AskCyberSecurity.com

Cyber Security News - Data Privacy Advocates

xe Money Transfer
AskCyber Home » News » scam

scam

First Economic Impact Payment Scam Appears

by Leave a Comment

Economic Impact Payment aka Stimulus Payment Scam Impersonates Bank to Steal Banking Credentials and Money

The first Economic Impact Payment scam is making the rounds online. In this scam, hackers impersonate a bank and try to steal account login credentials from victims in order to steal their money. The hackers use email and a spoof website to trick the victim into giving them baking credentials to verify their identity and release the funds. Handing the scammers your banking credentials will only result in losing any money that is in the bank account. This impersonation scam was spotted by cyber security company Abnormal Security.

Although this is the first reported Economic Impact Payment Scam, not doubt it is not the last. The Stimulus payment checks have not even been issued yet. Hacker are just warming up.

COVID 19 Attack_13 Email
Image Credit: Abnormal Security – COVID 19 Attack_13 Email

In this impersonation scam, the hackers are targeting Office 365 users with an email that contains links to a malicious website. The phishing email informs the reader their stimulus payment has been credited but that they must first “verify” their account details because the payment has been put on hold. The email impersonates a major financial institution and contains cloaked links to a spoof website. If the reader clicks on the login link, they are redirected to a malicious website that steals the login information. If the victim enters their bank account login information on the website it is sent to the hackers.

The Economic Stimulus Payments are part of the Coronavirus Aid, Relief, and Economic Security (CARES) Act. The new law supplies $376 billion of much needed relief for individuals and businesses.

Email subject line: Covid 19 Stimulus Payment
Email Body: Prompts reader to verify banking account credentials (see image)

WEBROOT

Economic Stimulus Payments Scams – What You Need to Know

If the target of one of these phishing email follows the link to the hacker’s website and then enters banking credentials , they will compromise their bank account and most likely lose all money it in. Although this email is brief and well written, phishing emails often have misspellings and grammar errors in them.

  • The official name of these $1200 payments to US citizens is Economic Stimulus Payment. Any supposed “official” communications that use names like “Stimulus Checks,” “Stimulus Payment,” “Coronavirus stimulus payment,” or other variations to describe the economic impact payment are not official government communications.
  • The US Treasury will attempt to send your Economic Stimulus Payments via direct deposit. You do NOT need to verify any information with anyone or any bank to receive your money
  • As of today, NO Economic Stimulus Payments have been sent to anyone – either by check or by direct deposit
  • Be highly suspicious of any email, website, telephone call, text message of other that asks you to verify banking credentials or other personal information
  • NEVER click on links in emails from people or businesses you don’t know
  • Do not open or download unsolicited email attachments
  • If the email is from a business you do know or have a relationship with, go to their website and login. Read communications directly from your bank’s website
Abnormal Security - COVID 19 Attack_13 Payload
Image Credit: Abnormal Security – COVID 19 Attack_13 Payload

US Treasury Warns Citizens of Inevitable CARES Scams

Just last week, the U.S. Department of the Treasury and the Internal Revenue Service (IRS) warned citizens that scams attempting to steal Economic Impact Payments were inevitable. Although, none has been reported just a few days, ago, there are several variations making the rounds online. The Coronavirus pandemic has brought out hackers and scammers like gangbusters. Numerous phishing email scams are circulating with malicious email attachments attempting to infect computers with malware. INTERPOL also reports that hackers are increasingly targeting hospitals and large healthcare organization with ransomware attacks.

CARES Act – PPP Loans

Another part of the CARES Act is the $349B Paycheck Protection Program (PPP) Loan. With this part of the stimulus package businesses can take a low interest loan to cover payroll, rent and other business expenses. When used for certain things like payroll, the loan may be converted to a grant. In a National Small Business Town Hall hosted by Inc. Magazine and the U.S. Chamber of Commerce on Friday 03 April, the panelists cautioned that scammers are likely to target small businesses by offering “assistance” getting moeny faster or by filing paperwork on behalf of the owner. Both of which may result in losing more money.

Michelle - Profile Photo

Michelle writes about cyber security, data privacy focusing on social media privacy as well as how to protect your IoT devices. She has worked in internet technology for over 20 years and owns METRONY, LLC. Michelle earned a B.S. in Engineering from Rensselaer Polytechnic Institute. Michelle published a guide to Cyber Security for Business Travelers

www.metrony.com/

IRS Scam – Emotet Malware W-9 Tax Scam

by

IRS Scam – Beware Emotet Malware W-9 Scam Attempts to Steal Credentials and File Fraudulent Tax Returns

A new IRS scam campaign was discovered by cyber security company Cofense. This one involves an email phishing campaign that attempts to trick the recipient into downloading a harmful email attachment that is disguised as an IRS form W-9 or clicking on a link that launches a cyber attack. If the reader clicks on the malicious attached file or the link, Emotet malware is downloaded to their computer or phone unless it is blocked by an antivirus app.

In January the US Department of Homeland Security warned the public that Emotet malware attacks are increasing. Emotet is a banking Trojan. This malware spreads primarily via malicious email attachments but also from spoofed websites. Emotet quickly infects all other computers on the same internet connection. The latest version of Emotet download more malware that steal bank account passwords on devices and passwords saved in web browsers. Emotet malware has been successfully used to attack state, local, tribal, and territorial governments as well as businesses in the private and public sectors. Using a password vault can help protect against malware that attempts to steal usernames and passwords.

Each year, the Internal Revenue Service (IRS) publishes the Dirty Dozen list which represents the worst of the worst tax scams for the year.


Read: DHS Warns of Increased Emotet Malware Attacks

The tax scam comes in two variations – one with an email attachment and another with a malicious link. The contains simple email content stating, “Please see attached. That’s not to say it won’t evolve into other variations with more convincing wording. Hackers and spammers use information gleaned from social media or corporate websites to make the content of a scam email seem familiar to the recipient making them more likely to follow the instructions (download the attachment or click on the link) in the email.

Emotet IRS Scam Using W9 attachment
Emotet IRS Scam Using W9 attachment (Cofense)
Emotet IRS Scam Malicious Link
Emotet IRS Scam Malicious Link (Cofense)

If you need to give someone a W-9 tax form, you can always download an official copy form the IRS website – click here. You do not need to use the one sent to you by the company.

Emotet malware is a cyber threat that has been on the rise since it first appeared in 2016. It is the work of an organized hacking group called TA542 or Mummy Spider. The fake W-9 form is sent via spam email as an attachment. If the reader clicks on it and the device is not protected by an antivirus app, malware may be downloaded to the email recipient’s device.

Emotet malware is also circulating in two other email scam campaigns. Both email scams are designed to look like official information from the US Center for Disease Control. Both spam emails play upon people’s fears surrounding the Coronavirus that is spreading globally. The emails contain some supposedly helpful information about the virus and preparedness. Like the W-9 tax scam, the spam emails also contain malicious attachments with Emotet malware and links to spoof websites that launch malware downloaders on unprotected computers and phones. Some variations attempt to phish banking credentials. All variations attempt to steal money from the victim.

