Delivery Driver Scammed DoorDash Of More Than $2.5 Million (www.justice.gov)
from Pro@programming.dev to technology@lemmy.world on 17 May 2025 20:52
https://programming.dev/post/30524024

Devagiri admitted to working with others in 2020 and 2021 to cause DoorDash to pay for deliveries that never occurred. At the time, Devagiri was a delivery driver for DoorDash orders. Under the scheme, Devagiri used customer accounts to place high value orders and then, using an employee’s credentials to gain access to DoorDash software, manually reassigned DoorDash orders to driver accounts that he and others controlled. Devagiri then caused the fraudulent driver accounts to report that the orders had been delivered, when they had not, and manipulated DoorDash’s computer systems to prompt DoorDash to pay the fraudulent driver accounts for the non-existent deliveries. Devagiri would then use DoorDash software to change the orders from “delivered” status to “in process” status and manually reassign the orders to driver accounts he and others controlled, beginning the process again. This procedure usually took less than five minutes, and was repeated hundreds of times for many of the orders.

The scheme resulted in fraudulent payments exceeding $2.5 million.

#technology

threaded - newest

moodymellodrone@sopuli.xyz on 17 May 2025 21:02 next collapse

Wow. Wonder how they got caught. Or maybe likely the Feds don’t want people to know

throwawayacc0430@sh.itjust.works on 17 May 2025 22:57 collapse

Simple. Manual reassigns are very unusual and that all being done by one employee (like an actual employee of Doordash that works on the digital platforn, not a driver), and they all are assigned to a small group of drivers. That would look very obvious if someone looked at the logs.

All they need is one confession from any of the driver, or the employee involved in this scheme, then the whole thing unravels.

Also, I’m under the impression that they stole customer accounts to make those orders. Customers would’ve reported that fraudulent purchases were made.

rc__buggy@sh.itjust.works on 17 May 2025 21:10 next collapse

So many technically smart criminals being busted by just not having OPSEC. Dude did the technical theft and left his IP wide open. Get behind seven proxies.

What a fucking moron. Like DoorDash isn’t going to notice this shit?

edit: so it’s been pointed out that you must have a legit ID to sign up for DoorDash and they probably didn’t track him down on the internut. I guess I have to assume that a smart guy that had a DD account found this hole and exploited it with his own DD account. his. own. DD. account. That’s super dumb, even dumber than I thought at first. Why wouldn’t he use my DD account? Why wouldn’t he use yours? (I don’t have a DD account)

edit again: why do so many people want to downvote in this thread and not tell me why this motherfucker is one of the dumbest criminals ever? There’s been a few that want to argue but no one can tell me why he’s not a complete idiot.

Rivalarrival@lemmy.today on 17 May 2025 21:25 next collapse

Did he really just leave his IP wide open? Or did they somehow manage to get through his seven proxies to find him?

I know I’m being paranoid. What I don’t know is if I’m being paranoid enough.

flandish@lemmy.world on 17 May 2025 21:34 next collapse

i’d go with 8 proxies and a dial up modem on one end just to be safe.

Forester@pawb.social on 17 May 2025 21:36 next collapse

Pro tip if you’re going to rob a bank don’t use your car as the getaway car. Vinyl wrapping your car doesn’t change the fact that it’s your car.

console@lemmy.world on 17 May 2025 21:39 next collapse

do you have any more bank robbing tips, asking for a friend

Death_Equity@lemmy.world on 17 May 2025 21:40 next collapse

It is generally advisable to not get caught.

Forester@pawb.social on 17 May 2025 21:58 collapse

Leave the singing to Sinatra

Forester@pawb.social on 17 May 2025 21:54 next collapse
EightBitBlood@lemmy.world on 17 May 2025 22:21 next collapse

Reddit had an AMA with a Bank Robber ten years ago that they’ve since deleted for corpo purity reasons 😂

Here’s the big points from it:

  • Banks don’t care about losing amounts under 5k.
  • Security won’t stop you if you don’t have a visible weapon.
  • Worst they do is lock the door, so bring a hammer.
  • the goal is to get in, and get the teller to give you a couple grand asap, then leave under 10 minutes.
  • Guy did this to at least 5 different banks (all different companies) in one day, once a month, for several months.

He eventually got caught because of the money he had, not because his face was on every security camera.

