Greg's Corner

Tagged: Scams Toggle Comment Threads | Keyboard Shortcuts

• 

  Geebo 8:34 am on September 18, 2023 Permalink | Reply
  Tags: cyberattack, cybersecurity ( 37 ), MGM Resorts, ransomware ( 11 ), Scams, social engineering ( 2 )   

  What does the MGM casino cyberattack mean to you? 

  

  By Greg Collier

  When we think of someone stealing from a casino, we may think of someone cheating at the tables. Or we may think of one of the famous heist movies like Ocean’s Eleven, whether it’s the Frank Sinatra or the George Clooney version. What we probably don’t think about is a chain of Las Vegas casinos being held hostage by hackers after a ten-minute phone call. Unfortunately, that’s what appears to have happened to the casinos owned by MGM Resorts this past week.

  While MGM themselves are being tight-lipped about the situation, it seems that a hacker collective found an upper management employee of MGM Resorts on LinkedIn. The hackers then posed as this employee and called MGM’s IT help desk. While speaking with the person at the help desk for only ten minutes, the hackers were able to obtain the information needed to access MGM Resorts’ internal computer systems.

  Once the hackers had the keys to the kingdom, so to speak, they infected MGM’s systems with ransomware. For the next few days, MGM Resorts had to shut down many of its systems, which greatly affected their business. Slot machines were inoperable, and the hotels could not issue electronic room keys to guests, just to name a few of the problems. The casinos even had to revert to giving out handwritten receipts to some of its winners.

  MGM has stated they will not give in to the hackers’ demands.

  So what does MGM’s trouble’s mean to the average consumer? Well, this kind of impersonation attack is known as social engineering and can be used in a multitude of scams. Social engineering is a form of manipulation and psychological persuasion that is often used for malicious purposes. It involves exploiting human psychology and social interactions to trick individuals or groups into divulging confidential information, granting access to restricted areas, or performing actions that may compromise security.

  If social engineering can be used against a multi-billion dollar corporation, it can be used and be successful against anyone. Protecting oneself from social engineering attacks involves a combination of awareness, skepticism, and proactive measures.

  Always verify requests for sensitive information, access, or actions, especially if they come via email, phone calls, or in-person interactions. Use trusted contact information to confirm the legitimacy of the request with the supposed authority or organization.

  Be cautious of unsolicited communications from unknown or unexpected sources. Verify the identity of the person or organization before sharing sensitive information or complying with their requests.

  By adopting these practices and fostering a security-conscious mindset, individuals can significantly reduce their vulnerability to social engineering attacks and help protect their personal and organizational assets.

   

  Leave a ReplyCancel reply
• 

  Geebo 8:00 am on September 15, 2023 Permalink | Reply
  Tags: cybersecurity ( 37 ), identity theft ( 107 ), online shopping ( 34 ), Scams, TEMU ( 3 )   

  Is it safe to shop on TEMU? 

  

  By Greg Collier

  In case you haven’t heard, TEMU is the latest online shopping sensation. Thanks to their glitzy advertising campaigns, TEMU has taken off in popularity. Social media is flush with posts of people posting their hauls from TEMU. So, is TEMU any good and is it reliable? If we were pushed to give a yes or no answer, we would side with no.

  TEMU is the latest in a string of direct retailers based in China. You may have heard of some of their competitors, such as AliExpress or Wish. Rather than selling items themselves, TEMU allows companies and distributors to sell Chinese-made goods through their portal to customers in the West.

  TEMU’s predecessors, the aforementioned AliExpress and Wish, have garnered a reputation of selling shoddily made or counterfeit goods, along with long shipping times if the item is shipped at all. TEMU seems to be following in their footsteps, but those aren’t the only drawbacks to using TEMU.

  According to the Better Business Bureau (BBB), TEMU is harvesting customer data like there’s no tomorrow. The BBB says that TEMU is collecting such information as the customer’s name, phone number, address, birthdate, social media photos, and even social security numbers. So how is that different from the major U.S. retailers?

  The BBB is concerned that since TEMU is based in China, scammers, identity thieves, and other bad actors may have easier access to that data. While data leaks do happen in the U.S., there are laws to try to protect those affected by the leaks and admonish the leakers. Many other countries do not have such laws, especially when the victims of such leaks are from another country from the other side of the world.

  In a world where personal information is more valuable than ever, it’s essential to tread carefully when navigating the digital marketplace. While TEMU offers enticing deals and a wide range of products, it’s crucial to remember that convenience shouldn’t come at the cost of your personal data security.

