Legit Check by CH: Legit or not?

Legit Check by CH claims that – “The Legit Check App is the encyclopedia of authentications; they’ve assembled a collection of “fake vs. real” comparisons for the most well-liked shoes, streetwear, and luxury designer goods. They claim that they are building the infrastructure for safely buying luxury items. From tasteful buyers and collectors to boutiques and retailers, Legit Check By Ch is enabling people to buy and wear luxury items confidently.

All designer luxury goods are available like- Air Jordan, Vlone, Anti Social Social Club, Bape, Travis Scott Jordans or Nikes, Comme des Garcons, Adidas, Dior, Nike, Supreme, Off-White, Gucci, Balenciaga.

Choose your item and hue, and you’ll be presented with a detailed checklist of the steps you must take to distinguish between a replica and a genuine one. You can get all the true vs. false authentication guides you’ll ever need right here, so stop searching around for loose guides.

Education is key. The purpose of this app is to teach you about the world of replicas so as to prevent getting scammed with fakes, replicas, or counterfeit shoes/clothes. The app’s target audience is beginners as well as advanced streetwear enthusiasts.”

Legit Check by CH- Let’s see the real image of Legit Check by CH

One of the customers explained his experience with Legit Check By CH and he mentioned on media platforms like Reddit that- 

He mentioned that he is new to the sneaker world, and he was hoping someone could assist him with this inquiry. His friend advised him to get an LC after he purchased some red Air Max 90 Independence Day sneakers. He decided to give a website named “Legit checked by ch” a shot after finding it. In their reply, they claimed that the shoes were phony. He sent the seller a screenshot of the response, and, suffice it to say, he wasn’t happy:

Thus, I have a query. Can I Get A Refund By Trusting the Legit Check By Ch?

The message that came from Legit Check by CH:

We regret to inform you that the item is completely fraudulent for the following reasons:

• The size tag print is improper, as the content of the size tag is printed outside the boundaries — while a bleed line is normal for authentic Air Max 90 size tags, this amount is too high on this pair, which shows us that lower quality factory equipment was used to produce this pair
• The laces are improperly attached to this pair — they’re supposed to be overlapping in a reverted manner.
•  The overall shape and structure of this pair are not in tune with other authentic Air Max 90 pairs — the heel bump is meant to be more pronounced

Another customer called Legit Check BY CH a disaster and mentioned about Legit Check BY CH that- “The most recent innovation in the authentication sector is a failure. They checked the legitimacy of a Hermes bag they had bought from a Hermes store, and found it to be fake! Furthermore, the justification was flawed and absurd. Authenticators cost very little and are more likely to declare the bag to be fake than the majority of “we authenticate everything” companies. Please don’t believe this business. By making false allegations without sufficient evidence to back them up, they can create havoc.”

Some other reviews by the customers on Trustpilot about Legit Check By CH are-

“So I bought a sweater and had some real doubts, needed a legit check, found this website on the internet and they are not being helpful at all. I need REASONS that the sweater is fake, paid 20$ for nothing because they just put random reasons saying it is legit when they also say that it is counterfeit, What the hell is this website?

The support is not even answering the messages I send them.

Would not recommend it.”

Some call Legit Check By CH a pointless app that is of no use.

Other customers of Legit Check By CH call unprofessional and unqualified authenticators.

He mentions that – “This recent addition to the authentication space is horrible. They evaluated a Hermes bag purchased directly from a Hermes store stating it was fake! And the reasons were so pathetic and totally inaccurate.

Like most of these “we authenticate everything” authenticators, they charge very little and err on the side of stating the bag is counterfeit.

Do not trust this firm; they will wreak havoc by making false statements without sufficient knowledge to back it up.”

Some customers of Legit Check By CH call it a false.

While others question Legit Check By CH’s legitimacy.

Some customers doubt the authenticity of service by Legit Check By Ch. He mentions that – “The authentication service I encountered was absolutely dreadful. They authenticated my Tudor watch and declared it to be a “counterfeit.” I decided to pay for a certificate in order to file a refund claim. However, upon receiving the certificate, I discovered that the reasons provided for the authentication actually indicated that the watch was genuine. Perplexed, I reached out to them seeking an explanation. They admitted to making an error and acknowledged that the watch was, in fact, authentic. I then requested a refund, but they disappeared without a trace.”

