cd-wow.com - phishing?

[Tom Braider]

I've received the following message from cd-wow.com. Is this a phishing scam? I've already received the usual order and payment confirmation.

Thank you for your recent purchase with CD-WOW! We look forward to processing your order as soon as possible.
To help comply with our stringent fraud policies, we will require further information from you to confirm your identity before we can approve your order. Accordingly we would appreciate it if you could please forward a copy of your credit card and another form of identification showing your name and address as provided on your order. This can either be faxed (to [phone]) or scanned and emailed as a jpg image.
I understand that this may cause some inconvenience and for this I do apologise. We hope that you will find this as an added security benefit with shopping with us to help maintain the integrity of your payment details. This requested copy will be destroyed once received and verified, and all future orders will bypass this added security check.
We look forward to completing your order shortly.
Kind Regards
CD-WOW!
Payment Verification & Monitoring

[sara3]

you can't be serious! forward the whole thing to cd-wow (the email, not your credit card!) and let them deal with it.

no reputable company would request such a thing.

btw, I ordered a cd from them and it took ages to arrive in a broken case... but they didn't ask to see my credit card!

[stevec000]

you ask is it a scam
mmmmmmm......
YES

[Tom Braider]

Thanks guys. I was never going to send the stuff I was asked for - if it really is from cd-wow - which I doubt - then I'll just have to cancel the order. But how did the scammers get my e-mail address and order number?

I wonder what would happen if I sent a rude message in reply?

[rojash]

I'm not sure that this is a scam. I purchase a lot of stuff from the UK (I live in Greece) and quite often, when ordering from a company for the first time, I'm asked to provide additional ID confirmation, such as a bank statement, utility bill, or similar, either as a scanned e-mail attachment, or by fax.

[rojash]

In fact, looking at the terms and conditions on their site, I find this:
"To ensure the highest levels of security for all our customers, we may contact you to confirm your payment details before processing particular orders. This occasional security measure may result in fulfilment of your order being slightly delayed."

[Tom Braider]

To my amazement, I've received confirmation from cd-wow that the request is genuine, and they say that they'll accept scans "with sensitive information (part of the card
number, document number etc) covered to protect your security".

Should I agree to do this? I'm very reluctant; after all, they already have the "sensitive information".

[rojash]

Yes, you should. They just want to confirm that you are in physical possession of the document/card. As I said, it's not that unusual a request.

[sara3]

is it a huge order? they've never asked me for anything like that, and I've used them a lot.

[Lakitu]

I had the same request from play.com around a year ago. I was asked to order 100 movies for one of our overseas projects. After I placed the order, their initial email was that you can't order more than 3 items in one order.

I checked their Terms and Conditions and told them it doesn't state that. Then they came back asking for a photocopy of the card and a copy of the card statement and I could blank out the the card number except the last 4 digits.

At this point, I called them up and they confirmed this is procedure for large orders, so I just did it and my order was relased.

[Tom Braider]

Thanks for everybody's contributions. In the end I decided to cancel the order rather than send the info. It was just over �100 worth - not exactly huge.