SCAMS BULLETIN Host Jay is an inactive attorney in San Mateo County, California.

January 6, 2021

CAR WRAP SCAM   

What is a car wrap scam?

The gist of the scam is this: Scammers send emails and posts to social media and job boards with messages like “GET PAID TO DRIVE.” They offer to pay you up to $700 a week if you’ll drive around with your car (or truck or bike) wrapped to advertise a well-known product. Some scammers are saying they’re from Marlboro or Purell (but they’re not).

If you message them back, they’ll send you a check to deposit into your bank account. Then they’ll say to use some of that money to pay their “decal agent” to put the ads on your car. They’ll tell you to pay by money order, Walmart money services, or by making a cash deposit directly into the decal agent’s bank account — all are ways that make it hard to cancel or recover your money.

What’s really going on? The “decal agent” is really a scammer. The check you received was fake — which means any money you sent is coming out of your own pocket. If you deposit a fake $1,500 check in your bank account and sent $500 to the “decal agent,” you’re out $500 of your own money. (And you don’t get to keep that $1,000.)

Spotted a scam like this? FTC wants to hear about it. Let us know at ReportFraud.ftc.gov.

ATTRIBUTION: US FTC.GOV

SCAMS BULLETIN Host Jay White is an inactive attorney in San Mateo County, California.

January 4, 2021

CORONAVIRUS VACCINE SCAMS 

Courtesy AARP

Be skeptical of vaccine offers

With the coronavirus vaccine comes a crime wave, a top security official for Pfizer warns.

The only way to access Pfizer’s vaccine is through a government-authorized vaccination center in your state says Lev J. Kubiak, vice president and chief security officer for New York City-based Pfizer.

Unscrupulous criminals are calling and texting consumers to steal their money by falsely promising they can have an early vaccine.

Some crooks on the WhatsApp platform have promoted “vaccine tourism” packages for travel to the U.S., touting airfare, hotel rooms and meals along with a coronavirus vaccine, Kubiak says. Crooks are telling people they could avoid long lines and get a Pfizer vaccine for $79.99.

Caution

If “someone is offering you a place in line, or access to a limited quantity that you couldn’t otherwise get, the first question really should be, ‘Who is this person and why are they are they making this available to me?’” Kubiak tells AARP.

It’s not just a quick buck the crooks are chasing. Dangling the prospect of an early vaccine, some try to wheedle Social Security numbers and bank account or credit card numbers out of consumers.

Care facility targeted

Criminals are targeting not only individuals but also health care facilities. A phony “pharmaceutical representative” offered to sell vaccine to a residential care facility to inoculate its patients and staff. Fortunately, a staff supervisor rejected the offer.

A vaccine scam can be reported to the US Federal Commission: www.ftc.gov/complaint.

ATTRIBUTION: AARP

SCAMS BULETIN Host Jay White is an inactive attorney in San Mateo County, California.

January 1, 2021

FAKE MEMORY STORAGE CARDS, USBs

The cost of computer and mobile storage devices is falling rapidly — but not so fast that you can pick up a big one for a really low price. That part of the market is the domain of scammers.

Fake memory storage cards and USB drives are still being sold on reputable websites, despite efforts to clamp down on the fraudsters.

Technology has enabled manufacturers to cram big numbers into tiny devices. These include secure digital (SD) cards, micro-SDs and USB thumb drives.

But most users know they nearly always need more bytes than they originally planned. That is where the scammers come in. Basically, they’re producing cards and USB drives that they claim to have much more storage capacity than they have. Then they offer knock-down prices on sites like eBay and Amazon.

For instance, a supposed 1tb micro-SD card was recently being advertised by a third-party seller on Amazon for $10.99. A more realistic cost for the real thing is around $200. The knock-off, which seems to come from China, has only 32gb of storage space, but it’s doctored to look like 1tb when it’s first inserted into a computer, phone or tablet.

(Quote from an Amazon page) “Do not buy this item! This is a Chinese fake! The card is claimed to be 1 TB (formally, it shows such a volume on a smartphone with a computer), but in fact, when you transfer files to it, it loads a little more than 20 GB, and then empty folders are simply copied. In fact, its capacity is no more than 32 GB.”  (end quote)

Only when the user starts trying to store stuff is the fraud revealed. Once the card is being used, it either fails or, in a worst-case scenario, it starts corrupting, deleting or over-writing existing data.

