Week 3: Online Safety

Scams and fraud can have severe financial and emotional impacts on older adults. Scammers often target older adults because they are perceived to be more trusting, may have significant savings, and may not be as familiar with newer technology. Understanding common scams, how to identify them, and what to do if you are scammed is crucial for protecting yourself and your loved ones.  This lesson will provide information and tools to avoid scams, and what to do if you fall victim to one of them.

Resources for Help

• AARP Fraud Watch Network: Provides information and resources to help older adults avoid scams. Visit AARP Fraud Watch Network for more details.

• National Consumer Protection Week: Offers tips and resources for protecting against fraud. Visit consumer.ftc.gov for more information.

• Eldercare Locator: A public service of the U.S. Administration on Aging that connects older adults to services. Visit eldercare.acl.gov or call 1-800-677-1116.

All of the articles below are taken from websites.  You can see the link under each one.  They may have been edited for brevity.

Scammer Alert: If Someone Calls You Using Any of These 12 Phrases You’re About To Be Scammed

https://www.msn.com/en-us/money/other/scammer-alert-if-someone-calls-you-using-any-of-these-12-phrases-you-re-about-to-be-scammed/ss-BB1maSlX

1. "This is an urgent public service announcement

When you hear this, your first reaction might be to listen closely and act quickly. Scammers use this phrase to create a sense of urgency, mimicking official alerts. The intentional use of this phrase causes people to bypass rational thinking and act without skepticism. But remember, genuine public services have other ways of getting in touch. Always double-check these alerts by contacting official sources through their verified channels.

2. "You have won a free vacation!"

It’s exciting to imagine vacations to sandy beaches and sunny skies, especially if it’s free. However, these offers are often too good to be true. Furthermore, they may lead to phishing attempts or hidden costs. This phrase is a classic hook for scams and should automatically put you on high alert. Always ignore such claims and report suspicious numbers to consumer protection agencies.

3. "I need to verify your account details."

This is a common tactic among scammers pretending to be representatives from your bank or a service provider. These types of scams have become even more common following a data breach. However, no credible organization would ask for sensitive details outright. Therefore, this phrase should be an immediate scammer alert.

When data breaches happen, organizations establish processes and procedures to contain them. If you receive such a request, hang up. Do not share any personal information. Instead, contact the institution directly using a known and secure method.

4. "There’s a problem with your payment."

This phrase preys on your fear of financial mishaps. Scammers know that people will do whatever is necessary to avoid additional fees and disruption of service. They use this phrase in the hope of catching you off guard so you provide them with payment information out of panic.

Rather than sharing your account information, check the validity of their claims first. Always verify any payment issues by logging into your account independently or calling customer service directly. These measures could prevent you from wasting time and money.

5. "Confirm your identity with your password."

If you hear this one, it’s a major red flag! Legitimate companies understand the security risks of sharing personal information. In fact, policies prevent them from asking for your password or security code over the phone.

When you hear this phrase, end the call immediately. Then, report the incident to the company being impersonated. It could help others from falling victim to these scams.

6. "This is your final warning."

Using threats of legal or financial consequences is a common tactic to intimidate people. However, it is also a scammer alert. Real organizations do not operate this way and will provide ample opportunity for resolution through proper channels. When you get this call, don’t panic. Instead, keep calm, don’t engage, and seek professional advice if needed.

7. "You owe taxes and must pay immediately."

This scam becomes especially prevalent around tax season and plays on people’s deep-seated fear of owing money to the government. Taxes induce a sense of anxiety for most citizens, and scammers exploit these feelings for their own gain. Remember, the IRS communicates through mail, not unexpected phone calls. You can always verify any tax claims directly through official IRS channels to protect your finances.

 8. "We’ve noticed suspicious activity on your account."

By suggesting that your account is at risk, scammers aim to make you act hastily to ‘protect’ your assets. However, impulsive decisions could put you at greater risk. This phrase is a trick to get your personal information or financial details. Never disclose these details if someone contacts you. Instead, reach out to your bank directly using official numbers, not those provided during a suspicious call.

