.D.
SANS Technology Institute
Twitter

I will be teaching next: Defending Web Applications Security Essentials - SANS Munich July 2019

Johannes

3551 Posts
ISC Handler
One thing of note about 501501 is that it is a pay service. I believe that a portion of that money goes to the company that runs 501501.com. If you look at @wyclef's page, you can donated directly to the fund via yele.org and (it claims) 100% of your funds go directly to Haitian relief.
Keith

7 Posts
The RedCross is actively soliciting donations via SMS text messages.

http://newsroom.redcross.org/2010/01/13/earthquake-in-haiti-situational-update-7/

"The Red Cross is also receiving money through a third party mobile fundraising effort sponsored by Mobile Accord. Mobile donors can text “Haiti” to 90999 to send a ten dollar donation to the Red Cross. The funds will go to support the Red Cross relief efforts in Haiti."
Anonymous
Very disappointing, but apparently Wycleff Jean's yele.org paid 130k for performing for his own benefit show. Smoking gun has more, very depressing stuff.

http://www.thesmokinggun.com/archive/years/2010/0114102wyclef1.html
peter

17 Posts

Sign Up for Free or Log In to start participating in the conversation!