He recommends not doing this, as do I, as it’s just not worth it.

But just in case you wanted to know how it was done a decade ago, fuck Reddit, here’s the details they recently deleted.

LustyArgonianMana@lemmy.world on 17 May 2025 23:39 collapse

Reddit used to have an entire shoplifting subreddit (r/shoplifting for the wayback) that regularly made fun of the loss prevention subreddit and the two subs often stole ideas from each other and would taunt each other. There was obvious sexual tension between them

Ofc it got banned even though it was technically a “roleplay” sub

forwhomthecattolls@sh.itjust.works on 18 May 2025 21:10 collapse

see, some days I’m happy that I didn’t grow up on the Internet and on IRC, and some days (today) I’m sad that I missed these bits of internet history. God I love this so much

Almacca@aussie.zone on 20 May 2025 09:40 collapse

I still miss usenet.

forwhomthecattolls@sh.itjust.works on 20 May 2025 15:08 collapse

Usenet and IRC are fucking awesome. I wish we could have kept them around - with some added TLS sure but the experience on modern machines is incredible and it sucks that it’s not still mainstream.

throwawayacc0430@sh.itjust.works on 17 May 2025 23:01 collapse

Bicycles don’t have license plates 😉

skulblaka@sh.itjust.works on 17 May 2025 23:24 collapse

Ok but what if I take it through the Pay-N-Spray after

Forester@pawb.social on 17 May 2025 23:27 collapse

Why would you pay for paint when GTA is free?

rc__buggy@sh.itjust.works on 17 May 2025 22:09 collapse

Or you could just not rip off DoorDash for 2.5mil

I’m not here to help you commit fraud.

Rivalarrival@lemmy.today on 17 May 2025 22:19 next collapse

Not sure you can defraud a criminal organization.

rc__buggy@sh.itjust.works on 17 May 2025 22:27 next collapse

Of course you can.

edit: how do people not realize you can steal from criminals?

throwawayacc0430@sh.itjust.works on 17 May 2025 22:49 collapse

I mean, it is fraud, but I didn’t see nothin’ 😏

sunzu2@thebrainbin.org on 17 May 2025 23:48 collapse

Fraud is something that a prosecutor has to prove in the court of lawhat we got her eis some allegations made by a corpo parasite.

Looks like DoJ wasted taxpayer resources to make corporate feel better

sunzu2@thebrainbin.org on 17 May 2025 23:47 collapse

Bootlicker detected...

Albut hey at least somebody thought about the corpo🤡

rc__buggy@sh.itjust.works on 18 May 2025 01:48 collapse

I like people like you. You make me feel better about my intelligence.

Rivalarrival@lemmy.today on 18 May 2025 02:22 collapse

You remind me of that one kid in class who was intelligent enough to realize the teacher forgot to assign homework, but lacked the wisdom to shut the hell up and walk out the door.

rc__buggy@sh.itjust.works on 18 May 2025 02:25 collapse

You remind me of that one kid in class who never got a date.

(WTF? How can a joke reply generate this level of acrimony?)

Kbobabob@lemmy.world on 17 May 2025 21:35 next collapse

Where did you see that? I didn’t see anything in the article or in the linked indictment article.

rc__buggy@sh.itjust.works on 17 May 2025 22:08 collapse

It’s an assumption

throwawayacc0430@sh.itjust.works on 17 May 2025 23:03 next collapse

I don’t think doordash lets you use a VPN.

Many platforms that deal with finance would reject an order when they detect VPNs or Tor (since that’s what fraudsters and scammers use), or they ask for additional verification (like SMS) to verify you are in fact the account holder. So they probably were just using their real IP address.

rc__buggy@sh.itjust.works on 17 May 2025 23:14 collapse

Well in this case a proxy isn’t a VPN, but an intermediate the criminal has taken control of. A proxy does not have to be legitimate.

AmbiguousProps@lemmy.today on 17 May 2025 23:26 collapse

True, but again, you’re making a lot of assumptions here. I don’t see anything about proxies anywhere.

He probably got caught because of an internal audit, that’s the assumption I would make.