How do crooks get away with this fraud?

The trouble is that sites like Amazon and eBay don’t have the capacity to check third party sellers’ claims. So, it’s a case of “let the buyer beware.”

The best compensation a victim can hope for, even if they lose all their data, is to receive a refund.

Here’s how to battle back against these crooks:

*First, apply the golden rule of anti-scamming: If the price looks too good to be true, it’s almost certainly a fake.

*Second, buy storage cards and USBs from reputable makers like SanDisk, Samsung, Lexar, and so on. But beware! While most of the fakes are unbranded — that is, they just have a label that says something like “Micro SD Card” with no other name — some of them are more cunning, they use tech-sounding names you never heard of. Or, in a couple of nasty examples, they fraudulently copy genuine labels.

*Check out the reviews — not the five-star type but those scoring only one or two stars on Amazon, or a low rate of positive feedback on eBay. Also, on eBay, steer clear of those low-price sellers who have only a handful of feedbacks. If the products are fakes, the seller will have arranged for the first few “positive” scores themselves.

*There’s another important reason why you need to give these fakes a wide berth: the possibility that they carry malicious code that will be transferred to your computer or mobile as soon as you plug it in. In this case, your personal data could be stolen, or your computer locked up until you pay a ransom. (For the same reason, you should also be cautious about plugging someone else’s storage device into your PC or mobile.)

*There are some apps advertised as able to check storage capacity and identify fakes. But if you need to use one of these, then, unfortunately, you’ve likely already been conned.

Fraud experiences can be reported to www.ftc.gov/complaints.

ATTRIBUTION: scambusters.org

SCAMS BULLTIN Host Jay White is an inactive attorney in San Mateo County, California.

December 28, 2020

INVESTMENT COACHING SCAMS 

Courtesy US Federal Trade Commission

Investment scams lure you in with promises of teaching you how to make a lot of money quickly, easily, and with low risk — usually by investing in the financial or real estate markets. If your respond to the promises, scammers later will charge you a hefty fee for their “proven” investment tricks.

Scammers get your attention with infomercials or online ads, encouraging you to attend free events or to watch free introductory videos. But later you find out that you must pay a hefty fee to get the coaching they promise. They’ll show you phony success stories of people who have used their coaching program. But you have no way of confirming that their stories are true.

In an investment coaching scam, the scammer will tell you that their “patented,” “tested,” or “proven” strategy (or something similar) will teach you how to make money investing in stocks, bonds, foreign currency, or tax liens. They promise that their investment approach will set you up for life — and even let you stop working. They sometimes starting by offering a free seminar and lunch in which you will be given a misleading sales pitch.

What to know

The truth is that the promoters of investment coaching scams exaggerate the money you can make with their system. They also fail to give you the step-by-step guide they as promised. They lie about other people’s success. It’s all part of a marketing scheme to get you to pay many dollars for what turns out to be empty promises.

What to watch for

*The promotional materials and sales pitches used for real estate investment seminars often make over-the-top claims.

*Scammers say you can earn big money fast, regardless of your experience or training. But that’s not true.

*Scammers promise their deal is a “sure thing” that will give you security for years to come. It won’t.

*Scammers say you’ll rake in money by working part-time or at home. But most people don’t.

*Scammers promise you’ll be coached to success each step of the way. But there’s often little coaching, and no success.

*Scammers claim the program worked for other participants — including the organizers. And it might have, for a few people, but most people never make their investment back.

Don’t be convinced by ads with success stories of people saying how much money they made with little time, effort, and risk. Or ads that feature celebrities praising the program. Those kinds of claims aren’t reliable and don’t mean the program works. Investment scams often use fake testimonials and pay people to endorse their programs.

Where to Report Investment Scams:

If you suspect an investment scam, report it to the Federal Trade Commission at ReportFraud.ftc.gov.

Report possible securities fraud to the Securities and Exchange Commission online. For tips on investing wisely and avoiding fraud, visit the SEC’s website for individual investors, Investor.gov.

If your personal information has been misused in an investment scam, visit IdentityTheft.gov for steps you can take to deal with problems that may arise.

ATTRIBUTION: http://www.ftc.gov

SCAMS BULLETIN Host Jay White is an inactive attorney in San Mateo County, California.

