Food delivery has been absolutely booming amid pandemic lockdown, which is perhaps what made a new DoorDash scam all the more easy to pull off.

@DoorDash_Help Reported fraud on my account 4 (!) days ago and DoorDash still hasn’t done anything. I keep getting told to wait 24 hours. Someone stole over $120 from me and all I’ve been offered is $41.71 in DoorDash credits for an order I didn’t even place. I am livid.

— Amara Meierhoff (@AmaraJo611) January 19, 2021

People across Canada and the U.S. recently found themselves hit with random debit charges from the California-based takeout delivery service — even those that have never even heard of the app.

North of the border, the scam appeared to be limited to TD customers, some of who lost hundreds of dollars in phony charges for orders they didn't place and DashPass memberships they didn't sign up for.

I almost didn’t call because it was only for 9.99 and it was DoorDash as well as being a time when so many of my real charges are due but glad I did . They knew right away it was fraud . I get lots of scam emails asking me to verify . I just block and delete

— sharon champagne🇨🇦🤸‍♀️ (@yogachampagne) January 27, 2021

An exposé from the CBC found multiple citizens across six provinces including Ontario had been charged, even those who live in remote areas where DoorDash isn't even offered. 

It also seems that many of the targets weren't even existing DoorDash customers, making the methodology of how the fraudsters got their banking info all the more sketchy.

The origins of the scam and who is behind it have yet to come to light, but DoorDash has said that it is taking the situation very seriously and has worked with TD to resolve the issue through reimbursements.

you'd be surprised how common it is for debit card fraud to be food related, its ALWAYS doordash/justeat/deliverroo its crazy

— Chernobyl (@ChernobylRat) January 24, 2021

The company is in hot water for a number of other reasons as of late, including a class action lawsuit claiming it has been purposely diverting business away from restaurants who didn't partner with it, creating phony landing pages and then listing them as "closed" to customers.