Where is the scam here then....?

[jonamv8]

Our company received this from an unknown gmail account:

---

Hello Sir,

Our company is working in IOS application development mainly. To successfully complete the application we MUST require good testing with more members.

We are having testing team in different zone that will help us a lot to manage the application trustful. For test purpose we require apple enterprise account, but

apple does not provide much account on base of one company name.

So, we require you to provide enterprise account base on your company name and don't worry regarding all registration fees, that will be manage from our side. We can

pay you 2500 USD(for 5 accounts) if you can manage enterprise account of your company. That will not effect to your regular apple account also, because both are different things.

Let us know if you have any other query , if you can provide the many accounts form your country it will be our long term relationship.

Regards
XXXX

---

What do we think the angle is here guys and girls?

It goes without saying that we will not be making our Apple developer accounts available to the sender of this email LOL

[rdjohn]

Could be the old - accidentally send you $25k and ask for refund of overpayment and they also withdraw original payment.

[Vaud]

"apple does not provide much account on base of one company name"

Well they do.. but only to larger (>100 fte) companies: "to enroll in the Apple Developer Enterprise Program, your organization must be a legal entity with 100 or more employees. We do not accept DBAs, fictitious businesses, trade names, or branches."

With the account they could provide certified apps (with certificates, etc) to the employees of that company creating a very powerful base for wider attacks across the company as it would look and act as a trusted app.

[jonamv8]

Vaud said:

"apple does not provide much account on base of one company name"

Well they do.. but only to larger (>100 fte) companies: "to enroll in the Apple Developer Enterprise Program, your organization must be a legal entity with 100 or more employees. We do not accept DBAs, fictitious businesses, trade names, or branches."

With the account they could provide certified apps (with certificates, etc) to the employees of that company creating a very powerful base for wider attacks across the company as it would look and act as a trusted app.

This makes sense! We only have a normal Apple Developers Account due to the size of our organisation so I hadn't come across these Enterprise accounts before.

Certainly a new approach for a scam that I haven't seen before.

Thanks for the info

[Vaud]

jonamv8 said:

This makes sense! We only have a normal Apple Developers Account due to the size of our organisation so I hadn't come across these Enterprise accounts before.

Certainly a new approach for a scam that I haven't seen before.

Thanks for the info

It makes no sense to attack a smaller company. I guess they are spamming hoping to pick up an entity of a big company and an employee wanting to make some cash.

[jonamv8]

Vaud said:

jonamv8 said:

This makes sense! We only have a normal Apple Developers Account due to the size of our organisation so I hadn't come across these Enterprise accounts before.

Certainly a new approach for a scam that I haven't seen before.

Thanks for the info

It makes no sense to attack a smaller company. I guess they are spamming hoping to pick up an entity of a big company and an employee wanting to make some cash.

Casting the net wide and seeing what comes back I assume

[Dick Dastardly]

My digital marketing agency gets very similar (almost identically worded) approaches all the time, from people in China asking us to set-up Google Ads and Facebook Ads accounts. They say that they will manage them and we just get a set-up payment and then an on-going fee for being a part of it. If it sounds too good to be true...

I ran it past our Google Account Manager and he said that these companies are selling counterfeit goods or ones in restricted categories and they just burn through account after account, showing ads for as long as possible before it gets shut down. Anyone silly enough to accept their offer might soon find themselves banned from these platforms.

[Whoozit]

From my banking days - ever wondered why the grammar in these scam emails never improves?

Answer is, it's deliberately written that way as an idiot filter. Which makes perverse business sense.