   
• 

  Geebo 8:00 am on September 14, 2023 Permalink | Reply
  Tags: elder fraud ( 5 ), elder scam ( 7 ), elderly ( 12 ), Scams   

  Protecting the elderly from scams 

  

  By Greg Collier

  While young people are just as susceptible to scams, the elderly have long been a target of scammers. Recently, the Better Business Bureau released a list of signs to look out for that could indicate an elderly loved one is bing scammed.

  Unsolicited Mail or Emails: Scammers often send unsolicited mail or emails promising prizes, lottery winnings, or other offers that require upfront payments or personal information.

  Sudden Financial Changes: If your elderly relative experiences sudden financial changes, such as large withdrawals or transfers of money, unpaid bills, missing funds, or payments to unfamiliar companies, it could be a red flag.

  Changes in Behavior: Look for changes in behavior, such as increased anxiety, withdrawal from social activities, or secrecy about financial matters. If they’re being secretive about phone calls, that could be an indicator that a scammer has already made inroads to their finances.

  Loss of Assets: If your relative unexpectedly sells valuable possessions, real estate, or investments without a clear reason, it could be a sign of financial exploitation. Another indicator could be that your loved one is going without necessities such as food or utilities.

  If your loved one has already fallen victim to a scammer, there are steps you can take to help them.

  First, you should have an open and non-judgmental conversation with your relative about your concerns. Listen to their side of the story. Keep records of any suspicious communications, transactions, or individuals involved. Lastly, report the scam to authorities.

  However, the best thing you can do for them is to educate them on common scams and strategies to protect themselves from future scams.

  Remember, it’s essential to maintain your elderly loved one’s dignity and autonomy while helping them stay safe from scams. Encourage them to stay vigilant and seek support from trusted friends and family members.

  You can find more tips about scams and the elderly at this link.

   
• 

  Geebo 8:00 am on September 13, 2023 Permalink | Reply
  Tags: doctor ( 4 ), impersonation scam ( 146 ), medical license ( 2 ), money laundering ( 11 ), Scams   

  Doctor falls prey to money laundering scam 

  

  By Greg Collier

  One of the main points we try to drive home when discussing scams is that anyone can fall victim to a scam. It doesn’t matter if you’re a teenager working a part-time job, or an established academic, there’s a scam designed just for your particular circumstance.

  And speaking of academics, the victim in today’s story is a doctor. Whether someone is a medical doctor or a doctor of letters, they’ve spent years, if not decades, of constant learning. When advances in their respective fields are made, that’s even more studying and researching that has to be done. They can’t become successes in their field without being studious and knowledgeable. Yet, they still get scammed like everyone else.

  One of the more common scams that targets doctors is a variation of the jury duty scam. In these instances, instead of being told they missed jury duty, they’re told they’ve missed testifying as an expert witness. The doctors are told to make a payment to the scammers posing as police to avoid being arrested.

  The doctor from Cleveland who recently fell victim to a scam was targeted in a licensing scam. He received a call that claimed to be from the Ohio State Medical Board. The phone number on the caller ID even matched that of the Medical Board. The 57-year-old doctor was told his license was being suspended because he was being investigated by the FBI for money laundering. He was instructed to wire $20,000 to have his license reinstated. After the doctor wired the money, he called the actual Medical Board to see if the payment was received. That’s when he learned he had been scammed.

  It’s essential to recognize that scams don’t discriminate. They can infiltrate the lives of individuals from all walks of life, irrespective of their economic or educational background. Falling victim to a scam doesn’t reflect a lack of intelligence or judgment; it underscores the cunning tactics employed by fraudsters to exploit our vulnerabilities. By staying informed, vigilant, and sharing our experiences, we can collectively build a stronger defense against scams and protect ourselves and our communities from the pervasive threat they pose.

   
• 

  Geebo 8:00 am on September 12, 2023 Permalink | Reply
  Tags: oil rig ( 4 ), romance scam ( 70 ), Scams   

  Just how methodical are romance scammers? 

  

  By Greg Collier

  There seems to be this impression that victims of romance scams are just lonely and lovesick people who fall head over heels for their scammer immediately. This couldn’t be further from the truth. Romance scammers are very good at what they do and are very meticulous in grooming their victims. The scammer could string their victim along for months before they even think about asking for money.

  For example, a Massachusetts woman met her scammer in October of last year. She met him on a dating site, and she believed he was a hardworking widower. The victim states that the scammer acted like a perfect gentleman and gave no hint of being a con artist.

