A Free Public Service
SCAMS BULLETIN Host Jay White is an inactive attorney in San Mateo County, California.
June 8, 2023
PHISHING SCAM
Attribution: scambusters.org
Phishing is the fraudulent practice of sending email or other messages purporting to be from reputable companies to induce individuals to reveal personal information such as passwords and credit card numbers.
Emails are the most popular way for crooks to try to trick you into revealing confidential information, like sign-on details and account numbers, and sometimes to get access to your computer to upload malware. Scammers also use both SMS text messages and automated phone calls.
Scammers send out billions of random messages every day designed to steal information from you, just like an angler casts a net or line far and wide. They know that, statistically, sooner or later they’ll get a “bite” and land their catch.
Most commonly, phishing emails use links or attachments that are designed to either take you to a bogus sign-on page or to install malware onto your PC.
Here are some of the tactics the scammers use:
*They make addresses seem legitimate by disguising them. *They may use a long string of letters that includes the name of the legitimate company. *They may use address shorteners, which hide the real address. *They may substitute a letter with a similar character or add a letter or hyphen that you won’t spot at first glance.
*They use the same design, colors, and logos as the companies they’re impersonating.
*They try to rush you into clicking links or making a phone call by striking a note of urgency, such as a looming deadline, product shortages, or use of dramatic words like “WARNING.”
*They take advantage of current news stories, especially about disasters, to pretend they’re trying to help those affected.
*They harvest information about you from social media sites, so they make it seem like they know you, to lower your suspicions.
To Protect Yourself:
*Common sense is your best ally to beat phishing email scammers, but there are other things you can do to stay safe.
*Check the accuracy of the email address, looking for some of the red flags listed above. *Hovering your mouse over the sender’s address, without clicking, should reveal it in full. *Consider using a free address checker such as https://email-checker.net
*Be wary about opening any email from an unknown sender. Certainly, don’t click on links from unknown senders.
*Don’t be fooled by a personal text that mentions something about you or seems to come from someone you know. Scammers are now using artificial intelligence to build this personalized wording into mass email attacks.
*Check for spelling and grammar mistakes.
* Although rarer than it used to be, poorly worded text on a page is still a potential scam warning sign. A quick and easy way to do this is to paste the text into a checker like Language Tool (https://languagetool.org/)
*If an official-looking email ends with a common domain name address like “gmail.com” or “outlook.com,” it’s probably fake. Reputable organizations have their own domain names like “amazon.com.”
*Don’t panic if the tone of the message urges you to act quickly. Stay calm and check things out using the tips in this issue.
*Don’t respond if an email openly asks you for confidential information, often by saying they need to confirm your details.
*Be especially alert for emails that seem to come from the most commonly impersonated companies like courier firms, social media sites, and tech companies.
*If the message requests money or other types of donations for a charitable cause, don’t give until you’ve checked them out. For guidance on this, see our earlier issue at https://scambusters.org/charity.html
Don’t forget that using and keeping updated Internet security software is one of the best ways of filtering out spam and scam emails. #