That’s the main question that always comes to mind when I get spam for various dodgy items (like “enlargement” pills).  Obviously, someone is buying something or we wouldn’t be getting spam (although given the economics of spam, there don’t have to be very many people buying to make it worthwhile for the spammer).  This Wired article helps to answer this question.

A security flaw at a website operated by the purveyors of penis-enlargement pills has provided the world with a depressing answer to the question: Who in their right mind would buy something from a spammer?

An order log left exposed at one of Amazing Internet Products’ websites revealed that, over a four-week period, some 6,000 people responded to e-mail ads and placed orders for the company’s Pinacle herbal supplement. Most customers ordered two bottles of the pills at a price of $50 per bottle.

Holy crap!  That’s a lot of people (and a lot of money for the spammer).  Even more surprising was the number of people you’d think would be smarter (which I suppose proves that the cream doesn’t always rise to the top).

Among the people who responded in July to Amazing’s spam, which bore the subject line, “Make your penis HUGE,” was the manager of a $6 billion mutual fund, who ordered two bottles of Pinacle to be shipped to his Park Avenue office in New York City. A restaurateur in Boulder, Colorado, requested four bottles. The president of a California firm that sells airplane parts and is active in the local Rotary Club gave out his American Express card number to pay for six bottles, or $300 worth, of Pinacle. The coach of an elementary school lacrosse club in Pennsylvania ordered four bottles of the pills.

Other customers included the head of a credit-repair firm, a chiropractor, a veterinarian, a landscaper and several people from the military. Numerous women also were evidently among Amazing Internet’s customers.

All were evidently undaunted by the fact that Amazing’s order site contained no phone number, mailing address or e-mail address for contacting the company. Nor were they seemingly concerned that their order data, including their credit card info, addresses and phone numbers, were transmitted to the site without the encryption used by most legitimate online stores.

“There was a picture on the top of the page that said, ‘As Seen on TV,’ and I guess that made me think it was legit,” said a San Diego salesman who ordered two bottles of Pinacle in early July. The man, who asked not to be named, said he has yet to receive his pills, despite the site’s promise to fill the order in five days.

So if something is ‘As Seen on TV’ that makes it legit.  I think these people deserve everything they get.  Heh.

Link via Slashdot.