If you got tagged by "Support Bot" on DEV, don't click.

It took one look at the profile:

  • The name isn't "Support". It's Cyrillic letters dressed as Latin ones: "Suрроrt Воt".
  • The account was created on Nov 4: 0 posts, 41 comments when I looked.
  • It tags 10 people per comment, in alphabetical order, ten at a time. Nobody at DEV works through the alphabet by hand.
  • The username has already changed: my notification says salemsalem123, the profile now says supportbot123.

No real platform verifies you through a stranger's comment, and none needs your card for it.

Clicked but typed nothing? Close the tab, clear that site's data, check your downloads.

Authorized something or typed a password? Revoke the app and change the password now.

Entered your card? Call your bank.

Then flag the account: profile, then "Flag" or "Mark as Spam".

Check the profile before the link. It takes ten seconds, and it would have stopped this one cold.