As Scammers try harder, just be more clever! (update)

We are constantly assaulted by texts, emails and calls with people trying to access our information for their benefit or trying to trick us into sending them payments.  How do you protect yourself?

The first step:  Think before panicking and reacting; careful observation could save you from a scam!  If you have an emotional response to a message, try to assess why and wait to respond.  Scammers use deception and emotions, so be wary.  

Second step:  practice computer and internet hygiene – install all updates, run anti-virus and malware programs, avoid suspicious interactions, freeze your credit accounts and monitor your credit, use multi-factor verification, and respond to any bona fide alerts.  Also encrypt and back-up sensitive data to protect it from access.  

Final step:  never divulge personal information without first verifying the contact independently.  For a text or email, check your account on your smartphone app or website browser – but don’t use the link in the message!  If the message is a text, you can often delete and report it as junk on your phone. 

We updated some examples of recent scams – any sound familiar? – to help you calm any emotional reaction before responding:

  • Do you really think you won a lottery you never entered?  There is the old joke that says, “what, you didn’t buy a ticket?”
  • If you don’t have a credit card with Wells Fargo, why are they calling you about a BestBuy purchase?  This may make you curious and want call only to hear the recording asking you to input your debit card number – don’t provide it!  Banks and brokers will not ask you to divulge your information.  Also, you can verify the bank numbers on line. 
  • If Amazon really thinks there is fraud, why does the person answering the call say “Thanks for calling Amazon” when the call came from them?  Why do they know nothing about your account information?  If there was a fraud, they would be telling you about the transaction instead of asking for all your account details.  Check your account on your app or the Amazon website. 
  • Do you think you won a gift from Ace Hardware, Walmart or another place where you haven’t been shopping?  Check the e-mail address or text number – if it’s not from the company, then someone is trying to gain access to your information.  
  • Should I respond to this silly personality quiz on Facebook?  No, it might be phishing for personal details for identity theft.
  • Is this great job offer for me?  If you didn’t apply, why is this company reaching out to you?  Again, check the email address or phone number independently. 
  • Do you actually think you are the one randomly chosen to receive an inheritance from someone in another country who supposedly has no heirs?  The estate mentioned is often from a country you may never have visited, and the estate is an enormous amount.  As your grandmother may have told you, “if it sounds too good to be true, it is!”
  • Does your phone or computer really have this terrible virus?  How did they detect this?  Run your own antivirus scan. 
  • If you did not buy a MacBook or AirPods and no one stole your credit card, why is someone calling from the Netherlands to claim a purchase was made on your account?  Often you can tell that the callers are not from the companies they claim. 
  • Why did you receive a Docusign message or a PDF attached to an email for your salary or benefits?  And why did it come from someone’s personal email?  Clicking on the link could allow them to install malware and gain access to your financial information – don’t!
  • It may look like a Microsoft message or some other legit message, but why do you suddenly need to update your account password or sign for a matter you don’t recognize?  Check the source of the message –official-looking messages can come from dubious senders, often outside the US.  Be wary of e-mails from random accounts rather than the actual vendor.  
  • Why is someone calling about a Zelle transfer? When you listen, the case number looks suspiciously like a phone number that could allow then to gain access to your bank account. 
  • Why is the border patrol in Texas calling you and claiming that they opened your mail and need to put a hold on your social security number?  What does it even mean to “put a hold on your social security number” and how does that even relate to contraband?
  • Why is UPS or FedEx claiming the item is undeliverable because your address is wrong?  If you did place an order, you would have confirmed the address.  Check the source of the text or email and independently verify any purchases on the vendor site. 
  • You may be worried about crime in your city, but is that robo-caller really providing funds to support police? Most police departments do not solicit funds by this way so hang up and verify any charity before donating.
  • Why are they offering tax debt relief when you are current on your taxes?  Was there some new IRS program you never heard of?  Check with us before responding. 

Summary

If something seems off, it probably is.  Try to avoid a panicked reaction when you receive a notice of an unauthorized payment, an overdue bill, a payment authorization you didn’t expect or a claim that you violated customs.  And don’t click on any link!  Go to the vendor’s phone app or website to access via a browser you trust to check before responding.  The link in a text or e-mail may appear okay but close examination may reveal some flaw.  

And here is good reminder from the IRS:

  • The IRS will never contact a taxpayer using social media or text message. The first contact from the IRS usually comes in the mail. Taxpayers who are unsure whether they owe money to the IRS can view their tax account information on IRS.gov.