In case you have never seen one, the IRS Form W-9 is a tax form taxpayers must complete and sign when working for a company that is not their employer. The W-9 form is how companies collect information from including name, address, and taxpayer identification information of a taxpayer.

Without a signed W-9, a contractor cannot get paid for their work. This is why a contractor or business would want to get the W-9 form downloaded and returned right away. But a completed IRS W-9 form contains sensitive information a hacker can use to steal your identity and file a fraudulent return.

Related Tax Scam Reads:

What is Malware and How Does it Work?

The term malware is a portmanteau of malicious software. Malware is any unwanted app, computer code, or program on a laptop, computer, server, phone, router or other internet connected device. Computer Viruses, Trojans, spyware, worms, adware, and ransomware are all different types of malware.

Malware infects your device through some initial download. A person may click on a link in an email which takes them to a malicious website that begins the malware download. Malware can be sent in an email attachment. Microsoft Word documents, Excel Files, Adobe .pdf, compressed .zip files can all be used to disguise a malware downloader. That’s why you should never click on or open an email attachment from someone you don’t know. A good antivirus app will detect, block, or quarantine suspicious emails and files to protect your device.

Once a device is successfully infected, malware tries to infect as many other devices that are connected to the same WiFi or internet connections as quickly as possible.

How Does Emotet Malware Infect Your Device?

This week is Tax Identity Theft Awareness. The Federal Trade Commission (FTC) said so. Since income tax filing season is underway that means that tax scams are gearing up for their prime season. Here are some tips from the FTC to better protect your money and your identity during from a tax scam:

  1. Keep your Social Security Number safe. Don’t give it to anyone without a good reason and privacy measures in place
  2. File your tax return as early as possible

    3. Hackers file fraudulent tax returns using stolen credentials. The tax scam won’t work if you have already filed this year. Likewise, if the hacker has already filed a tax return using your Social Security number, your legitimate return will be rejected as a duplicate

  3. Use a secure internet connection if you file electronically
  4. Use a Virtual Private Network (VPN) App to Protect Your Personal Tax Information
  5. If you cannot use a secure internet connection, then file by mail If your identity has been stolen, you will have to file by mail.
  6. Only use reputable, licensed tax preparers
  7. Check your credit report at least once a year for free. Read this post to find out how US Service personnel can get unlimited free credit reports while they are on active duty

    8. What is Malware Protection?

    Malware protection involves safe cyber security practices that are free and easy to implement.

    • Don’t open email attachments if you don’t know the sender
    • Be sure you truly do know the sender. Read our guide on how to detect a phishing email
    • Even if you do know then person sending the email, if you were not expecting an email attachment to be sent to you, CALL them and make sure the email and file is legitimate. They may have been hacked. READ this post on how to tell if your phone is hacked
    • An antivirus app can help detect phishing emails
    • Malware removal apps can block malware downloads. If something gets past the antivirus app then malware removal app can help clean up your laptop or phone and regain access
    • Using a password vault to against malware that attempts to steal usernames and passwords
    Michelle - Profile Photo

    Michelle writes about cyber security, data privacy focusing on social media privacy as well as how to protect your IoT devices. She has worked in internet technology for over 20 years and owns METRONY, LLC. Michelle earned a B.S. in Engineering from Rensselaer Polytechnic Institute. Michelle published a guide to Cyber Security for Business Travelers

    www.metrony.com/

Coronavirus Email Scam Spreads Malware Steals Banking Credentials

by

Coronavirus Email Scam – Beware of Phishing emails, Malware, Fake Alerts, Spoof Websites, and Cyberthreats

A new Coronavirus Email Scam and a malware campaign both attempt to take advantage of people’s fears about the new Coronavirus. as the Coronavirus number of infected exceeds 20,000, the phishing email scam exploits people’s concern about the spread of the novel coronavirus (2019-nCoV) reported by the World Health Organization (WHO) to have originated in Wuhan, China. There is also a Coronavirus themed malware campaign distributed via spam email as well as the appearance of virus themed spoof websites. The goal of these cyber attacks is to steal banking credentials and your money.

The US Department of Homeland Security recently warned the public of an increase in Emotet malware attacks on businesses. The warning involves Emotet malware which is a top destructive malware infecting state, local, tribal, and territorial governments. The most destructive attacks have cost close to one-million USD to remediate.

The email scam targets people in Australia, Austria, Barbados, Germany, Hong Kong, Japan, Malaysia, Singapore, Spain, Switzerland, the United Arab Emirates, the United Kingdom and the United States. The malware primarily targets people in Japan. It is expected that the number of cyber threats, emails scams, and malware attacks will increase over time as the Coronavirus spreads further.

It’s common for hackers and scammers to use global news events, holidays, natural disasters, and health crisis are all commonly used in phishing email attacks and malware campaigns. Unfortunately, opportunistic hackers also spoof donation websites in hopes of scamming money from donors who are trying to help people in need. Quality antivirus software can screen from malicious files and links. It can also be used to remove malware. Using a virtual private network (VPN) can prevent your credentials from being stolen by hackers.

READ: Phishing Emails Rank as Top Scam

Coronavirus Themed Malicious Files

According to cyber security research firm Kaspersky Lab malicious pdf, mp4, and docx files are circulating disguised as information relating to the novel Coronavirus. According to Kaspersky, “The file names imply that they include virus protection instructions, current threat developments and even virus detection techniques.” However, downloading the files launches a malware attack instead.

Coronavirus Themed Malware Attacks

A malware attack launched from an email scam delivers Emotet malware and botnet cyber attacks via large volume spam emails. The emails primarily target Japan and contain messaging about new reported cases of Coronavirus. The email urges the reader to open the attachment to read an important virus-related message and get helpful information.

What is Emotet Malware?

Emotet is a banking malware than can be used to download other malware to infected devices. It was designed to steal banking credentials for banking fraud. TA542 has used Emotet for banking fraud campaigns targeting banks in Germany, Austria, and Switzerland. The latest version of Emotet now uses third-party malwares to carry out its work.

Emotet malware steals login credentials from web browsers and email clients. The malware can also steal the subject, body, sender’s name, recipient’s name and email address. It infects more devices by sending spam emails and forwarding itself to email contacts from an infected device. That’s why it is important to use a unique password for every online account.

Emotet malware is capable of reviving older email threads to increase infection rates.

The Coronavirus email scam and malware attack is the work of TAS542 a hacking group that has used malicious attachments in scam emails for their previous attacks. One of their more recent malware email scam campaigns contained activist Greta Thunberg themed content. The scam email contains an attachment that appears to contain an urgent message relating the spread of the novel Coronavirus but is instead a weaponized file.

