First screen, captured 7 days ago. Open the video.

Restaurant Delivery Payment-Skimming Campaign

What HN thinks

Hungry customers ordered a jummyjorsandvotch and got a side of credit card fraud, served by Google Ads.

Google Ads is the real culprit
Many blame Google for profiting from scam ads that outrank legitimate sites, and say platforms' abuse reporting is effectively a dead end. Some want platforms held liable or reported to the FTC and state attorneys general.
Detection and defenses are an arms race
Commenters explained the reverse-proxy mechanism and suggested log analysis, foreign-domain detection, or payment attestation like Apple Pay, while others noted cart abandonment and messy merchant names make detection hard.
Skip middlemen, call the restaurant
Some argue the old way of phoning restaurants directly avoided this, though even phone numbers get swapped by platforms like Yelp.

Consensus: Most agree ad platforms, especially Google, enable these scams and do little to stop them; technical countermeasures exist but are imperfect.

Recommended in the comments

Apple Pay (service): Suggested as a long-term defense where the customer verifies the merchant on a trusted device.

Summarised by Claude from the comment thread 6 days ago.

Points: 154
Comments: 81
Best rank: #7
Posted: 2026-11-06 by fiej
Category: Security

payment-skimming phishing typosquatting reverse-proxy restaurant-impersonation threat-research infohawk

All captures:

Full page

Captured 7 days ago. Click for the whole screenshot.

Looks similar

Screenshot of about.doordash.com: DoorDash and Waymo launch autonomous delivery service in Phoenix

DoorDash and Waymo launch autonomous delivery service in Phoenix (about.doordash.com)

291 points by ChrisArchitect 1 year ago | 650 comments

Screenshot of about.doordash.com: DoorDash is acquiring Instacart for $17B

DoorDash is acquiring Instacart for $17B (about.doordash.com)

98 points by DeepLogin 15 days ago | 71 comments

DoorDash press release announcing a definitive agreement to acquire Instacart for about $17 billion, at $65 per share, mostly in cash.

doordash instacart acquisitions grocery-delivery

Screenshot of about.doordash.com: DoorDash to acquire Instacart

DoorDash to acquire Instacart (about.doordash.com)

461 points by WalterSobchak 15 days ago | 628 comments

DoorDash investor relations press release announcing a definitive agreement to acquire Instacart for about $17 billion, or $65 per share, mostly in cash.

doordash instacart acquisitions grocery-delivery

Screenshot of abc.net.au: Take a closer look at Starbucks CEO's contract, which covers his commute by jet

Full page

Looks similar

DoorDash and Waymo launch autonomous delivery service in Phoenix (about.doordash.com)

DoorDash is acquiring Instacart for $17B (about.doordash.com)

DoorDash to acquire Instacart (about.doordash.com)

Take a closer look at Starbucks CEO's contract, which covers his commute by jet (abc.net.au)

Starbucks Claims $181M in Revenue from Unused Gift Cards (2022)(pymnts.com)

Lawsuit accuses DoorDash of charging iPhone users more than others (arstechnica.com)

Related stories

Bitwarden CLI compromised in ongoing Checkmarx supply chain campaign (socket.dev)

Chained PHP2Shell exploit roots 25 servers, including US Government servers (dreamgroup.com)

I never authorized an integration that scans my secrets (github.com)

Standard Ebooks: Public Domain Day 2026 in Literature (standardebooks.org)

All the numbers: Amazon Prime Day 2026 powered by AWS (aws.amazon.com)

Research papers using "kidney disappointment" instead of "kidney failure"(scholar.google.com)