Filetternavn@lemmy.blahaj.zone on 17 May 2025 23:33 collapse

Moot point, as DoorDash driver accounts require a verified driver’s license, comprehensive background check, and a valid bank account set up to deposit payment (though after setting up a direct deposit bank account, you can add alternative cash out options). Haven’t used DoorDash in a while, but UberEats started requiring facial recognition on top of all that, so I wouldn’t be surprised if that were in the DoorDash driver app, too. Hiding IP would do quite literally nothing in this scenario, as you can’t create an account anonymously. Counterfeit IDs would not work as they are verified against state records. Oh, and yet another step, you have to provide proof of auto insurance, which is yet another connection to your identity.

sunzu2@thebrainbin.org on 17 May 2025 23:49 next collapse

People still don't understand what KYC'd service and keep giving out their data to these parasitea... Jfc

rc__buggy@sh.itjust.works on 18 May 2025 01:49 collapse

Hah, yeah what a dumbass

sunzu2@thebrainbin.org on 17 May 2025 21:28 next collapse

DoJ won't prosecute doordash for misclassifying the delivery drivers as ICC and many other instance of wage theft but they got all the reosurces in the world to waste over 2.5 million dollars which is a rounding error for any corpo lol

Tell you you all you need to know about American "justice" system

fucking clowns

LustyArgonianMana@lemmy.world on 17 May 2025 23:36 next collapse

Exactly this. <img alt="" src="https://lemmy.world/pictrs/image/61ca160b-96a8-4f63-a6e4-f37a71a3117d.jpeg">

Whats_a_lemmy@ponder.cat on 17 May 2025 23:52 collapse

Got a source for this? I’d like to show it to others

Mac@mander.xyz on 18 May 2025 20:59 next collapse

I’ve seen this credited to the Economic Policy Institute but i can’t verify. It’s been around so much that i can’t find anything.

I found an article that pointed here (EPI) for a source but 🤷‍♂️

Lemminary@lemmy.world on 18 May 2025 00:58 collapse

Tell you you all you need to know about American “justice” system

Don’t know if you know, but we’re going with “legal system” now to reflect the reality.

sunzu2@thebrainbin.org on 18 May 2025 01:13 next collapse

The law is whatever daddy says it is thats the legal system fot sure. But these are criminal charges though and the victims will get sent federal gulag for their brave assault on corpo's bank account. Martyrs!

Almacca@aussie.zone on 20 May 2025 09:34 collapse

It’s a fucking free-for-all now, isn’t it?

frustrated_phagocytosis@fedia.io on 17 May 2025 22:10 next collapse

I thought financial cheats were totally cool now and you'd be stupid NOT to take advantage of loopholes. Unless...

spankmonkey@lemmy.world on 17 May 2025 22:39 collapse

You have to use a corporation to steal money and not face punishment if caught.

sunzu2@thebrainbin.org on 17 May 2025 23:44 collapse

And yet people think love to pretend as if corporate is not the enemy of organic "entities"

CobraChicken3000@lemmy.ca on 18 May 2025 00:00 next collapse

Cool crime

ViperActual@sh.itjust.works on 18 May 2025 01:04 collapse

Love your username 🐍🐓🪿😂

kevincox@lemmy.ml on 18 May 2025 00:43 next collapse

I’m struggling to see how this actually made money. Because presumably the customer is paying for the delivery (as well as the food that was never ordered). So the fraudsters would just be paying themselves in a complicated way. My best guess is one of the following:

  1. DoorDash is subsidizing orders so much that this is profitable overall (the amount they pay the driver is more than the customer pays) seems unlikely.
  2. DoorDash is paying the driver multiple times but only charging the customer once. But if this was the case how was this obvious accounting issue never noticed? Shouldn’t the books come out even in the end?
Phen@lemmy.eco.br on 18 May 2025 01:31 collapse

There is no customer involved.

  1. They place an order and pay for it
  2. They force the order to be assigned to one of the drivers
  3. Driver claims the order is delivered
  4. Doordash pays the driver
  5. They overwrite the data so that it goes back to step by 2.
  6. They “deliver” and get paid for the same order hundreds of times.

Books were probably red, but it takes a while to identify something like this.

J52@lemmy.nz on 18 May 2025 01:28 next collapse

Woah, 20yrs max…, it seems to only pay when you steal from the poor and have train loads of lawyers at hand.

PbNews@lemmy.world on 18 May 2025 02:23 collapse

People being creative in the wrongest of ways