What Is TA542?

TA542, also known as Mummy Spider, is an organized threat actor group that consistently uses a malware payload called Emotet. TA542 typically sends large scale spam email campaigns. The latest version of Emotet malware, aka Geodo, has been delivered in widespread global email phishing campaigns in North America, Central America, South America, Europe, Asia, and Australia.

Emotet malware has also been used to deliver more malware including Qbot, The Trick, IcedID, and Gootkit.

According to cyber security researchers at Proofpoint, TA542 uses subject lines that contain financial themes that usually refer to transactions, payments, or invoices. The scam emails contain malicious attachments or links to malicious documents. A typical Emotet scam email contains a Microsoft Word document or an Adobe .pdf attachment. It may have a malicious link in the body of the email. If the victim has macros enabled, the scam email installs Emotet onto their machines.

Coronavirus Email Scam

This email scam impersonates the United States Center for Disease Control (CDC) and virologists but is really a phishing email scam in disguise. The email attempts to scare recipients with news of a supposed infection in their area. It also provides information on safety measures to seem credible and increase the likelihood that the recipient opens the email.

A Coronavirus email scam was discovered in the wild as an email phishing attack by KnowBe4, Inc. This scam email is a bit different than the malware launcher version. According to Stu Sjouwerman at cyber security researcher firm KnowBe4, the email (Image 1) also attempts to impersonate the CDC and even includes some helpful virus prevention tips to increase its believability and the likelihood that the user clicks on the malicious link in the email body. If the recipient, clicks on the link it leads them to a spoof website that is a credential phishing page.

KnowBe4 Coronavirus Image 1
KnowBe4 Coronavirus scam Email Image 1

Don’t Fall For Coronavirus Email Scams and Phishing Attacks.

Example Emotet Scam Email Subject Lines

  • ACH Payment Info
  • Payment Notification
  • Transaction for your invoice
  • Overdue payment
  • Paid Invoices
  • Sales Invoice
  • Status update
  • Document needed
  • New Order
  • Receipt for your invoice

How to Detect a Scam Email

Coronavirus scam emails may prompt you to check an updated map of the outbreak or even give you helpful virus-related information. Phishing emails may appear to originate from authorities, your local school system, the CDC, or World Health Organization (WHO). Phishing emails use scare tactic subject lines and content about supposed local infected people or keeping you and your family safe from the virus. The email might prompt you to open an attachment, click on a link, or even ask for donations to stop the spread of Coronavirus.

A scam email or spoofed website often contain grammatical errors. Although they may be designed to look just like legitimate emails from large corporations or charities, they often contain spelling or grammar errors common to someone who is writing in something other than their native language. For example, the phishing email discovered by KnowBe4, contains a grammatical error (“You are immediately advised to go through the cases above for safety hazard”) at the end of the last sentence in the body of the email.

Geo Dvorak has experience in the privacy space, with a focus on highlighting the growing market for privacy professionals. He joined the Ask Cyber team to handle the jobs board.

www.askcybersecurity.com

FBI Warns Job Seekers of Job Scams and Fake Job Listings

by

Job Scams – FBI Warns Job Applicants of Scams Involving Fake Job Listings and Spoof Websites

The US Federal Bureau of Investigation (FI) issued a warning about job scams targeting job applicants. Cyber criminals target job applicants to steal personally identifiable information and money. Job scams are easier to carry out using technologies including email, web sites, and video calls.

The FBI warning states that, “Since early 2019, victims have reported numerous examples of this scam to the FBI. The average reported loss was nearly $3,000 per victim, in addition to damage to the victims’ credit scores.”

What Are Fake Job or Hiring Scams?

Job scams are attempts by cyber criminals posing as legitimate employers or employment agencies. They post fake job listings on job boards websites like monster.com or set up their own spoof websites. Scammers may conduct fake interviews using video chat apps lie WhatsApp. They convinced the job applicant that they must pay for job placement services or give sensitive personal information and credit card numbers to apply for the job.

Employment Scams on the Internet

Cyber criminals often create a fraudulent website known as a spoof website using a domain name that’s very closely names to a legitimate hiring company. The spoof website is designed to look just like hiring company’s real website. The spoof website may attempt to collect personally identifiable information like name address, birthdate, and Social Security number.

READ Six Government Cyber Security Jobs for Veterans

Cyber criminals may also conduct video chat interviews to make the job scam appear more legitimate. Employment scammers impersonate human resource personnel and recruiters. During or shortly after the video interview, the victim applicant is offered a job. This scammer may send the job applicant an employment contract to make things seem more legitimate. In return, the scammer may request a copy of your driver’s license, passport, and Social Security number. Scammers who are attempting to steal money will request card information to pay for expenses.
Cyber criminals may also attempt to collect money from a job applicant telling them they must pay for background checks, mandatory pre-employment training, or office supplies. Often, they are promised that they will be reimbursed by their future employer.

How Scammers Make Money

The stolen personal information is used to carry out identity theft, to open up new credit cards or lines of credit. Scammers may even file fraudulent tax returns. In identity theft, a scammer uses someone’s stolen personal information to establish an identity for themselves or to sell to others. This may include establishing fake passports, drivers licenses, and an even employment history. With fake income tax fraud, scammers use someone’s stolen name and Social Security number to file a fraudulent tax return before the victim has had a chance to file that year. They scammer claims a high amount of deductions to receive a large return that is direct deposited to a fraudulent bank account established with the victim’s credentials.

Signs of a Job Scam

  • You need to pay a fee to get the job

    Job applicants never need to pay a fee to apply for or get a job. If an employment agency is working at the behest of employer all fees are always paid by the employer who is seeking job applicants

  • You need to supply your credit card or bank account information

    Never pay a fee for job placement agency services. Job placement agencies are a legitimate business governed by state regulations. Fraudulent job placement services may lie about services offered or give guarantees about job placement. They may promote outdated listings or blatant job scams

  • The employment ad is for “previously undisclosed” federal government jobs

    Job scammers often advertised previously undisclosed federal government jobs all federal government jobs including those from the Postal Service, the Federal Aviation Administration (FAA), and all other agencies earn are publicly available for free app usajobs.gov

Your local consumer protection agency, state Attorney General’s Office, and the Better Business Bureau can tell you whether any complaints have been filed about a company. Just keep in mind that a lack of complaints doesn’t mean the business is on the up-and-up.