  He claimed to be an oil pipeline worker, who was on a job in Saudi Arabia. For those who are familiar with romance scams, this would have been a double red flag. Not only do romance scammers often pose as people who work overseas, they also pose as offshore oil rig workers. Both of these are done so the scammer can maintain plausible deniability as to why they can’t meet in person.

  Getting back to the story, the scammer provided the woman with a copy of his passport, and the couple even had video calls together. The news report does not go into specifics, but we have to wonder if some kind of AI was involved in the video calls or if this was a case of a brief video before the scammer claimed his camera malfunctioned. Either way, the victim had no reason to believe she was on the road to being scammed.

  It wasn’t for another six months before the scammer started asking the victim for money. He told her that he was having trouble accessing his bank account and needed to buy a specific part to do his job. Once the victim sent the money after this first request, subsequent requests for money followed. Before it was all over, the victim had sent $200,000 to her scammer. It wasn’t until he failed to meet her at the airport when she realized she was being scammed. The scammer claimed to be in the hospital after a car crash.

  However, the scammer continued to call her asking for money. When that didn’t work, the scammer posed as an FBI agent, telling her not to talk to anyone about being scammed. So on top of a romance scam, we get a police impersonation scam as well. There is no depth scammers won’t sink to.

  In conclusion, the tales of romance scammers who invest months in their deceitful ploys serve as a stark reminder of the need for vigilance and caution in the digital age. These cunning individuals manipulate emotions, trust, and vulnerability to achieve their malicious goals. By sharing stories and raising awareness about this issue, we empower ourselves and our loved ones to recognize the signs and protect against such heart-wrenching scams.

   
• 

  Geebo 8:00 am on September 11, 2023 Permalink | Reply
  Tags: AirTags, Apple ( 30 ), car theft ( 3 ), Facebook Marketplace ( 62 ), Safety ( 45 ), Scams, stolen cars ( 10 ), used car ( 33 )   

  Scammers use AirTags to steal cars 

  

  By Greg Collier

  If you’re not familiar with AirTags, they’re a device sold by Apple that is essentially a tracking device. AirTags are intended to be used on things you don’t want to lose, such as keys and luggage. Some have even attached AirTags to their pets’ collars, so they can be located quickly if they get out. However, bad actors have used AirTags for more nefarious purposes. Unfortunately, there have been numerous instances of stalkers using AirTags to track their victims. Car thieves are also infamous users of AirTags.

  One such car thief was recently arrested in Minnesota, after a potential victim discovered his scam. The thief allegedly stole cars, then sold them to unsuspecting buyers on Facebook Marketplace. The cars would have an AirTag planted on them, so the thief could go back after the sale and steal the car back to sell it again.

  The Minnesota buyer felt like something was wrong with the sale when they were given a freshly cut key and a car title that felt like it was printed on the wrong type of paper. The risk in using AirTags in a scam like this is anyone nearby with an iPhone will be notified there’s an AirTag in their vicinity. The buyer’s wife did have an iPhone and received one of these notices. The buyer notified police, who apprehended the alleged scammer.

  Car thieves will also use AirTags to mark cars they want to steal at a later time. For example, a car thief could spot a car in a parking lot. Then, after attaching an AirTag somewhere on the vehicle, the thief can wait until the car is parked somewhere it would be easier to steal.

  If you use an iPhone and receive an AirTag notification, you’ll also be given an option to have the AirTag make a noise, This way, you’ll hopefully be able to locate the AirTag, and stop it from tracking you or your vehicle.

  If you’re thinking you’re out of luck because you have an Android Phone, we have some good news for you. Android also has an ant-stalking feature that will detect AirTags and similar trackers. Navigate to the Settings menu, select “Safety and Emergency,” and then access the “Unknown Tracker Alerts” option. Here, you have the option to toggle automatic scanning on or off and manually initiate a scan to check for the presence of any unidentified AirTags that might have been accompanying you.

   
• 

  Geebo 8:00 am on September 8, 2023 Permalink | Reply
  Tags: moving money ( 4 ), pay yourself, pop-ups ( 26 ), Scams, tech support scam ( 50 )   

  Victim loses $600K to tech support scam 

  

  By Greg Collier

  If the jury duty scam is the most common scam we see, the tech support scam has to be a very close second. This is another scam where hardly a day goes by where we don’t see a news story where someone fell victim to the scam.