Reference- Legit Check By Ch Reviews | Read Customer Service Reviews of legitcheck.app (trustpilot.com)

Legit Check by CH- How do authentication Apps work?

Typically, these apps work as follows: You enable authentication for a service in the app by scanning a QR code that contains a secret key that the service you’re authenticating with and the authenticator itself shares. The same algorithm is used by both the authenticator and the service to generate a code based on this key and the current time.

The service compares the code you enter to the code it created when you first used the app. Everything will be alright and you will be able to access the account if the codes match. Along with the secret key, a lot of other data is communicated when you connect the authenticator app via a QR code. This includes the time frame for the one-time code.

When the service and authenticator pair, the secret key—the most crucial piece of information—is only ever transferred once, and both parties then retain it. In other words, there is nothing to intercept since absolutely no information is communicated from the service to your authenticator with each new login to the account.
In fact, authenticator apps’ primary purpose can be accomplished without even having access to the internet. The one-time code that the system generates for you to enter is the only thing that a hacker might potentially obtain. Additionally, this code is only effective for around 30 seconds.

Legit Check by CH- How the authenticator app scam works

An iOS developer-run security blog called Mysk revealed this con on Twitter: Scammers purchase the sponsored results at the top of searches for major authenticator apps like Google Authenticator and Microsoft Authenticator, thus the first app that appears in the results may be a fake. You’ll unavoidably be asked to pay an outrageous amount after downloading these scam apps, such as $40 per month to get login codes. (It should go without saying that genuine apps are where you can receive these codes for nothing.)

Even if Apple and Google have taken preemptive measures to remove some of these fraudulent apps from the market, con artists will always find a way to re-release these authenticators under a different name. Usually, the scam apps have a generic-looking lock icon and use the name “Authenticator” to appear genuine. There’s little room for creativity in a scammer’s world, apparently.

Legit Check by CH- How you can avoid fake authenticator apps

By taking a few simple steps, you may simply avoid these con artists. First, whether you search the App Store on your iPhone or the Google Play store on your Android device, don’t believe the first result you see. Even if the initial app seems legitimate, you should click the developer’s name to confirm their legitimacy. Google LLC, for instance, is the creator of Google Authenticator.

Next, quickly scan the web for your preferred authenticator apps. You will be routed to the proper app on your phone as long as you land on Google or Microsoft’s official download pages for their authenticator apps. The best precaution against these scam apps is to go with a popular option and avoid unknown apps. If you end up with an obscure authenticator app on your smartphone, you can delete it the moment it asks you to pay. All the best authenticator apps are free, or at least offer a free version.

Lastly, you can circumvent these scammers’ attempts to rob you by using apps with built-in two-factor authenticators.

Legit Check by CH- How to Prevent Authentication Vulnerabilities?

• Implement a reliable brute-force protection system: Brute-force attacks can be prevented by enforcing account lockouts, rate limiting, IP-based monitoring, application firewalls, and CAPTCHAs.
• Enforce a secure password policy: Do this by creating a password checker that tells users how strong their passwords are in real-time. You can also implement passwordless authentication using standards like FIDO2 to mitigate the risk and stress of managing passwords.
• Apply HTTP strict transport security (HSTS): This forces web sessions to use TLS encryption, preventing sensitive information from being accessed in transit.
• Consider disabling username enumeration: By generating the same error for a login failure whether the username was valid or invalid, you force an attacker to brute-force not just the set of possible passwords, but also the set of likely usernames, rather than sticking to the ones they know are valid.
• Modify cookie headers: Modifying cookie headers protects them against malicious attacks. Using the HttpOnly and SameSite tags when setting cookie headers prevents them from XSS and CSRF attacks, respectively.
• Scrutinize your coding on verifications: This is important for detecting any vulnerabilities in your code.
• Overall, periodically audit your code to discover logic flaws and authentication bypass and strengthen your security posture.
• Use parameterized statements: You can prevent SQL Injection attacks through input validation and parameterized queries. They are safer to avoid directly putting user-provided input directly into SQL statements.
• Implement proper multi-factor authentication: Using multi-factor authentication is more secure than password-based mechanisms. However, you need solid code and a secured generation of verification codes to effectively implement this form of authentication.