RELATED: Iranian Hacker Job Website Targets US Veterans with Malware

How to Protect Yourself Against Job Scams

  • Research the company that you are applying for a job with. Look for complaints on Glassdoor, Monster, and the Better Business Bureau complaints
  • Review their company profile on LinkedIn and connect with other employees
  • Be wary of any company that asks for bank account information, credit card numbers, or your Social Security number before hiring you. Some legitimate companies may conduct a background check before making a job offer. This should be at their expense and the information given to them should be limited to the human resources department or background check agency
  • Never send money to a hiring company. Scammers often ask for gift cards and prepaid debit cards to make their fraudulent activity untraceable
  • Never give your personally identifiable information to anyone who doesn’t need it. Even after you’re hired only the human resources Department needs personal information about you and your family
  • Only give bank account information after you’re hired by a legitimate company. Your new employer may need this to set up direct deposit to pay you, but they should never ask for this before you have accepted a job offer

How to Report a Job Scam

If you suspect a job scam is important to report it to authorities, you may need to file a police report to cover any monetary losses.

  • Report any suspicious employer of job scam to the Federal Internet Crime Complaint Center at www.ic3.gov or your local FBI office, which can be found online at www.fbi.gov/contact-us/field-offices
  • Report the job scam activity to the job website in which the job posting was listed. For example, if the fraudulent job posting was on Monster.com, then report the scam job listing to their customer service
  • If you’ve been the victim of a job scam report it to the Federal Trade Commission (FTC) https://www.ftc.gov/complaint
  • It’s a fraudulent activity happened with a local job placement firm contact the appropriate state licensing board or State Attorney General

Useful Computer Science and Data Science Skills

Michelle - Profile Photo

Michelle writes about cyber security, data privacy focusing on social media privacy as well as how to protect your IoT devices. She has worked in internet technology for over 20 years and owns METRONY, LLC. Michelle earned a B.S. in Engineering from Rensselaer Polytechnic Institute. Michelle published a guide to Cyber Security for Business Travelers

www.metrony.com/

6 Signs of a Romance Scammer

by

6 Ways to Spot an Online Dating Scammer – Beware of Dating Scammers – What You Need to Know About Romance Scams and Dating App Scams

Signs of a romance scammer unfortunately often occur too late. According to the US Federal Trade Commission (FTC) $143 million dollars was given to romance scammers in 2018. And that only includes the losses reported by victims. Romance scams are the number one type of online scam for all form of online fraud tracked by the FTC.

The median reported loss is $2600 per victim. The older the victim, the higher the loss. The highest media loss happens to people over the age of 70 who report a median loss of $10,000 each.
Romance scams are not that easy to detect. Scammers are adept at slowly building trust with people, through emails and texts, who are honestly looking for a relationship or those who are lonely. However, in the case of scammers, these supposed love interests always find a reason why they can’t meet in person. They claim that work, military service, health issues, or other obligations keep them away. in the meantime, they build a false friendship and trust in a setup to eventually ask their victim for small amounts of gift cards gifts or money. The requests escalate and work their way up to larger scams hopefully before the person realizes that they are the victim of a romance scam.

Best Price Yet! Get $200 off any ALL NEW Lenovo Yoga C940 2-in-1 Laptop
Use code EXCLUSIVEC940

How Can You Tell an Online Dating Scammer?

Romance scammers create excuses for why they cannot ever meet in person. This is because the fraudster doesn’t want to get caught. They could very well likely be in another region or across the globe . Nevertheless, the potential date will give excuses of why they cannot meet. Stating they may be stationed in a remote work location on a ship, they may claim that they are in the military, or in a faraway country. They might also claim that they are too sick to travel which can then lead to them asking for help paying for medical bills. Whatever the reason the scammer will assure you that they are indeed interested in you as a person.

READ: How to Avoid Romance Scams

Online scammers usually want money but may not ask for it in the form of cash. Online dating scammers might ask for gifts that could be sold or returned for cash, they may ask you to send gift cards to be used to pay bills or sold online. However, some scammers are very bold and may ask for cash outright to pay for travel arrangements so they can supposedly meet you or cover medical expenses if they are in ill health. Rest assured that the romance scammer will find another reason not to ever meet you in person – even when you send cash for a plane ticket.

Romance Scammer Tactics

The Person Has Endless Excuses Not Meet in Person or Video Call

Your prospective romantic partner will offer endless reasons why they can never meet in person or even hop on a video call with you. Romance scammers do not want to be see because they have probably used a fake profile photo. If your new romantic interest is supposedly away in Africa working as a doctor, in the military, or always unavailable because they don’t have money to travel it’s probably a romance scam.

The Romance Seems Too Good to Be True

If the romance seems too good to be true it probably is. Romance scammers are adept and patient at establishing a trust. They slowly build a friendship and ask for money or gifts in increasing amounts.

The Person Seems Overly Interested in Your Children

Some criminals do want to meet in person. If a person seems overly interested in your children, then they may be a scammer with the intention of kidnapping or assaulting your children once they make contact. Don’t introduce any new romantic relationship to your children right away or even allow them to communicate by email text or video.

The Relationship Is Moving Oddly Fast

If the relationship is moving too fast for your comfort or oddly fast for what makes sense, then it may be a romance scam. Criminals are patient and take their time building trust so they can work their way into convincing you to give them money. Everything will be all roses as the scammer whisks you off your feet and out of your fortune with false promises of a life together forever.

Profile Picture Is a Generic Image

If you suspect a dating app profile photo is a generic image, then download the image to your laptop and do a photo search online. If you can find the profile photo elsewhere, then you know for sure it’s a scam. Look for the persons Instagram, Facebook, or LinkedIn profile to see if they have any other public profiles. Although it doesn’t make someone a criminal if they are not in Instagram, if their photo turns up in multiple places with different names then it’s a scam.

A Dating App or Website Asks for Excessive Sensitive Information

High volume scammers may actually run their own dating apps or websites set up to bilk money out of more people. If you receive a generic message or something that seems very similar to other relationship communications, that’s a scammer at work. The fraudster may also be the only person responding to messages on a dating site if it’s a spoof website. This type of online scam is trying to steal money from as many suitors as possible.

McAffee Total Home
McAffee Total Home

How Do You Know If Someone Is Scamming You?

Pay Attention If Your Friends or Family Are Concerned About Your New Love Interest

Scammers are clever. It might be hard to know for sure if someone is scamming you, but if you’re having difficulty deciding it might be best to ask a friend or loved one for their opinion. Your intuition may be telling you that something is wrong. If something seems off it probably is. You may be the victim of a romance or other scam if the person seems too good to be true followed by them asking you for something you are not comfortable with.

Scammers are usually out for money, but they may ask you to open bank accounts or handle illegal activities for them – like moving money across borders. They might ask you to pay for something in advance like travel tickets clothing or other goods. It’s common for scammers to ask for gift cards because they are not traceable. They can be used for hard goods or services or sold on line for cash. Scammers might ask you to pay an invoice or bill for them.

Hackers on the other hand, may be looking to access banking accounts. They may ask for more details about your identity so they can steal information including logins and banking credentials.
if a dating relationship seems to be moving too quickly but the romance scammer still refuses to meet you in person or at least video chat it’s probably a scam i must conversations with no intentions to ever meet are sure sign that this is not love

Sometimes Websites are Dating Scams

Not all romance scams come in the form of human interaction. Sometimes websites or supposed dating apps can also be part of a romance scam. Obviously, a dating website has to collect and display personal information about you to help you meet someone. A dating website that is asking for excessive or unnecessary information about you may actually be a scam or other spoof website.