9. "I’m calling from tech support."

If you didn’t request assistance, why would tech support call you? The answer shouldn’t surprise you. This is a tactic to gain access to your computer or personal information under the guise of fixing an issue. Some scammers are after information while others seek to sell you useless software. Don’t become an unsuspecting victim. Always verify the legitimacy of the call by contacting the company they claim to be representing.

10. "Can you hear me?"

This seems like a harmless question, right? Unfortunately, it’s not. It’s a method for scammers to record your voice saying “Yes,” which they can use to authorize fraudulent charges. When you hear this question, it’s best to hang up immediately. Then, check your accounts and statements for any unauthorized activity.

11. "Please make a donation."

Charity scams prey on your generosity, often during times of crisis. However, this shouldn’t prevent you from donating to causes and organizations you want to support. To ensure your donation goes to a legitimate cause, donate directly through trusted organizations’ websites instead. Never respond to unsolicited calls or provide payment information when people call you.

12. "You must decide right now."

Scammers use high-pressure tactics to force a quick decision. The goal is to get you to commit before you have the chance to think it through or consult others. However, you should never act impulsively when you make important decisions. Instead, take your time, seek advice, and never make hasty financial commitments over the phone.

Fraudsters and Social Security

https://edition.pagesuite.com/popovers/dynamic_article_popover.aspx

Social Security-related scams are prevalent, with fraudsters often redirecting benefits to unknown accounts using stolen personal information. Here’s how to protect yourself and what to do if you become a victim.

Immediate Actions:

1. Check Your Account:

   • Log into your Social Security account regularly to check for any unauthorized changes.

   • If you notice discrepancies, contact the Social Security Administration (SSA) immediately.

2. Report the Fraud:

   • Report the incident to the Office of the Inspector General (OIG) through their website or call 800-269-0271.

   • Contact the Federal Trade Commission (FTC) via their website (ftc.gov) or call 877-IDTHEFT (877-438-4338).

3. Secure Your Account:

   • Add an e-services block to prevent changes to your account information online. This can be removed only by contacting your local SSA office.

   • Set up a direct deposit fraud prevention block to stop any changes to your direct deposit information online or through financial institutions.

Preventative Measures:

1. Create a my Social Security Account:

   • Sign up at SSA.gov and create a secure account to monitor your benefits.

2. Be Skeptical of Calls:

   • Don’t trust caller ID if it says, “Social Security Administration.” It might be spoofed. Always call back using the main SSA line at 800-772-1213 or a local office using the office locator.

3. Report Scams Promptly:

   • Report any suspicious activity or scams to the OIG and FTC as soon as possible.

Steps to Recover Lost Benefits:

1. Contact SSA:

   • Immediately notify the SSA if you find any unauthorized changes. Be prepared for possible long hold times.

2. Get Help from a Representative:

   • If needed, appoint a trusted family member as your “representative payee” to handle your Social Security affairs. Note that SSA does not accept powers of attorney.

3. Follow Up Persistently:

   • Consistently follow up with the SSA and other authorities until the issue is resolved.

Additional Resources:

• Office of the Inspector General: Report Fraud

• Federal Trade Commission: FTC Website or call 877-IDTHEFT (877-438-4338)

• Social Security Administration: SSA Mainline

By taking these steps, you can help protect your Social Security benefits from fraudsters and recover more effectively if you become a victim. Stay vigilant and proactive in monitoring and securing your personal information.

Scamming the scammers

https://www.npr.org/2024/04/15/1243189142/scam-baiter-kitboga

Although we are not advocating this for most students, there are those who are baiting scammers in a way to decrease their effectiveness.  This includes a person known as a Kitboga, who is a software engineer who uses skills to scam the scammers.  Let’s look at how this works:

Who is Kitboga? Kitboga is a computer software engineer-turned-Twitch streamer who uses his skills to scam the scammers. He creates characters, like the elderly woman Edna, to engage with scammers, wasting their time and preventing them from targeting real victims. Kitboga has over a million followers on platforms like Twitch and YouTube.