December 25, 2020

CONSUMER STIMULUS PAYMENT SCAMS

Courtesy US Federal Trade Commission

Here’s what you need to know about the stimulus payments and how to avoid scams related to these payments.

Who will get money?

Adult U.S. residents that meet established income limits are eligible to receive money from the government. This includes:

Taxpayers – people who filed a federal tax return for 2018 or 2019.

Retirees – people who get Social Security, Railroad, or other retirement benefits.

Beneficiaries – people who get public benefits like SSDI, disability, or veterans’ benefits.

Non-filers – people who do not have to file a federal tax return, including people who made no income or made less than $12,200 (or $24,400 for married couples).

If you get Social Security or Railroad Retirement benefits, have a qualifying child, and didn’t file a return in 2018 or 2019, you have to take action by noon ET on Wednesday, April 22 to add the $500 per eligible child to your payment. See details from the IRS.

What to do

Most people don’t have to do anything to get their money because the IRS will use the same payment method – direct deposit, Direct Express debit card, or paper check – used to send you your tax refund, Social Security, retirement, or other government benefits money. If the IRS doesn’t have your direct deposit information, you can go to the “Get My Payment” feature at irs.gov/coronavirus and let them know where to send your direct deposit.

If you don’t usually file a tax return, go to irs.gov/coronavirus to access the “Non-filer” portal and to figure out what, if anything, you have to do to claim your money.

To check on the status of your payment, you can now use the “Get My Payment” feature at irs.gov/coronavirus.

Avoiding stimulus payment scams:

Scammers are using these stimulus payments to try to rip people off. They might try to get you to pay a fee to get your stimulus payment. Or they might try to convince you to give them your Social Security number, bank account, or government benefits debit card account number.

4 tips for avoiding a Coronavirus stimulus payment scam:

*Only use irs.gov/coronavirus to submit information to the IRS – and never in response to a call, text, or email.

*The IRS won’t contact you by phone, email, text message, or social media with information about your stimulus payment, or to ask you for your Social Security number, bank account, or government benefits debit card account number. Anyone who does is a scammer phishing for your information.

*You don’t have to pay to get your stimulus money.

*The IRS won’t tell you to deposit your stimulus check then send them money back because they paid you more than they owed you. If that happens it is a fake check scam.

Report scams to the Federal Trade Commission at ftc.gov/complaint.

To keep up with the latest scams, you can sign up for the FTC’s consumer alerts.

ATTRIBUTION:  http://www.ftc.gov

SCAMS BULLETIN Host Jay White is an inactive attorney in San Mateo Count, California.

December 17, 2020

SECRET SISTER GIVING SCAM 

Giving and receiving gifts during the holidays is a popular practice.  Sharing presents with friends and family is one of the highlights of the season.

Unfortunately, scammers are once again looking to take advantage of our love of gifting—and receiving—with the “secret sister” scam. 

Pyramid Scheme

The “secret sister” scam is a type of pyramid scheme. Pyramid schemes are illegal because they are based on efforts to recruit new people into the scheme, not actually sell or exchange anything of value. Eventually, all pyramid schemes collapse when they run out of new recruits, leaving the vast majority of those who joined with nothing in return. These schemes may also violate state anti-gambling laws since they can resemble illegal chain letters. 

The scheme usually begins with a festive Facebook post or a text message, or email encouraging friends to join in on the giving by sending “just one” gift (often a book, bottle of wine, or a gift card) to a “secret sister.” The friendly message guarantees that participants will receive at least one (and maybe dozens) of gifts in return. These messages may also have phrases like “happy mail,” “for the good of the sisterhood,” “holiday gift exchange,” or similar wording. 

To keep the “secret sister” chain going, the message invites the recipient to share the invitation with friends and family by entering their personal information (e.g., name, mailing address, email address) and the contact information of the people you hope to recruit into a list online. People who send you these messages may not even know it’s a scam.

In truth, the only people receiving a gift in this scheme are scammers. If you personal information, even information as seemingly innocuous as name and mailing address, you could increase your risk of identity fraud. And if you mail a gift to someone you don’t know, chances are that it will just go to a scammer looking to enrich themselves, not someone you know.