In 2015, dating website, Ashley Madison, was targeted in a massive data breach. In the fall out, user profiles were exposed and dumped online. It was also discovered that the majority of profiles on ashleymadison.com were fakes. Although they weren’t out to scam people out of their money, there were very few real women who were looking for real dates. The site made money selling memberships with poor odds of meeting someone real. Be wary of any website where the majority of the photos look like professional photos or fashion models. Look for realistic profiles and expect human interaction.

Protect Yourself with a Credit Card

Web sites that ask for unnecessary and very personal information, especially when is related to finances or information that can be used to reset passwords, are signs that the website is not a legitimate dating site. Never give a website information about your bank account numbers. Although it may be necessary to pay for membership by entering a credit card, there should be a way to pay in the secure checkout area of the website rather than in profile fields. Remember to use a credit card rather than a bank or debit card. That way you will have some consumer protection in case of fraud.

READ: What to Do If Your Identity is Stolen

How Can I Stop a Romance Scam?

According to the Federal Trade Commission, there was $143 million lost to thieves in romance scams in 2018. This is the highest of all types of online scams reported to the FTC. The median reported loss was $2,600, and, for people over 70, it was $10,000.

If you feel uncomfortable with the new romance and If you think you’re caught in a scam breakoff all communication and report the incident to the dating app site and the FTC. report it Report it to the FTC at ftc.gov/complaint.

Although there are many people out there who are genuinely looking to start a relationship, there are also thousands of scammers looking to steal money or worse yet steal your identity. Be wary of any friendship or romantic relationship that begins too quickly. Be especially careful if someone makes you feel uncomfortable and starts asking for any form of payment.

What Can I Do If I Get Scammed Online?

  • Never give anyone your credit card details, account numbers, or PIN
  • Stay away from an online friend who ask you to send gift cards or cryptocurrencies
  • Don’t pay for travel arrangements or transfer money electronically
  • Don’t give anyone login credentials or allow remote access to your computer
Michelle - Profile Photo

Michelle writes about cyber security, data privacy focusing on social media privacy as well as how to protect your IoT devices. She has worked in internet technology for over 20 years and owns METRONY, LLC. Michelle earned a B.S. in Engineering from Rensselaer Polytechnic Institute. Michelle published a guide to Cyber Security for Business Travelers

www.metrony.com/

PayPal Phishing Emails Rank as Top Scam

by

PayPal Phishing Emails Rank as #1 Spoofed Scam – How to Protect Your PayPal Acccont and Money

PayPal phishing emails rank as the number one spoofed brand in email scams according to data from cyber security researchers at VadeSecure. Hackers send phishing emails disguised to impersonate authentic PayPal communications. The PayPal phishing emails are actually various scams to steal money from PayPal account holders.

In 2019, the number of PayPal phishing URLs (links) increased 167.8% with 16,547 unique PayPal phishing URLs for an average of nearly 180 links per day.

Microsoft was the top phishing scam spoofed brand for that past five consecutive quarters. Microsoft branded phishing URLs totaled 13,849 which is a 31.5% decrease from second quarter 2019.
People and businesses can use PayPal to receive money in over 100 currencies and withdraw money in 56 currencies.

PayPal Phishing Email Examples

  • European Last reminder before judicial action PayPal Phishing Scam
  • PayPal Ryanair Phishing Scam
PayPal Account Screenshot
PayPal Account Screenshot

In October 2019, cybersecurity researchers at Vade discovered a PayPal phishing email campaign that targeted over 700,000 people in Europe. The emails threatened people with legal action using subject lines like “Last reminder before judicial action.” The PayPal phishing emails attempted to extract 45 Euros from scared victims as payment. The phishing email targets were offered a few payment methods including a US physical mailing address, a pay-call telephone number, and a spoofed PayPal URL. If the victims clicked on the spoofed link, they were redirected to a spoofed PayPal webpage.

Get 22% off ANY 15in Legion Y540 and Y740 gaming laptop, including models with latest RTX and GTX graphics cards
Use code NEWLEGEND22

Another PayPal phishing email scam sent a fake receipt to targets informing them they had sent a payment to Ryanair totaling £356.98. Since the recipients had not purchased airfare, they looked to cancel and refund the payment. The spoofed email receipt contained a PayPal link to “Click Here to cancel this payment.” If the scam victim clicked the link to request a refund, they were taken to a spoofed PayPal webpage and asked to enter their credentials. Hackers were then able to use the login information to gain access to their PayPal logins and transfer money out of the account.

How Do I Know If a PayPal Email Is Legit?

If you received an email seemingly from PayPal that states you’ve received a payment, just log in to your PayPal account and confirm the activity.

How Can You Tell A Fake PayPal Email?

Fake, fraudulent, spoof, or phishing emails commonly have the following qualities.

  • The email does not address you by your first and last name. Emails that use impersonal or generic greetings like “Dear user” or “Dear your email address” are suspect
  • The email contain links to account pages
  • Emails that contain attachments are suspicious even if you believe you know the sender
  • The email attempts to scare you into taking action or convey a sense of urgency
  • Threatens to suspend your account
  • The email contains a notification that you’ve been paid when you are not expecting a payment
  • If you have been paid too much, it may an attempt to get your credentials
Save $100 on Samsung Galaxy Unlocked Phones
Plus Free Shipping!

What is PayPal?

PayPal Holdings Inc was founded in 1198 under the name Confinity. IT was acquired by eBay in 2002 and subsequently spun off in 2015., is the most widely used online payment service in the world. PayPal has with over 286 million accounts and supports money transfers and credit card processing.

PayPal Venmo- Buttons
PayPal Venmo- Buttons

PayPal bought Xoom, an international money transfer platform, in 2015 and expanded to 32 more countries including Austria, France, Germany, Italy, Spain, and Portugal. The company also owns Venmo, Braintree, iZettle, and Tradera.

Where is PayPal Accepted?

FTC Settles with PayPal Over Venmo Privacy and Security Violations
PayPal can be used for payments online and in stores. It is the fifth most popular payment method that retailers accept. Visa credit cards are number one. PayPal is accepted as payment information by 200 million businesses worldwide.

How Do I Report Phishing Emails to Paypal?

If you receive a PayPal phishing email, forward the entire email to [email protected] Do not alter the subject line or forward the message as an attachment. Then delete the suspicious email from your inbox.

