Greg's Corner

Tagged: phishing Toggle Comment Threads | Keyboard Shortcuts

• 

  Geebo 8:00 am on June 1, 2021 Permalink | Reply
  Tags: bank scam ( 74 ), phishing, PNC Bank ( 3 ), Scams ( 1,429 ), text messaging ( 37 )   

  Responding to a scam text 

  

  By Greg Collier

  PNC Bank has been dealing with many text message scams. Like many banking scams, the text messages say that there is an issue with the recipient’s PNC account. The text message then gives a phone number that the recipient can call to rectify the issue. As you’ve probably guessed, the phone number doesn’t belong to PNC and instead goes to a phony customer service department. But aren’t you just a little bit curious to know what happens if you were to call that phone number?

  A cybersecurity expert in the Pittsburgh, Pennsylvania area recently received one of these PNC scam texts. He knew right away it was a scam because he didn’t bank with PNC. However, he decided to call the number provided in the text to see what happens. He was greeted by an automated message that instantly asked for his Social Security number. The automated message then asked for not only his banking PIN but his debit card number as well. As you can imagine, if a scammer were to get a hold of this information, someone’s bank account could be immediately emptied.

  It’s not just PNC that is dealing with this. Fifth Third Bank is also currently dealing with a similar scam. Considering scammers will send out these texts en masse no matter who you bank with, you should be suspicious of texts that claim to come from your bank. Especially if they’re claiming there’s an issue with your account. If you receive a banking text like this, and it appears to be coming from your bank, do not click on any link in the text or call the number the text might provide. Instead, call the number on the back of your debit card or go to the bank’s website to find the actual customer service number.

   

  Leave a ReplyCancel reply
• 

  Geebo 8:00 am on May 24, 2021 Permalink | Reply
  Tags: economic impact payment ( 22 ), fake websites ( 11 ), identity theft ( 109 ), phishing, Scams ( 1,429 ), stimulus checks ( 20 )   

  Scammers are still using stimulus checks as bait 

  

  By Greg Collier

  Even after a year and three stimulus payments from the government, scammers are still using the promise of stimulus checks as bait in their ongoing scams. When the stimulus payments were issued, most taxpayers received their payments by direct deposit in their bank accounts. However, for various reasons, a large section of the population had great difficulty in receiving their payments. Scammers are now said to be trying to take advantage of those people in this latest scam.

  According to reports, scammers are sending out emails promising to help its recipients obtain unclaimed stimulus money. The email has a link which takes victims to a website which asks for your personal information, so they can send you information on how to apply for unclaimed stimulus checks. This could lead to a number of scams. First and foremost it could be a front for identity theft, especially if the scammers ask for financial information. This also reminds us of the unclaimed property scam where scammers could be charging money to help you obtain stimulus money that they have no intentions of delivering.

  Please keep in mind that the only people who can help you with a stimulus related issue is the IRS. The IRS will never send out unsolicited text messages or emails, and they only tend to communicate by mail. Anybody else who is promising to get you stimulus money is more than likely a con artist. If you have had issues with getting your stimulus payments, the best place to go to resolve the issue is the IRS’s Economic Impact Payments website. If you think you may have unclaimed money that’s not related to the stimulus payments, you can go to the USA.gov website.

   
• 

  Geebo 8:00 am on April 22, 2021 Permalink | Reply
  Tags: package delivery ( 8 ), phishing, Scams ( 1,429 ), USPS ( 14 )   

  The delivery text message scam returns 

  

  By Greg Collier

  Last year, we discussed the delivery text messaging scam both pre- and post-pandemic. How the scam worked in the past was you’d receive a text message informing you that something you ordered online couldn’t be delivered, and you need to update your preferred delivery method. A link would be provided for you to confirm your delivery.

  If you clicked the link, you’d have been taken to a phony Amazon page where you’d be asked for your login information. The fake Amazon page will then ask you to fill out a customer service survey in order to claim a prize. After you win the prize, you’ll be asked to pay for shipping by providing your financial information. In essence, scammers just stole your Amazon login along with your credit or debit card info. Put those two things together and victims of the scam could be looking at some expensive purchases on their Amazon account with their own payment information with the actual items being sent to some scammer. In other cases, victims were signed up for a subscription service that charged their card $100 every month.