While it may seem like you’re just doing something friendly with people you know and trust, by circulating these messages you may be helping to perpetuate an illegal scheme. If you or someone you know receives a “secret sister” message, here are some tips to stay safe and avoid being a victim:

*Ignore the message. The “secret sister” scam works because people engage with it and share it with friends and family. Don’t be another link in the chain. If someone you know sent you the invitation, let them know that it’s a scam.

*Flag the message. Certain social media platforms allow users to report suspicious messages. On Facebook and Instagram, for example, there is usually a button with three dots at the top of messages that allow for a post to be reported as suspicious.

*Don’t share personal information. Providing personal information to someone you do not know can increase the risk of identity fraud, even if it’s something as seemingly trivial as a name and email address.

*If you suspect that you or someone you know has become a victim of the “secret sister” scam or any other fraud, report it at once. You can file a complaint at Fraud.org via their online complaint form. They will share your complaint with their network of law enforcement and consumer protection agency partners who can investigate and help put fraudsters behind bars.

ATTRIBUTON: fraud.org

SCAMS BULLETIN Host Jay White is an inactive attorney in San Mateo County, California.

December 11, 2020

5G PHONE SCAM 

5G is the new cellular phone technology that is currently being rolled out across the US. The aim of 5G is to make cellular communications, clearer, faster, and more reliable.

But 5G Phone confusion opens scam floodgates. Scammers use tricks when they spot the opportunity that flows from rumors and differences of opinion. Fake news has been mixed into the debate, So, it is no surprise that some people are genuinely scared.

The controversy has increased because some people believe the 5G towers, which handle the advanced communications, or even the phones that use them, emit dangerous levels of radiation. Scammers prey on concerned people whose fear and uncertainty make them vulnerable.

A recent 5G scam is a spurious claim that a new available device can eliminate or shield the electromagnetic waves emitted from cellular towers. There are reports crooks have been selling them for up to $400 apiece.

The most common of these devices plug into USB ports on computers, laptops, and all manner of mobile devices. The sellers claim it can neutralize electromagnetic emissions.

The scammers use fancy names and jargon words like “quantum” and “hologram” to try to convince victims of the device’s tech pedigree. In fact, says tech reporting site The Verge, it is just a cheapo, regular USB memory stick.

The Verge advises: “Please don’t waste your money on this piece of junk and remember: Radio waves can only spread computer viruses, not human ones.”

ATTRIBUTION: scambusters.org

SCAMS BULLETIN Host Jay White is an inactive attorney in San Mateo County, California.

December 7, 2020

FAKE CALLS FROM APPLE AND AMAZON

Courtesy US Federal Trade Commission

December 7, 2020

Scammers are calling people and using the names of two well-known companies, Apple and Amazon, to rip people off.

Here is what you need to know about these calls.

In one version of the scam, you receive a call and a recorded message that says it is Amazon. The message says there’s something wrong with your account. It could be an alleged suspicious purchase, a lost package, or an order they can’t fulfill.

In another twist on the scam, you receive a recorded message that says there’s been suspicious activity in your Apple iCloud account. They may falsely say your account has been breached.

In both scenarios, the scammers say you can conveniently press 1 to speak with someone. Or they give you a phone number to call. Do not do either.

It’s a scam. They’re trying to steal your personal information, like your account password or your credit card number.

If you receive an unexpected call or message about a problem with any of your accounts, hang up.

Do not press 1 to speak with customer support

Do not call a phone number they gave you

Do not give out your personal information

If you think there may be a problem with one of your accounts, contact the company using a phone number or website you know is real.

If you receive a call you think is a scam, report it at ReportFraud.ftc.gov.

ATTRIBUTION: ftc.gov

SCAMS BULLETIN Host Jay White is an inactive attorney in San Mateo County, California.

November 28, 2020

DODGING FRAUD DURING PANDEMIC

The US Justice Department has advice for dodging fraud during the pandemic.

It advises:

1. Independently verify the identity of any company, charity or individual that contacts you regarding COVID-19.

2. Check the websites and email addresses offering information, products or services related to COVID-19. Be aware that scammers often employ addresses that differ only slightly from those belonging to the entities they are impersonating. For example, they might use “cdc.com” or “cdc.org” instead of “cdc.gov,” which is the legitimate website of the Centers for Disease Control and Prevention (CDC).

3. Be wary of unsolicited emails offering information, supplies or treatment for COVID-19 or requesting your personal information for medical purposes. Legitimate health authorities will not contact the public this way.

