Barclaycard recently sent out a bunch of targeted spending promotions, which we posted about. If you didn’t receive the direct communication, it seems it’s still possible to enroll in these offers. Reader Jim provided us with this nugget:
If you’ve received a spending bonus e-mail from them in the past and still have it, you can modify the link to this current quarter and keep receiving it. I’ve done it. Copy the link from the old e-mail and edit the: “/EMQ32015spend” section (edit that to current quarter). You’ll receive a confirmation on the website, and confirmation e-mail.
anyone confirmed that this actually worked? Just getting the confirmation email isn’t good enough. like it was mentioned, the URL has many IDs that no one can figure out. like ACCOUNT_ID. The last4, F and L name easy to figure out. Without correct ACCOUNT ID, I don’t think promotion will actually be applied to your account. Plus, any one realize that altering the URL string to do something that is not meant to be is considered as a form of hacking? you will be doing a URL hack to one of biggest financial institutes.
The confirmation email is
Dear ,Thank you for taking the time to enroll your in the bonus offer. Earn bonus rewards within the designated categories from July 1 through September 30, 2015.¹Take advantage of this great offer and make your purchases even more rewarding.You will see your bonus rewards credited to your account 6 to 8 weeks after thepromotion ends! ¹Please refer to the email that you received for complete terms and conditions. Email intended for: and sent to: [email protected].
For card ending in:
Neither my name nor the last 4 number of cc are in the email.
Thank you for enrolling in the bonus offer.You’ve successfully registered.All Bonus Rewards will be awarded to your account6 to 8 weeks after the promotion ends.
The email I got has a link like this: http://offers.barclaycardus.com/1e35655e4layfiu….bqaaaaaawpipciehnpjxmyaaaaa/C?V=emlwX2NvZGUB……………………………………….
There is no hidden fields needed since those could not be used in ‘GET’ request. Looks like the all information is encrypted in the query string. The key word is encrypted. The request gets processed by the barclaycardus.com server on the back-end and you directed to login screen. The redirected link might be the key.
Some additional information: The redirected link might i got is the same as Emmaon June 28, So that would not help.
We need the other variables for this to work. Unless someone shares it, it is pretty useless
I don’t think this whole idea is really going to work. The url for the promo has details that I doubt anyone not targeted for this can find – like APRIMO ID, ACCOUNT ID, PARTY ID, CAMPAIGN ID, etc. I’ve gotten 4 confirmation emails, but I’m skeptical as to whether I am actually registered for the 15K promo for any of the 4 accounts.
So lets have someone who did get an offer share what was prepopulated, create a new page with those variables, put in our own information and submit it.
So I tried with
http://offers.barclaycardus.com/p/Barclaycard/[email protected]
hoping it would automatically match the email address to the account. It doesn’t, and the confirmation email is all broken (“Earn bonus rewards with your account ending in .” and “Email intended for: and sent to:”) so clearly it won’t work.
Now, looking at the source code for that page (Ctrl + U) I see a lot of hidden fields, so I’m pretty sure when people click the link in the email they have to login to their account and these fields are pre-populated in the background:
If someone who actually received the email can post what’s in these fields that would be pretty awesome (after removing all personal information of course). Hell, when I see fields like “BONUS_AMOUNT” we might actually be able to control how much bonus we’re getting haha!
I received the offer from Barclay and still my confirmation email leaves blanks,it says “dear” then no name after and by “account ending in” it also leaves a blank.
I used this link and got a confirmation empty with empty fields. I called and asked if there were any promotions on my account. They said the only one they saw was the 50% bonus ending tomorrow. So I think we still have more work to do.
I think what we need to do is have someone who got an offer paste the values that those fields are prepopulated with (or at least determine what they are, I’m guessing the input LAST4 are either the last 4 of the SSN or the card). Then we can adjust them for our own account and tweak the rewards as needed.
The 15k point offer never came with a link. I had it back when I first got my USAir card and was postal mailed a card that said i was auto-enrolled for not spending enough on my card. I also got an email that said the same but didn’t require activating. The 2.5k point links always come via email and required activation.
I just successfully took my wife’s 2500 pt offer and changed the e-mail address in the url to mine. I had to copy and paste it into a new window for it to successfully work though. Anyone have the url for the 15000 pt offer yet?
Can you post the link you used?
Seems to good to be true, what’re the chances that this will ACTUALLY work, I’m guess not very good. The confirmations reference nothing specific just “the bonus offer”
I don’t either think this is gonna work. I tried this with an email that isn’t attached to any Barclay card, and still got the same confirmation. So it’s pretty obvious that it doesn’t really identify you properly.