  Now, the scam seems to have returned with a twist. Previously, the texts would appear like they’re coming from UPS, FedEx, DHL, and Amazon. More recently, the text messages appear like they’re coming from the United States Postal Service. This new version of the scam has been popping up all over the country as we have seen reports from New York, Texas, and South Dakota just to name a few.

  Please keep in mind that no delivery service nor the USPS will ever text you out of the blue. These companies cannot text you unless you sign up for their text service first. Plus if these services did text you, the texts would not include a scammy looking link.

  If you receive a text that looks like the image above or something similar, just delete it. The best way to handle scammers is to not engage with them whatsoever.

   
• 

  Geebo 8:47 am on April 13, 2021 Permalink | Reply
  Tags: Google ( 30 ), Google Photos, identity theft ( 109 ), phishing, Scams ( 1,429 )   

  Google Photos scam wants your password 

  

  By Greg Collier

  It’s difficult to live an online life without using some of Google’s services. For example, if you’re using an Android phone, you’re already entrenched in the Google ecosystem. Because of that, you’re probably using Google services that you might not be aware that you’re using. Google Photos is one of those services. If you use an Android phone you’re probably using Google Photos without even knowing it. In most Android phones, Google Photos will back up the pictures you take with your phone to the cloud. Due to the sheer number of people who use Google Photos, it has become an avenue for identity thieves.

  According to reports, scammers are sending out phony emails that say someone has shared their Google Photos Album with you. These are phishing emails that are said to look authentic. If you click on the link to the supposed photo album you’re asked to enter your Google username and password. Except the website where you just entered your Google information isn’t a Google website. Instead, it’s a website set up by scammers to steal your Google login information.

  Please take a moment to think how much your online life is contained in your Google account. In just your Gmail alone there is probably enough information to steal your identity easily. Between banking information and social media accounts, someone with access to your Google account could essentially take over your identity and ruin it for years to come.

  As is the norm with most phishing emails, you should never click on the link any of these emails contain. On your computer, hover your cursor over the link to see where the link actually directs you. Check for misspellings of actual web addresses used by real companies. Also, don’t click on any links that have been shortened by a link shortening service as they can disguise the links true destination.

   
• 

  Geebo 8:00 am on March 31, 2021 Permalink | Reply
  Tags: college ( 17 ), income tax ( 14 ), IRS ( 26 ), phishing, Scams ( 1,429 )   

  College students targeted in tax scam 

  

  By Greg Collier

  With it being tax season, tax scams are on the rise. We’re not talking about the kind of tax scam where federal agents show up at your door because you claimed the squirrels in your yard as dependents. We’re talking about the kind where is either trying to separate you from your refund, or using the promise of a refund to steal your information. The latest targets in this kind of tax scam are college students.

  The IRS is warning people that anyone with an email address ending in .edu is vulnerable to this scam. The scam is essentially a phishing attack. The student receives an email that appears to be from the IRS asking the recipient to click on a link that’s labeled either “Tax Refund Payment” or “Recalculation of your tax refund payment.” If the victim clicks on the link they’re taken to a website that asks for personal information like name, date of birth and Social Security number.

  Theoretically, college students are a prime target for identity thieves. At that age they may have established any serious credit yet which is the holy grail for identity thieves. Identity thieves could use a young victim’s credit for years before the victim ever realizes it.

  There’s been this stereotype that’s been going around forever that young people are better with technology than their parents. While that may be true, they may also be unsure of how filing their income taxes and receiving a refund works. So, they might think that this phishing email is a legitimate way of claiming their income tax refund. We realize that our readers tend to be from a different demographic than college students, but we also realize that you may have a college student in your family. If you do, you may want to warn them about this potential scam.

   
• 

  Geebo 8:00 am on March 29, 2021 Permalink | Reply
  Tags: coronavirus ( 40 ), covid-19 ( 48 ), phishing, Scams ( 1,429 ), survey scam   

  Vaccine survey could be a scam! 