  Typically, the tech support scam occurs when someone is surfing the internet on their device when all of a sudden they receive a pop-up message telling them either their device or their bank account has been hacked. These messages also contain a phone number for the device owner to call for further assistance. If someone were to call the number, they’d be connected to scammers posing as any number of positions such as tech support or their bank’s fraud department, just to name a few.

  In numerous tech support scams, the scammers will convince their victims to download software that allows the scammers to have remote access to the victim’s device. This is done under the guise of wanting to help protect the victim, or make things easier for the victim. In reality, the scammers are now watching your every move on the device where the software was installed. From there, the scammers can either access your bank account themselves from the victim’s device, or they direct the victim to move their money in order to protect it. It’s not unheard of for victims to lose thousands of dollars in this scam.

  In that vein, a Pennsylvania man came forward to let the public know that he was taken for a staggering $600,000 in a tech support scam. In his case, the scammers convinced him to download remote access software. The scam went on for a while, with the scammers throwing a bunch of tech mumbo jumbo at the man to make it seem like the scammers were catching hackers. Instead, they were actually draining the man’s bank account until it was empty.

  If you receive any kind of message that claims your bank account has been compromised, do not call the phone number in the message. Instead, call your financial institution at the customer service number that’s on the back of your debit card, or the bank’s website. Also, please keep in mind, no one claiming to be from Microsoft, Apple, Google, Facebook, or any other tech giant has any idea what’s going on with your bank account. The only company that has access to your bank account is your bank. Even then, if someone contacts you claiming to be from your bank telling you that you need to move your money in order to protect it is lying. Never move your money or send it to yourself when a stranger tells you to. Neither of those transactions or something a real bank does.

   
• 

  Geebo 8:00 am on September 7, 2023 Permalink | Reply
  Tags: Scams, virtual kidnapping ( 45 ), voice cloning ( 24 ), voice spoofing ( 21 )   

  Kidnapping scam brings terror to family 

  

  By Greg Collier

  For the better part of this year, we’ve been warning our readers about scams that use AI mimicked voices of your loved ones. Typically, these spoofed voices are used in the grandparent scam and the virtual kidnapping scam. In these scams, it’s crucial for the scammers to make their victims believe that a member of the victim’s family is in immediate danger. To that end, scammers will steal a recording of someone’s voice, usually from social media.

  That voice sample is then run through an AI program that will allow the scammer to make the voice say anything they want it to, such as pleas for help. It’s gotten to the point where we believe the voice spoofing versions of these scams have become more common than their analog predecessors. For now, we think it’s pretty safe to assume if there’s a grandparent or virtual kidnapping scam, an AI voice clone is probably involved.

  For example, two parents in Ohio almost fell victim to the virtual kidnapping scam. They received a call that sounded like it was coming from their adult daughter. The parents described the call sounded like their daughter was in a panic. The voice said they were blindfolded and being held in a trunk. Then a male voice got on the call, claiming to be a kidnapper who would harm their daughter if they didn’t pay a ransom.

  To make matters worse, the supposed kidnapper knew the daughter’s name and the area where she worked. This made the claim of kidnapping seem more credible to the parents.

  At first, the parents did the right thing. They tried calling their daughter from another line, but were unable to get a hold of her. Then they called 911, but were still under the impression their daughter had been legitimately kidnapped.

  They went to get the ransom from their bank, but the branch had just closed. The caller instructed the parents to go to a local Walmart, probably to send a money transfer to the scammers. Thankfully, the police caught up with the parents to let them know their daughter was in no harm and the call was a scam.

  Not everyone is up on the latest scams, so just imagine the sense of fear and terror they must have experienced. However, all it takes is a little bit of knowledge to protect yourself from this scam. As we often cite, kidnappings for ransom are actually quite rare in the U.S. If you have a loved one who is active on social media, scammers can use the information shared to make it seem like they’ve been plotting a kidnapping for a while. Again, this is done to make their con seem more authentic.

  In the unfortunate event you receive a call like this, do exactly what these parents did. Contact the loved one who has been supposedly kidnapped on another line. The odds are you’ll find them not only safe, but unaware they’re being used in a scam. Then call the police for their assistance. Lastly, even if it sounds like the exact voice of your loved one, be skeptical, as these days, voices can be easily duplicated.

   
• 

  Geebo 8:00 am on September 6, 2023 Permalink | Reply
  Tags: jury duty scam ( 30 ), police impersonation scam ( 64 ), Scams, Zelle ( 66 )   

  Real police don’t give discounts 

  

  By Greg Collier

  Older generations used to have a fear drilled into them about missing jury duty. For the longest time, there was a type of reverence toward jury duty. No one wanted to do it, but no one wanted to go to jail either. Whether that fear was warranted remains to be seen, but that fear still seems to have a grip on people, and scammers are using it to their advantage.