Michelle - Profile Photo

Michelle writes about cyber security, data privacy focusing on social media privacy as well as how to protect your IoT devices. She has worked in internet technology for over 20 years and owns METRONY, LLC. Michelle earned a B.S. in Engineering from Rensselaer Polytechnic Institute. Michelle published a guide to Cyber Security for Business Travelers

www.metrony.com/

Avoid Email Phishing Scams

by

How to Recognize and Avoid Phishing Scams

Email phishing scams are the fraudulent attempt to use email to victims into giving sensitive corporate or personal information. FBI’s Internet Crime Complaint Center reported that in one year, email phishing scams cost people $30 million in losses. Many malware and cyber attacks begin with email phishing scams that give hackers information to escalate their cyber attacks to more targeted spear phishing email scams or to compromise a network.

Business Email Compromise (BEC) scams are email phishing scams targeted at companies and large corporations. BEC scams accounted for $1.3 billion in losses in 2018. Many people feel that they may not be the likely target of an email phishing scam because they think they have nothing to lose. There are a variety of tactics hackers use to steal money. Some hackers go after large numbers of victims stealing smaller amounts of money hoping to go undetected. More sophisticated hackers launch spear phishing scams against wealthier targets including corporations hoping to steal large sums of money from fewer victims before they are detected.

READ: What is a BEC Scam?

Email phishing scams can also be used to launch malware attacks and take over computers or entire IT networks. Emails are designed to convince the victim to click on a link, download of malicious attachment, or reply with sensitive information to the hackers and giving access they need to do further damage. Sometimes hackers simply asked a business recipient to pay a fraudulent invoice by wire transfer.

Free UPS Shipping + $50 Off Truck Delivery at Tractor Supply!
Limited time offer!

How To Detect An Email Phishing Scam

All emails have two names associated with the sender. The first name is the friendly name. The second name is the sending email box name. It’s important to understand the difference between the two.
The friendly name is the name that you may have been assigned to someone in your contact list because you legitimately know them. I tend to name my phone contacts with the person’s first and last names followed by how I know them. I do this as a reminder. For example, I might have someone listed as “Mary Smith Acme Company”. It helps me remember quickly how I know the caller. This is especially important for my phone contacts, so I don’t answer a spam call on accident.

Amex Phishing Links
Amex Phishing Links

You can also assign other information to your email contacts. When you assign a name to someone in your contact list that is a friendly name. For example, I can change Mary Smith’s name in my email contact list to simply read “Mary.”

Look Carefully at the Email Address

Hackers and spammers are capable up spoofing friendly names in the email scams they send in hopes of tricking you into thinking you know the sender. If the recipient of an email scam believe they know the sender, they are far more likely to open the email and follow the instructions inside.

The sending email box address is different than the friendly name. For example, the sending email address always has the @ symbol followed by the sending domain name. Bob @ gmail.com is an example of an email box name. Whereas just Bob is the friendly name.

Hackers spoof the friendly name to trick recipients into thinking that the Sunder is familiar to them. Tricking the recipient into opening the email is the first step to identity theft , launching a phishing campaign, or delivering malware via email campaign.

Charge any battery type with the Tenergy TN471U Universal Charger
SHOP NOW!

Beware of Website Spoofing

Next, look carefully at the sending domain name. Hackers often deply a tactic called website spoofing by using a closely named domain with a variation in spelling as another attempt to trick recipients into opening an email. A common tactic is to use singular or plural versions of legitimate domain. Other times hackers use some variation with extra words added on. For example, a scammer might send a scam email from something like chase credit card support or chase support hoping to trick you into thinking it was coming from Chase Bank.

Now if they combine the spoofed domain name along with some other piece of information, they already know about you – like your first name or the fact that you have a Chase account- and use an email friendly name like customer service, you are even more likely to open the scam email.

Spear Phishing Email Scams – What’s the Difference?

Hackers often use other data they purchased on the dark web and collaborate that into their phishing emails. The more data they have on you, the more they can refine the design and wording of an email phishing scam.

READ: How Does a Phishing Email Work?

In a spear phishing campaign, the hacker has already collected information about the target. The hacker may know their victims first name, where they work or what bank they use. A spear phishing email scam might address the recipient using their first name to make the email appear as if it’s coming from someone they know or business they have a relationship with like their bank.

A common phishing email tactic asks the user to check their online account, reset a password, or verify some piece of personal information. Sometimes a phishing email scam leads the recipient to a spoof website and asks them to enter sensitive data on a fraudulent web page. Often the webpage and the scam email are both designed to look just like the legitimate website.
If the victim does enter any data like account numbers, passwords, or personal information the hacker quickly collects the information and uses it to hack into the person’s account.

Sometimes hackers ask victims to simply reply to their scam email with the requested credentials. This is especially unsecured never give sensitive data like account numbers passwords or usernames an email because anyone could intercept the information.

Any unsolicited email could be a scam. Even if it appears to be from someone that you know.

What to Do If You Suspect A Phishing Email


Be suspicious of any email that asks you to update, check, or verify your account information. Do not click on any links in the email body.
Contact the company or person sending the email through another form of communication. Go to the company’s website and get the contact information from there. Be careful however that you are using a legitimate corporate website which is not necessarily the website listed in the email as that may be a closely named spoof website.
If the person in the email seems like they’re familiar, then ask them to verify their identity. Once I was sending emails to people I knew to ask for donations to a fundraiser. One of the recipients of my request replied and asked me a question to verify my identity. She asked me how we met. I replied with how, when, and where we met. it was a good way to check on who I was and if I had legitimately sent that email, which I had.

Another way to contact the company if you suspect a phishing email is to call them. If the email is from one of your credit cards, call the number on the back of the card. Don’t use any contact information or links in the scam email.

Hackers go to great lengths to make the phishing scam email appear as though it originates from a legitimate sender. They use the same color schemes, layout, and steal logos. They use their first name if they know it.

I was receiving phishing emails that were designed to look like a credit card that I actually have. My credit card has an email address that I can forward the scam emails to so they can help fight spam and phishing email campaigns. Once I called customer service because I was receiving so many of these phishing emails. Over the phone they showed me how to be sure that the email came from them and not a hacker. There are a few elements about a legitimate email that the hackers could not know. Since then it’s been much easier to detect and mitigate phishing emails from hackers.

Fake Email Content
Fake Email Content

Phishing Email Scam Checklist

  1. Examine the sender’s email address
  2. Do not click on any links in the email
  3. Call the phone numbers provided in the message
  4. Go to the company’s official website to log into your account
  5. Do not open or download any attachments
  6. Carefully examine all electronic requests for a payment or wire transfer of funds
  7. Be suspicious of any email that requires immediate action
  8. Confirm requests for wire transfers or payment in person or over the phone
  9. Do not verify any requests using contact information listed in the email
Michelle - Profile Photo

Michelle writes about cyber security, data privacy focusing on social media privacy as well as how to protect your IoT devices. She has worked in internet technology for over 20 years and owns METRONY, LLC. Michelle earned a B.S. in Engineering from Rensselaer Polytechnic Institute. Michelle published a guide to Cyber Security for Business Travelers

www.metrony.com/

FTC Sues Dating Site Match.com for Exposing Users to Scam Profiles

by

FTC Sues Match Group for emails prompting users to to buy a subscription to respond to messages that Match had already flagged as likely to be fraudulent

The US Federal Trade Commission (FTC) filed a lawsuit against dating website Match.com. The filing alleges that Match exposed users to scammers from fraudulent profiles and made it difficult to cancel subscriptions. The FTC complaint states that Match sent emails to account holders prompting them to buy a subscription to respond to messages that Match had already flagged as likely to be fraudulent.