  

  By Greg Collier

  People all over the country have been reporting that they’ve been receiving emails and text messages asking them to fill out a survey about the COVID-19 vaccine. The messages even appear to look like they’ve been sent by one of the major manufacturers of the vaccine. So far, close to 50 million people in America have been fully vaccinated. This gives scammers a pretty large target. The messages are almost certainly sent out at random, but the odds are pretty good they’ll reach someone who has been vaccinated.

  The majority of these survey scams promise the recipient a free gift if they fill out the survey. Of course, the free gift comes with a catch. While the gift may be free, the survey takers are asked for their credit or debit card information to pay for shipping. The gift doesn’t actually exist, and the scammers are just out to get as many card number as they can. Officials have also warned people to not click on any links contained in the messages as they could potentially lead to your device being infected with malware.

  The surveys themselves are even said to be asking for sensitive information that could be used for identity theft. It seems like the survey scammers don’t want to leave any digital stone unturned when it comes to gathering as much data about you as possible. If you receive one of these messages, it’s recommended that you delete it immediately and not click on any of the links they contain. If you’ve already lost money to this scam, you’re asked to report it to the FTC.

   
• 

  Geebo 8:00 am on March 18, 2021 Permalink | Reply
  Tags: identity theft ( 109 ), new york ( 16 ), phishing, Scams ( 1,429 ), unemployment scam ( 30 )   

  New phishing scam sells your identity on the dark web 

  

  By Greg Collier

  An insidious phishing scam has turned up in the nation’s largest metropolitan area.

  For those who may not be familiar with what phishing is, it’s when you get sent a phony email or text that has you click on a link. These links either take you to a phony website where identity thieves will try to steal your personal information or the links will inject malware into your device. If malware were to get into your device, it could transmit your data to scammers and identity thieves and scammers, or it could lock your device in a ransomware attack. However, this new phishing attack has victims voluntarily giving up their information in a more comprehensive way than before.

  Reports out of New York are saying that victims of the attack are receiving authentic looking emails and text messages that appear to be from the State Government. The messages largely target those who are currently unemployed in the Empire State. Once the victim clicks the link in the message, they’re taking to a website that is a mirror image of the official New York unemployment website.

  After the victims use their login information on the phony website they’re then asked to take high-quality pictures of their driver’s license and other sensitive documents. Once the identity thieves have your information, they turn around and sell your identity on the dark web. According to security experts, Social Security cards are going for around $1.50 while driver’s licenses are going for around $100. Just imagine, a $1.50 transaction on the dark web that happens instantly can have expensive repercussions on your life for years to come.

  Always be suspicious of any text message, email, or social media message that wants you to click on any kind of link, especially if it’s for such a crucial matter like your unemployment benefits. Most government agencies like unemployment offices will not email or text you but instead will almost always contact you through the postal mail. And keep in mind that all official government websites end in .gov.

   
• 

  Geebo 9:00 am on February 25, 2021 Permalink | Reply
  Tags: medical scams ( 21 ), new york ( 16 ), nurses ( 3 ), phishing, Scams ( 1,429 )   

  Scam tries to extort medical professionals 

  

  By Greg Collier

  Scammers still haven’t gotten tired of COVID-19 related scams yet. However, instead of targeting the general public, some scammers have decided to go after medical professionals in the scammer’s quest for ill-gotten gain.

  This scam is similar to the Social Security scam where the scammers claim that your Social Security number has been suspended due to some fictitious crime that your number was supposedly attached to.

  In this scam, scammers are contacting nurses, physicians and pharmacists posing as the state of New York to tell the victims that their licenses have been suspended. However, a substantial payment just happens to be able to revers the suspension and can avoid the licensee any future fines.

  It’s not lost on us that these scammers are going after frontline workers in a state that has one of the highest concentration of COVID-19 patients. This is an example of a couple of scammer tactics. One is to try to pressure and already overworked system and the other is to take advantage of any crisis no matter how horrible.

