Greg's Corner

The email scam that will scare your friends!

Recently, a man from Amarillo, Texas started getting messages and texts from friends and colleagues asking him if he was ok. They were concerned for his well-being after they received an email that said the man was in a serious car accident that left him with spinal injuries. Thankfully, the man was fine but understandably confused why he was receiving so many messages about his health status. It turns out that his email account had been hacked and emails had been sent to everyone in his contact list. So why would a scammer send an email like this to everyone the victim knows?

Well, it’s the second part of the email that gives away the scam. After telling people that the victim had been in a serious wreck the email goes on to ask for money. Not just money but gift cards. The victim’s friends first received an email that said: “Hi, I need to ask a favor, can you write me back.” If someone responded to the first email they would get the second email that told them about the fake accident. In that same email, they were asked to buy an Amazon gift card that’s intended for the victim’s niece’s birthday. Here is the email’s contents in full…

I need to get an Amazon gift card for my niece, it’s her birthday, but I can’t do this now because I was involved in a car crash a few days ago, I have fractured my lumbar L1 and fractured my wrist. I’ll pay you back as soon as I’m back. Kindly let me know if you can handle this.

It’s unknown if any of his contacts fell for the scam but they did the right thing when they received it. They contacted the man to see if the email was legitimate. That is exactly what you should do if you receive an email like this, preferably through another means of communication like text messaging. If you reply to the email, the victim might not receive it if their account has been hijacked. To better protect yourself from having your email account hijacked we recommend enabling two-factor authentication on all of your email accounts. Not only that, but your accounts should be protected with their own individual passwords that aren’t used on other accounts.