It is estimated that 25 to 30 percent of new Match.com members register to attempt to defraud other members with romance scams, phishing emails, and extortion attempts. According to the FTC complaint, in some months between 2013 and 2016, over half of the instant messages and profile favorites came from accounts that Match had already identified as fraudulent. Hundreds of thousands of people looking for a relationship upgraded to paid subscriptions to Match.com after receiving an interaction from a fraudulent profile.

The Leatherman FREE – The Ultimate Problem Solver
Up To 75% Off Leatherman Gear!

According to the FTC’s complaint, from June 2016 to May 2018, for example, Match’s own analysis found that consumers purchased almost 500,000 subscriptions within 24 hours of receiving an advertisement encouraging a free user to upgrade to see the contents of a fraudulent communication.

Match.com allows anyone to create a dating profile. Users can have paid subscriptions or free accounts. Those with free accounts cannot send communications or respond to interactions from paid users. They must upgrade to a paid subscription to communicate with any other member.

The FTC complaint alleges that millions Match’s “You caught his eye” messages came from accounts Match had already flagged as likely to be fraudulent.

Match Sample Notification
Credit: FTC Match Sample Notification

According to the FTC filing, Match emailed uses with free profiles (non-subscribers) notifying them that they had received a message from another user. But the FTC complaint says that Match sent millions of these emails, notifying the non-subscribers that a message was waiting for them even when Match had already identified the sender as a scam account. By contrast, Match blocked scam messages from reaching paid subscribers.

When people with free accounts received likes, favorites, emails, and messages on Match.com, the dating site also sent emailed advertisements from encouraging them to become paid subscribers so they can view the sender’s profile and the message contents.

In a statement from Andrew Smith, Director of the FTC’s Bureau of Consumer Protection, “We believe that Match.com conned people into paying for subscriptions via messages the company knew were from scammers.”

Online Dating and Romance Scams

Online dating services, including Match.com, are used to prey on people looking for a relationship. Scammers create fake profiles and are patient while establishing trust before asking for money or gifts. Romance scams top the list of online scams. In 2018, US citizens lost over $143 million to romance scams.

  • Pay attention to details about your new online relationship’s life details. If they sound suspicious, it may be a scam
  • Google their name and reverse-image search their dating profile pictures. If those photos belong to someone else, your love interest is a romance scammer
  • If an online relationship asks for money, gift cards, or expensive gifts that is most likely a scam
  • Share your concerns with family, friends or another objective person. If they are concerned you may be involved with a scammer

If you are the victim of a romance scam or any other type of scam, report it to the FTC website at ftc.gov/complaint.

What is Match.com?

Match.com is dating website and app with over nine million users in 40 countries. The site is owned by Match Group, Inc. which is based in Dallas, Texas. Match Group also operates Tinder, OKCupid, PlentyOfFish, as well as other dating sites.

Match.com – Hard to Cancel

Match.com users pay $20 to $30 per month for subscriptions depending on the length of the subscription. The monthly price can increase with a number of subscription add-ons users can buy.

The FTC complaint also alleges that Match violated the Restore Online Shoppers’ Confidence Act (ROSCA) by not providing a simple, clear method for subscribers to cancel their membership and terminate monthly subscriptions. The FTC complaint contends that the cancellation process confused subscribers with a hard to find and tedious process and ultimately prevented many consumers from canceling their subscriptions. This often led subscribers to dispute charges with their bank or credit card. Match would then ban these users from accessing the services they paid for.

Michelle - Profile Photo

Michelle writes about cyber security, data privacy focusing on social media privacy as well as how to protect your IoT devices. She has worked in internet technology for over 20 years and owns METRONY, LLC. Michelle earned a B.S. in Engineering from Rensselaer Polytechnic Institute. Michelle published a guide to Cyber Security for Business Travelers

www.metrony.com/

What is a BEC Scam?

by

Business Email Compromise Scams Cost Businesses Millions in Losses

Business Email Compromise (BEC) is a type of online scam that targets businesses that use wire transfers for payments. The US Federal Bureau (FBI) reports that since January 2015, there has been a 1,300% rise in financial losses totaling over $3 billion USD. Hackers stole $1.3 billion from companies in 2018, twice the amount of 2017 losses.

Business Email Compromise scams are also known as Man-in-the-Email scams or Email Account Compromises. This type of online scam has been tracked by the FBI’s Internet Crime Complaint Center (IC3) since 2013. Companies in all 50 states and over 100 countries have been targeted. Victims include large corporations, non-profits, churches, and schools. BEC scams target organizations of all sizes but have evolved to victimizing larger companies that can afford to pay more. Hackers use combinations of online cyber attacks like spear phishing emails, social engineering, identity theft, e-mail spoofing, and malware to establish trust with potential victims. After patiently building a relationship with an employee via email or social media, the targeted employee is eventually tricked into wire transferring money to a bank account the hacker has access to.

WebRoot cyber sec

In one cyber attack vector, social engineering is used to gain access to an employee’s email account by resetting passwords. Many times, social media accounts contain the answers to common password rest questions, like “What city were you born in?” When hackers gain access to an employee’s legitimate email account, they use it to send out emails to employees or business partners who are authorized to send wire transfers. The victims are tricked into paying fraudulent invoices or other business expenses. If the hacker has compromised an email account or an entire IT system, they may be able to convince an employee to pay a legitimate invoice but the money is wired to the wrong bank account.

Sometimes hackers can convince an employee a wire transfer request originates from the CEO or other executive level employee. Corporate email addresses can be gleaned from company websites, press releases, or LinkedIn profiles. Passwords are stolen through social engineering, malware using keyloggers, or phishing emails.

Hackers may also trick employees who don’t scrutinize their emails carefully enough into thinking the email originates from a legitimate corporate email address. The friendly name of an incoming email is easy to spoof. To ensure an email is from a legitimate sender, the recipient must look carefully at the email box name and not just the named used to sign the email. If the email contains suspicious links, it is best to pick up the phone and call the alleged sender to make sure the email is legitimate.

Targeting corporations rather than individuals is more lucrative for hackers and scammers. Individuals may pay a small fee to free their device or files from ransomware, but a large corporation can afford more and may likely have an insurance policy to cover the costs of a data breach.