  In this instance, the scammers are flooding their victims with mounds of official-looking paperwork that appear to be from such agencies as the state, the U.S. Department of Justice, the FBI, Trans Union and the New York state Office of Professions. The problem with this paperwork is that it can look legitimate since they contain information like the professional’s National Provider Identifier.

  In the long run, scammers may not be after money but instead after the personal information of medical professionals as most of the forms ask for Social Security numbers and the like.

  It is recommended that anyone receiving one of these calls or messages to ignore it and report it to the FBI if you’ve lost money, or the FTC and local police if you haven’t.

   
• 

  Geebo 9:00 am on January 21, 2021 Permalink | Reply
  Tags: economic impact payment ( 22 ), FTC ( 17 ), phishing, Scams ( 1,429 ), stimulus checks ( 20 )   

  New email scam tries to get your stimulus money 

  

  With the second round of economic impacts in the process of being paid and a third round possibly on the horizon, you might think that taxpayers should now be pretty immune to stimulus scams. However, that hasn’t stopped scammers from trying to get their hands on yours. It also appears that the scams are becoming even more elaborate to try to steal from you.

  The Federal Trade Commission is warning taxpayers about emails that claim to be from their agency discussing the stimulus payments. The emails even claim to be sent directly from the outgoing chairman of the FTC. According to reports, the email demands that you pay money to receive your stimulus payment. It even includes an official looking ‘certificate of approval’.

  If you make any motions towards actually making a payment to the scammers, you’ll be told that the payment is for a State Department certificate that proves the funds are not related to any terrorist activity. That may sound made up, but the FTC is assuring us it isn’t.

  If you receive one of these emails it is recommended that you just delete it or mark it as spam.

  The indicators that this email is a scam are numerous. The first is that the FTC has nothing to do with economic impact payments. That is all handled by the IRS, and they’re not emailing anyone asking for money either. One of the other indicators is that you don’t have to pay for your stimulus payment. The majority of taxpayers just have to keep an eye on their bank account if they have direct deposit, or their mailbox if they don’t. Even if you’re a non-filer and received the initial stimulus payment, you should receive this one the same way.

  If you have any further questions about how the economic impact payments are being made, we recommend going to the IRS’s Get My Payment website.

   
• 

  Geebo 9:00 am on January 5, 2021 Permalink | Reply
  Tags: Facebook Marketplace ( 65 ), paypal ( 12 ), paypal scam ( 13 ), phishing, Scams ( 1,429 ), text messaging ( 37 )   

  Two PayPal scams you should be aware of 

  

  PayPal is probably one of the most trusted online payment systems today. There aren’t many online retailers that don’t accept PayPal as a payment option. PayPal also allows those who are underrepresented by banks to not only shop online but to also have a debit card that the consumer can use like any bank debit card. However, this post isn’t meant to be free publicity for PayPal. While PayPal does offer many protections to their users, it can still be used in various scams as we’re about to take a look at now.

  Security experts are warning about a new series of text messages going around that are designed to steal your PayPal login information. The text messages claim that there has been fraudulent activity on your PayPal account and that your account is now limited. That would mean that you would be restricted in the use of your own PayPal account. The text then directs you to click on a link to verify your account. If you click on the link, you’ll be taken to a phony PayPal page that resembles the genuine article. If you enter your login information on this phony page, your information has just been stolen. Since many PayPal accounts are linked to bank accounts, your bank account could be in jeopardy as well. If you feel like you’ve clicked on one of these links and given them your information you should immediately change your PayPal password.

  The other scam is more hands on so to speak. A woman in Georgia was selling a cell phone on Facebook Marketplace. She met a buyer at a local restaurant. The man agreed to buy the phone using PayPal. The buyer showed the woman a fake email that looked like he had just paid her through PayPal. However, the woman wasn’t seeing the payment in her account. The man then made it appear as if he was calling PayPal himself and told the woman that the payment would be in her account in a couple of hours. As you can expect, the payment never showed up. PayPal doesn’t work like this as payments are almost instantaneous. Once you make or receive a payment you should be notified by PayPal right away. If you’re not notified you shouldn’t take a stranger’s word for it that you’ve been paid.