Online Scams and Phishing Thread Technology

[Son Of Jack]

Here is a general phishing/hacking thread where posters can sound out others regarding potentially dodgy emails/sites, or post info about cyber scams they know about.

Cyber scams are ever-present, and even though I know a little stuff in this area and continue to study it, I'm always just several steps short of being taken in myself if I don't take my routine steps and maintain the highest degree of suspicion.

Technically, I know how to operate phishing scams, fake calls (even once took myself in for a split second!!), how to clone/alter websites, redirect traffic, etc, yet I potentially stand to be taken in, eg if I were under great pressure. Nobody should feel bad about falling for these scams, there is space to learn.

Coming up to Christmas my junk mail is filling rapidly with phishing emails, and adverts for sites that might provide shoddy goods, or a "non-service".

My first alert here is regarding an email that has been doing the rounds:

[email protected]

It purports to come from Microsoft and typically states a hacker (usually) from Russia has managed to sign into your Microsoft account and knows your password, had accessed your email, cloud storage, etc etc. it is entirely fake and phishing. Do not click on the link or that in any other email. Go separately to a valid site unless you have determined fully that the email is entirely legitimate.

Most people "fall" for scams because their default thinking is that the rest of the world is generally as honest as they are.

 

[Dylan]

Another one from [email protected]



Fake

Microsoft account security alert (Legitimate Email)

If you receive a security alert from Microsoft and are concerned about its source, you'll know it's legitimate if it's from the Microsoft account team and sent from the address [email protected], like the following example. Learn more on Microsoft's support...

it.brown.edu

 

[Welshy]

I've got a couple of them, but in text messages to my phone rather than emails.

I've also got phone calls from a French number saying they need me to fill in a link on a website - different websites each time.

 

[Tom]

An interesting article for Which? consumer group, warning people about scams in 2023....

People are being warned to watch out for bank scams in 2023 — including offers of online "bargains" or "get rich quick" schemes.

Jenny Ross, Which? Money editor, said: "Scammers are relentless when it comes to wanting our personal information and ultimately our money.

"And while their tactics will no doubt continue to evolve, we think these scams are the main ones to watch out for.

"Banks will never ask you for personal information, nor will they try to hurry you into making a decision. If this happens to you – whether by text, email or over the phone, step back and think about what they're asking. If it looks too good to be true, it usually is."

Here are some scams Which? is warning people to look out for in 2023:

1. Money mule requests

Money mule requests happen when people, either knowingly or unwittingly, allow a criminal to use their bank account to move stolen money.

These will often appear on social media posts or emails.

Tactics employed include sending funds "in error" which people are asked to return to a different bank account, asking people to apply for credit or bank cards on behalf of someone else, or convincing people to move money sent to their account (taking a cut) as a "favour".

Offences for this kind of scam can result in up to 14 years imprisonment, Which? said.

2. Card theft

Which? is warning consumers to remain vigilant by keeping a close eye on financial accounts and personal credit reports, notifying banks of anything unusual immediately.

Most banks will offer free balance and payment text or email alerts. Where possible, use ATMs located inside bank branches as these are less likely to have been tampered with, the consumer group said.

3. Fake apps that target bank accounts

Which? said people should read reviews of apps and developers as these might give a clue as to their legitimacy.

4. Spoof calls or texts

A common technique deployed by fraudsters is to imitate legitimate companies, often banks.

Scammers may also make automated calls with pre-recorded messages inviting people to press numbers on the keypad to speak to them about an issue, such as a suspect payment.

Criminal gangs will often have personal details about victims already, making the scam more believable. Fake texts are also a way of enticing people to click on links that can at first appear legitimate.

Which? said people should never simply trust the caller ID that comes up on a call. Banks will never ask for personal information to be handed over on the phone. If there are concerns about the authenticity of a message, contact your bank or card issuer on a trusted method.

5. Online purchase scams

Criminal gangs pay for fake or misleading adverts online in a bid to lure unsuspecting victims in, often by offering low prices for high-value items, such as mobile phones or laptops.

Warning signs of a fake website may include spelling and grammatical mistakes and a lack of contact details.

Which? suggested people should stick to trusted retailers and remember that paying via bank transfer may offer less protection than paying by card.

 

[Ghost]

This is more related to scam calls but is something of which I was unaware until today. The existence of a single "emergency" number to contact your bank if you've received a scam call and need to speak to the bank to check on your account.

The number is 159, which apparently takes you to a voice dialogue to determine which bank you need, then onto the relevant department. It has apparently been available for a couple of years, but doesn't seem to have been widely publicised. It's obviously still necessary to ensure that the line has cleared from the scam call, or to ring from a different phone, to be sure your call is going to the correct place.

Are others aware of this, or have even used it? Did it work successfully and/or quickly? I usually end up on hold for anything up to half an hour when using the number on my bank card.

https://www.moneysavingexpert.com/news/2021/09/stop--hang-up--and-call-159-if-you-re-worried-about-bank-scam-ca/

 

[Hedonistic Blonde]

Here's a new one I've not had before, an email telling me my Disney+ account has expired (I don't have one), but I can extend for free for ninety days as part of the loyalty programme. Of course, they need my credit card details to verify my account.

Looked on the Disney website for an address to forward phishing emails to for their attention, but looks like they don't have one as the help page just says to delete the email and don't click any links.

 

[Amelia]

I have just opened my inbox and found a purported email from TV licensing regarding "your latest direct debit" and the implications inherent.

Since I pay the whole annual subscription as soon as it is due and have a receipt for same, I had no worry whatsoever and that email has gone into the spam folder after blocking both the sender and the domain.

I do worry about elderly people who pay by direct debit receiving such an email

 

[Jess]

Received this via text message tonight from this number +44 7917 979920 (don't click the link)

UK home office Notice For You:
According to the reduction of winter heating subsidies, the living expenses subsidy will be paid as a result of the parliamentary decision.
When you receive the information, it means that you have obtained the qualification to apply. The application channel will be closed on October 19, 2024.
Please update the information in the link and we will distribute the living allowance in early November.

Warning! | The account that created this link has been suspended

bit.ly

Thank you for your support to the UK home office.

It is possible my phone number could have been leaked in a hack - I don't receive any benefits or living expenses.

Sadly, some people will fall for things like this. It is sickening that they target the elderly or those who aren't so well off.

 

[Hera]

Yesterday a transaction popped up on my PayPal (and connected bank account) for £22.95 for something bought from "eBay Commerce UK Ltd". I had not bought anything from eBay.

The name and address for whatever had been purchased was going to a name and address in Leicester I had never heard of. eBay confirmed what was purchased and to take this up with PayPal.

I contacted PayPal and basically, she told me that a third party was not involved which is obviously quite concerning. 100% I did not order anything. She would open a case. I have since changed my password.

Last night, Paypal confirmed the £22.95 was going to be refunded but I have just had an email saying "there was no unauthorised use"

I really just don't understand this

Any advice?

 

[David76]

I'd contact your bank in case your card has been compromised.

Also, make sure you change your eBay password too.

Hope you get it sorted soon. It is not a nice feeling knowing someone could take money from your bank account or use your payment methods for their own use.