Devagiri admitted to working with others in 2020 and 2021 to cause DoorDash to pay for deliveries that never occurred. At the time, Devagiri was a delivery driver for DoorDash orders. Under the scheme, Devagiri used customer accounts to place high value orders and then, using an employee’s credentials to gain access to DoorDash software, manually reassigned DoorDash orders to driver accounts that he and others controlled. Devagiri then caused the fraudulent driver accounts to report that the orders had been delivered, when they had not, and manipulated DoorDash’s computer systems to prompt DoorDash to pay the fraudulent driver accounts for the non-existent deliveries. Devagiri would then use DoorDash software to change the orders from “delivered” status to “in process” status and manually reassign the orders to driver accounts he and others controlled, beginning the process again. This procedure usually took less than five minutes, and was repeated hundreds of times for many of the orders.

The scheme resulted in fraudulent payments exceeding $2.5 million.

  • throwawayacc0430@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    2
    ·
    11 hours ago

    I don’t think doordash lets you use a VPN.

    Many platforms that deal with finance would reject an order when they detect VPNs or Tor (since that’s what fraudsters and scammers use), or they ask for additional verification (like SMS) to verify you are in fact the account holder. So they probably were just using their real IP address.

    • rc__buggy@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      2
      arrow-down
      4
      ·
      11 hours ago

      Well in this case a proxy isn’t a VPN, but an intermediate the criminal has taken control of. A proxy does not have to be legitimate.

      • AmbiguousProps@lemmy.today
        link
        fedilink
        English
        arrow-up
        3
        ·
        edit-2
        11 hours ago

        True, but again, you’re making a lot of assumptions here. I don’t see anything about proxies anywhere.

        He probably got caught because of an internal audit, that’s the assumption I would make.