  Yes, we’re discussing the jury duty scam again. As we’ve said before, it’s probably the most common scam going today. Just in researching for today’s post, we found around a dozen news stories where local police departments and sheriff’s offices were warning residents about the scam. It’s a form of a police impersonation scam. Scammers will pose as local police or the local courthouse while calling their victims to tell them they missed jury duty. Sometimes the scammers will say the victim has a warrant out for their arrest, or if the victim is a professional, they missed a court date where they were supposed to give expert witness testimony.

  The endgame is always the same, though, the victim can supposedly avoid jail time by paying a fine over the phone. Like most scams, this is done by gift cards, payment apps, or cryptocurrency, three forms of payment that neither courts nor police ever accept or ask for. Another thing the police or courts will never do is offer offenders a discount.

  That’s what happened to a Pennsylvania man recently when he got a call telling him he had missed federal jury duty. The call appeared to come from his local sheriff’s office, but any phone number can be spoofed.

  The scammers told the man if he didn’t pay $4900, patrol cars would show up at his home to take him to jail for 60 days. The man tried to withdraw the money from his bank, but the transaction was declined as the bank thought the man was being scammed. At this point, the scammers lowered the phony fine to $1000, which, unfortunately, the victim sent through the Zelle payment app.

  If you’ve ever had a traffic ticket or any kind of court cost, you may have been able to set up a payment arrangement if you don’t have all of the money at the time. But getting the fine talked down to a fifth of its original cost is virtually unheard of.

  If someone were to knowingly miss jury duty, they could be held in contempt of court, however, most jurisdictions do not send those people to jail. There will be a fine, but it’s unlikely it will be anywhere in the neighborhood of $5000. That notice will also be sent in the mail. When someone has an arrest warrant, police do not give them a courtesy call, they just show up unannounced. If you ever get one of these calls, ask the caller for their call back number, but call your local police department instead.

  If you keep these things in mind, you’ll be prepared if police impersonators ever call.

   
• 

  Geebo 8:00 am on September 5, 2023 Permalink | Reply
  Tags: gift cards ( 101 ), romance scam ( 70 ), Scams   

  Both rich and poor can fall for romance scams 

  

  By Greg Collier

  Within the past year or so, when it comes to romance scams, all the talk has been around the pig butchering scam. This is when romance scammers get their victims to invest in a phony cryptocurrency exchange. Victims of the pig butchering scam tend to be on the more wealthy side, with victims losing tens, if not hundreds, of thousands of dollars each. This may lull people who don’t make as much money into a false sense of security. But believe us when we say scammers don’t care how much or little you make. They’ll try to take it anyway.

  For example, a man from Tulsa, Oklahoma, recently came forward to his local media about being the victim of a romance scam. The scammers claimed to be a woman in the military stationed in Iraq, and they were lonely and just needed someone to talk to. It quickly became a romantic relationship.

  As with every romance scam, the requests for money eventually happened. The scammer claimed their bank account was frozen, and they needed money to pay for internet in Iraq, so they could keep communicating. Before the man knew it, he was sending gift cards of $100 a month to the scammer. This relationship went on for about 18-months.

  We’re pretty sure the victims of pig butchering scams wish they only lost $100 a month to their scams. However, the victim in today’s story is a man who is disabled and living on a fixed income. To him, this could be the equivalent of the other victims losing six figures to the scammers. He was also probably not the scammer’s only victim. There could be dozens of other victims the scammers are taking $100 a month from. This could add up to thousands of dollars a month very quickly. No matter how much or how little someone makes, scammers will look to take a big chunk of it, if not all of it.

  If you have doubts about someone’s identity, do some research. You can use reverse image searches to check if their profile picture appears elsewhere on the internet. Scammers often use stolen photos. Never send money or gifts to someone you’ve only met online, regardless of their sob story or urgent requests. Scammers often ask for money for emergencies, travel expenses, or to help with various crises. Discuss your online relationships with trusted friends and family members. They can provide valuable perspective and help you stay grounded in reality.

  Remember that scammers are skilled at manipulating emotions and creating elaborate stories. They can be very convincing, so it’s essential to stay vigilant and prioritize your safety when forming online relationships. If you’re unsure about someone’s intentions, seek advice from trusted sources before taking any further steps.