Types of Business Email Compromise (BEC)

  • Bogus Invoice Scheme – Companies that use foreign vendors are targeted with emails requesting a wire transfer to pay fraudulent invoices. If paid, the money goes to a bank account the hacker can access, including those used by money mules.
  • CEO Fraud – Hackers posing as executive level employees send spear phishing emails to employees who can authorize a wire transfer. That money be sent to their bank accounts
  • Email Account Compromise – Hackers compromise a corporate email account and use it to send legitimate or fraudulent invoices to vendors. Wire transfers are routed to the hacker’s bank account.
  • Attorney Impersonation – Hackers impersonating attorneys request personal information in phishing emails or over the phone from human resource employees for use in future spear phishing attacks
  • Employee Data Theft – This type of BEC scam is also called the W2 scam. Hackers try to trick human resource employees into sending employee W2 forms in bulk, so they can use it for future spear phishing emails or identity theft.

What is a Phishing Email Scam?

Phishing emails are malicious emails sent to victims for criminal purposes. Often scammers are trying to steal money from phishing email recipients by convincing them to send banking information, credit cards numbers, or passwords in an email. Often, the recipient is directed to a spoof website that looks very similar to a website the recipient has a financial relationship with. The phishing email scam victim may be encouraged to rest a password when in reality they are giving their login information to hackers.
Phishing emails may be used to gather personal information for another, more targeted form of an email scam, the spear phishing email. While phishing emails tend to be sent out to hundreds or thousands of potential victims, thus said to be fishing for a response, the spear phishing email is very targeted at one person or one organization. The hacker who sends spear phishing email has already collected personal information about the recipient like name, workplace, or other personal details. Spear phishing emails are dangerous because the recipient feels they know the sender somehow.

Michelle - Profile Photo

Michelle writes about cyber security, data privacy focusing on social media privacy as well as how to protect your IoT devices. She has worked in internet technology for over 20 years and owns METRONY, LLC. Michelle earned a B.S. in Engineering from Rensselaer Polytechnic Institute. Michelle published a guide to Cyber Security for Business Travelers

www.metrony.com/

How to Avoid Romance Scams

by

How to Avoid Romance Scams and Fraud

A romance scam is a type of imposter scam that preys upon those looking for romantic partners. The scammer gains the victim’s affection and then steals thier money or uses them to commit further fraud.

Romance scams rank number one on total reported losses. A notice from the US Federal Trade Commission (FTC) supplied some astonishing numbers about the cost of romance scams. Financial losses from romance scams are higher than from any other form of fraud in the US. The FTC reports that romance scams collected about $143 million from US citizens from reported 21,000 complaints. That’s a shocking median loss of $2,600 per scam victim, an figure seven times the median loss of any other form of fraud. An AARP survey found that 4 percent of U.S. adult respondents said they were victims of an online romance scam.

Scammers claim that they are abroad or in military service and cannot meet in person. They are only looking to eventually separate a suitor from their money or even recruit the victim into helping steal money from others.

Romance Scam Victims
Romance Scam Victims

Romance scams will cost you. People between the ages of 40 and 69 reported they were more likely to lose money to a romance scammer than other age brackets. However, those aged 70 and older lost more on a per case basis with a median loss of $10,000 each according to the FTC. Most of the victims paid scammers via wire transfers or sent gift cards.

What is a Romance Scam?

Romance scammers prey on vulnerable people who are looking for love. The number of people using online dating sites and apps spikes around Valentine’s Day and other major holidays. Hackers and scammer exploit people with tailored cyber attacks using the wealth of data gleaned from online dating profiles and social media accounts. They also set up their own bogus social media profiles or steal someone else’s identity to do so hoping to strengthen their believability with their victims.

Romantic scams are a subcategory of what the FTC labels as imposter scams. These include scammers who pose as business partners, IRS or other government officials, or tech support services. This type of scammer is usually out to steal money but they may do so by first gathering personal information about a victim that eventually gives them access to financial accounts.

Online Dating Services

Online dating sites experience a surge in activity as Valentine’s Day approaches each year. Scammers take advantage of this increased volume and set up fake dating profiles to establish online relationships with those looking for love. The scammers, of course, have no intention of establishing any meaningful relationship or never agree to meet in person.

It may take months for a romance scammer to forge a supposedly trusting online relationships with their victim before they ask for assistance, usually money for an emergency or transportation.

Could You Spot a Romance Scam?

Scammers use Impersonation and online trickery to steal from unsuspecting dates. They find victims through the use of dating websites and apps as well as social media sites like Facebook, Instagram, and Snapchat. Hackers use stolen credit cards to pay for dating app memberships to sites like Match and Tinder so they can post fake profiles. Once they meet a victim, the romance scammer moves the conversation off the app quickly in case they are is discovered and shut down by a paid online dating service. Personal Facebook and Instagram profiles help prove their identity to victims.

Anatomy of a Romance Scam

Scammers are patient and probably cultivating multiple victims simultaneously. Months of messaging about the victims’ lives builds trust. A romance scammer may even send the victim small gifts, as a cost of doing business, to help add credibility to the ruse.

A scammer may test the water by asking for a favor from the victim, like sending a gift card. Like all manipulators, the scammer tries to isolate the victim from their family and friends who are likely to see the reality of the situation.

Offline and Online

Scammers need a way to money from victims without being tracked by law enforcement and may their victims can be turned into unknowing accomplices in a money laundering scheme. Romance fraud victims are many times converted into a money mule role. The scammer already has a trusting relationship with the romanced mule who is unlikely to steal money or ask for payment for their services.

The Department of Justice (DOJ) estimates that in 2018, 20 to 30 percent of romance victims were used as money mules. Money mules are used to assist in romance frauds as well as other scams such as identity theft, stolen tax returns, and grandparent frauds.

Follow the money as the saying goes when tracking fraud. Money mules help by transferring funds to the scammer’s bank accounts, often outside of the country. This obscures law enforcement action by adding a step in the money transfer process that moves the money off-shore and out of reach of officials’ jurisdiction. Most victims do not understand that they are aiding in an illegal activity but still they can end up in deep legal trouble.

What to Do If You’re the Victim of a Romance Scam?

Take any new relationship slowly. Ask meaningful questions and be wary of inconsistent answers. Do not give money or gifts to someone you have never met in person. Try to verify the person’s identity with image, phone number, and address searches. Tell your real friends or family about your potential romance. Objective points-of-view are not so blinded by emotion. If you suspect a romance scam, cut off all contact immediately.

People who suspect that they are being used as money mules should contact a Postal Inspector or FBI agent.

Michelle - Profile Photo

Michelle writes about cyber security, data privacy focusing on social media privacy as well as how to protect your IoT devices. She has worked in internet technology for over 20 years and owns METRONY, LLC. Michelle earned a B.S. in Engineering from Rensselaer Polytechnic Institute. Michelle published a guide to Cyber Security for Business Travelers

www.metrony.com/