How to Spot Scams

from the desk of Tina Jones, Information Security Officer

Have you ever received an email from someone claiming to be royalty? The sender says that you have inherited millions of dollars, and you must provide your financial information to access the money. You know this email isn't legitimate, so you delete it, yet there are many more scams perpetrated by criminals that sound more believable and aren't as easy to spot. Learning to identify and avoid these scams is the first step in protecting yourself. 

How to spot a phone scam 

Scammers who operate by phone can seem legitimate and are typically very persuasive! To draw you in, they might:

- Sound friendly, call you by your first name, and make small talk to get to know you

- Claim to work for a company or organization you trust such as: a bank, a software or other vendor you use, the police department, or a government agency

- Threaten you with fines or charges that must be paid immediately

- Mention exaggerated or fake prizes, products, or services such as credit and loans, extended car warranties, charitable causes, or computer support

- Ask for login credentials or personal sensitive information

- Request payments to be made using odd methods, like gift cards

- Use prerecorded messages or robocalls

How to spot an email scam 

Phishing emails are convincing and trick many people into providing personal data. Some signs of phishing emails are:

- Emails implorting you to act immediately, offering something that sounds too good to be true, or asking for personal or financial information

- Emails appearing to be from executive leadership you work with requesting information about you or colleagues that they usually do not request (for example, W2s)

- Unexpected emails appearing to be from people, organizations, or companies you trust that will ask you to click on a link and then disclose personal information. Always hover your mouse over the link to see if it will direct you to a legitimate website.

- Typos, vague and general wording, and nonspecific greetings like “Dear customer”

How to protect yourself

- If you receive a suspicious phone call or robocall, the easiest solution is to hang up. You can then block the caller’s phone number and register your phone number on the National Do Not Call Registry. 

- Do not click links or open attachments in emails you were not expecting.

- Do not enter any personal, login, or financial information when prompted by an unsolicited email.

- Do not respond to or forward emails you suspect to be a scam.

- If in doubt, contact the person or organization the email claims to have been sent by using contact information you find for yourself on their official website.

- If you get scam phone calls or phishing emails at home, hang up or delete the emails. If you get scam phone calls or phishing emails at work, let your organization’s security or information technology team know so they can help protect others from these scams.

Resources

https://www.consumer.ftc.gov/articles/0076-phone-scams

https://www.stopthinkconnect.org/tips-advice/general-tips-and-advice

https://staysafeonline.org/stay-safe-online/online-safety-basics/spam-and-phishing