The FTC suggests that you can send a screenshot to 7726 (SPAM).  This may help your wireless provider identify and block similar messages in the future.  You can also report it to the FTC at ReportFraud.ftc.gov.  And if you do become a victim, this New York Times article How to Avoid Online Scams and What to Do if You Become a Victim had information with links on what to do if you are scammed.  

Stay safe and let me know if you have any questions or comments! 

Steven

Update on how to stay safe after the many data breaches

If someone manages to steal your social security number, they often try to file a tax return claiming refunds. To prevent this, you either have to file before them or obtain an identity PIN from the IRS on the IRS.gov website.

Here is the link for the ID PIN, and here is the IRS explanation:

An IP PIN is a six-digit number assigned to eligible taxpayers that helps prevent the misuse of their Social Security number on fraudulent federal income tax returns. Call the IRS at 800-908-4490 for specialized assistance,

Please see our prior post, How to stay safe after the Equifax data breach, to learn more about credit freezes and other protections. And let me know if we can help!

Be wary of these scams – IRS and investments

It seems that we hear of a new internet or phone scam on a weekly basis. These scam artists are getting bolder and more sophisticated with each new endeavor. So, we wanted to alert you to a few new ones where the scammers are pretending to be IRS agents and financial planners.

**Taxpayer Scams**
This past year, the IRS issued a strong warning to consumers against an aggressive telephone scam. The scammers call taxpayers to inform them they owe outstanding taxes and demand payment over the phone. To lend to their credibility, the scammers will have the last four digits of the taxpayer’s social security number. If the taxpayer refuses to make a payment, the caller threatens the taxpayer with jail time, loss of driver’s license and, in some cases, deportation. When the taxpayer refuses to provide this information, the scammers call back pretending to be a local police officer.
If you receive one of these calls, the IRS requests that you take these steps:
• “If you know you owe taxes or you think you might owe taxes, call the IRS at 1.800.829.1040. The IRS employees at that line can help you with a payment issue, if there really is such an issue.
• If you know you do not owe taxes or have no reason to think that you owe any taxes (for example, you’ve never received a bill or the caller made some bogus threats as described above), then call and report the incident to the Treasury Inspector General for Tax Administration at 1.800.366.4484.
• If you’ve been targeted by this scam, you should also contact the Federal Trade Commission and use their “FTC Complaint Assistant” at FTC.gov. Please add “IRS Telephone Scam” to the comments of your complaint.”
The IRS wants you to know that they never initiate contact with taxpayers via email to request personal or financial information. They also never ask for PINs, passwords or similar confidential access information for credit cards, banks for other accounts. If you receive an email claiming to be from the IRS, you should forward it to phishing@irs.gov.

**Investor Scams**
The Financial Industry Regulatory Authority (“FINRA”) recently published a warning to registered representatives about three different scams where registered representatives may be subject to “Firm Identity Theft”.
The first scheme involves scammers fraudulently using the identity of legitimate registered representatives and brokerage firms to con investors out of their money by building websites that mirror legitimate websites of broker-dealers and registered representatives. The scammers claim they are registered with FINRA and SIPC. Victims who fall for this tactic are tricked into making payments or investments through the site. The scam artists collect the money and then disappear.
The second one puts a new twist on an old tactic by perusing international investors with and “advance fee scheme” or “mirror fraud.” Again, scammers use the identity of a legitimate broker-dealer and contact investors with an attractive offer. Examples of these offers include lifting a stock restriction or purchasing investors’ shares for an amount significantly above their market value. In return, the investor is asked to pay certain fees and expenses in advance. Once the investor has paid the fees, the fake broker-dealer steals the money and disappears.
The last scheme involves fraudulent checks. The scammer, using the stolen identity of a registered broker-dealer, contacts a customer is an attractive offer, like offering to overpay for an item on Craigslist. When the scammer sends the check, it’s for a much larger amount than the agreed-upon price. The scammer then requests the seller to mail the difference back to the scammer. In an effort to convince the customer of the stolen identity, the fraudster will use the broker-dealer’s true address as the return address on the mail sent to the customer. Believing they are dealing with a real broker-dealer, the customer is persuaded to send money. But, when the seller cashes the original check, it bounces.

Protecting yourself from these scams requires vigilance. If someone contacts you with and offer that’s too good to be true, it likely is!