Withdrawal form sends emails without order checks
Anyone can submit the public withdrawal form for any email address, so bots trigger confirmation emails with no order check or rate limit.
Tier II · Emerging Problems that are still building up.
3 public reports · first reported 17 June 2026 · last reported 22 August 2026
What's going wrong
Site owners running the EU withdrawal form report that it accepts any order number, name or email without checking them against a real order.
AI-assisted: written with the help of AI from the reports. The idea report has the full summary.
In the idea report
- The full summary.
- The products the 3 reports are about, and how many came each month.
- Related problems.
No business has been found with this problem yet, so the report has no contacts. All sales are final — no refunds. Pricing.