If you got tagged by "Support Bot" on DEV, don't click.
It took one look at the profile:
- The name isn't "Support". It's Cyrillic letters dressed as Latin ones: "Suрроrt Воt".
- The account was created on Nov 4: 0 posts, 41 comments when I looked.
- It tags 10 people per comment, in alphabetical order, ten at a time. Nobody at DEV works through the alphabet by hand.
- The username has already changed: my notification says salemsalem123, the profile now says supportbot123.
No real platform verifies you through a stranger's comment, and none needs your card for it.
Clicked but typed nothing? Close the tab, clear that site's data, check your downloads.
Authorized something or typed a password? Revoke the app and change the password now.
Entered your card? Call your bank.
Then flag the account: profile, then "Flag" or "Mark as Spam".
Check the profile before the link. It takes ten seconds, and it would have stopped this one cold.