4. Do not click on links or open email attachments from unknown or unverified sources. Doing so could download a virus onto your computer or device.

5. Make sure the anti-malware and antivirus software on your computer is operating and up to date.

6. Ignore offers from suspicious sources for a COVID-19 vaccine, cure or treatment. Remember, if a vaccine becomes available, you won’t hear about it for the first time through an email, online ad or unsolicited sales pitch.

7. Check online reviews of any company offering COVID-19 products or supplies. Avoid companies whose customers have complained about not receiving items.

8. Research any charities or crowdfunding sites soliciting donations tied to COVID-19 before making a donation. Remember, an organization may not be legitimate even if it uses words like “CDC” or “government” in its name, or if it has reputable-looking seals or logos on its materials. For information online on donating wisely, visit the Federal Trade Commission (FTC) website.

9. Be wary of any business, charity or individual requesting payments or donations in cash or by wire transfer, gift card or using the mail. Don’t send money using these payment methods or channels.

10. Be cautious of “investment opportunities” related to COVID-19, especially those based on claims that a small company’s products or services can help stop the virus. If you decide to invest, carefully research the investment beforehand.

More information about avoiding investment fraud is provided by the U.S. Securities and Exchange Commission www.SEC.gov and by AARP Fraud Helpline (877) 908-3360.

ATTRIBUTION: AARP

SCAMS BULLETIN Host Jay White is an inactive attorney in San Mateo County, California.

November 23, 2020

DEEP FAKE VIDEO FRAUD

Fraudsters are combining a pair of already wicked scams — deep fake videos and ransomware — into a single threat that will strike fear into the hearts and minds of victims.

Deep fake videos are fabricated with software that makes an individual seem to be saying and doing things they have never done. Examples have been seen in recent derogatory election campaign videos.

Mostly, it is used to lock up the data in a PC or an entire network until the user pays a ransom. But now a leading Internet anti-malware firm is warning it could be used to blackmail with the threat of posting a deep fake video online, showing a victim in some compromising situation.

The fear has increased because new Artificial Intelligence (AI) software makes it easy to generate deep fake videos without any expertise. It has been defined as a type of malicious software that automatically generates a fake video, which shows the victim performing an incriminatory or intimate action and threatens to distribute it unless a ransom is paid.

Victims may falsely be told if they pay up the video will be permanently deleted. But blackmailers nearly always hang on to their “evidence” so they can come back and ask for more money.

Malwarebytes notes:

Internet security firm Malwarebytes has latched onto the threat, warning, “If something like this can be automated, you can bet that more bad actors with little to no background in programming will use the technology. The potential for this campaign to destroy a target’s reputation is exceedingly high. It does not matter whether a video of someone is real or doctored to look real. “

Here is how it works:

 First, the scammer tricks the victim into installing malware on their PC. Then they “scrape” (steal) video and voice samples of the victim.

Alternatively, they scrape their raw materials that are publicly available online — for example, posted on social media. The crook uses the new software to superimpose elements from the scrapes onto a created phony video so it looks like the victim who is committing whatever act is depicted.

The image does not always have to be a video. It can be a still photo showing the victim in an embarrassing situation.

If the scammer has access to the victim’s PC, the horror unfolds with a typical ransomware countdown screen giving the victim a specific time in which to pay the ransom–or have the video posted online.

It is also possible the blackmail demand could be sent by email, along with a link to the deep fake video, again with a specific ransom time demand. In this case, clicking the link not only accesses the video but also downloads the ransomware while the victim is watching.

In either case, the crook usually demands payment by untraceable cybercurrency, most probably Bitcoin. Or they may ask for the ransom payment to be wired–again untraceably.

The best way to avoid this scam is to do your best to ensure the crooks cannot get their hands on your images. That means using privacy settings on your social media accounts that allow only friends to see your photos.

Plus, do not click on email and text links in messages that suggest someone has blackmail material about you, even if the message seems to come from a person you know.

You can do an audit of your current photos and videos online and who has access to them, suggests blogger Jovi Umawing. Weed out public-facing photos as much as you can or set them to be viewed by certain groups in your pool of contacts. If they are not photos you posted yourself, simply un-tag yourself, or ask your contact to take them down.

ATTRIBUTION: scambusters.org