Why Scam the Scammers?

1. Disrupt Scams: By engaging scammers, you can prevent them from contacting other potential victims.

2. Gather Information: Scammers often reveal information that can be reported to authorities.

3. Educate Others: Sharing your experiences can help others recognize and avoid scams.

Steps to Scam the Scammers:

1. Create a Persona:

   • Develop a character that scammers would find appealing, like an elderly person who seems vulnerable.

   • Use tools like voice changers to add authenticity to your persona.

2. Engage the Scammer:

   • Keep them on the line as long as possible by asking questions and expressing confusion.

   • Use humor and absurdity to keep the conversation going and waste their time.

3. Gather Information:

   • Note down any details the scammer provides, such as bank account numbers, names, and locations.

   • Record the conversation if possible, for evidence.

4. Report the Scam:

   • Submit the information to authorities like the Federal Trade Commission (FTC) and the Office of the Inspector General (OIG).

   •  Use the following contact details:

4. • • FTC: ftc.gov or call 877-IDTHEFT (877-438-4338)

     • OIG: oig.ssa.gov/report or call 800-269-0271

Protect Yourself from Scams:

1. Be Skeptical:

   • If you receive a call or email from someone claiming to be from a government agency, do not trust it immediately.

   • Verify the information by contacting the agency directly using official contact details.

2. Secure Your Accounts:

   • Create strong, unique passwords for all your accounts.

   • Enable two-factor authentication where possible.

3. Stay Informed:

   • Educate yourself about common scams by following scam baiters like Kitboga.

   • Watch videos and read articles to understand the latest tactics used by scammers.

Resources:

• Kitboga’s YouTube Channel: Kitboga

• Kitboga’s Twitch Channel: Kitboga

• Federal Trade Commission (FTC): FTC Website or call 877-IDTHEFT (877-438-4338)

• Office of the Inspector General (OIG): OIG Website or call 800-269-0271

What can someone do with your phone number

https://www.msn.com/en-us/money/other/here-s-what-hackers-can-do-with-just-your-cell-phone-number/ar-AAVWesA

Mine your private data

The easiest way for scammers to use your phone number maliciously is by simply typing it into a people search site, like WhoEasy, Whitepages, or Fast People Search. These sites can reveal personal information about you in less than a few seconds, according to tech expert Burton Kelso.

People search sites purchase your personal information and then sell it to people who want your data, like hackers. The information found through these sites includes your address, bankruptcies, criminal records, and family members' names and addresses. All of this can be used for blackmail, stalking, doxing, social media hacking, or identity theft.

 Reroute your number

Another tactic is to contact your mobile carrier provider claiming to be you, says Veronica Miller, cybersecurity expert at VPN overview. Then, the hacker can make it so your number routes to their phone. From there, the hacker will log into your email account. Of course, they don't have your password, but they don't need it. They just click "Forgot password" and get the reset link sent to their phone that now uses your phone number. Once the hacker has access to your email account, it's easy to gain access to any of your accounts.

While many service providers have some security features to prevent scammers from switching phones, if the person has your phone number, they may be able to find enough information about you to get past the security questions. Make sure to learn how to make a private phone call and keep your phone number safe. 

Spoof your number

Still wondering, what can someone do with your phone number? There were nearly 26 billion scam calls in 2019, according to data collected by YouMail, and scammers are getting smarter. Now they are using a technique called spoofing to make it easier to scam you. Spoofing is when someone makes your phone number pop up on a caller ID when it really isn't you that's making the call.

You may have noticed phone calls from numbers with your same area code, or identical to those you call often. When a scammer gets you to pick up, they have the chance to trick you into whatever scheme they've come up with by using specific phrases to sound genuine or fooling you into giving them your credit card information. Sometimes it's to trick you into answering a few questions, and when they have your "yes," or "no" recorded, they might use that in voice-activated scams.

It doesn't take much to spoof a phone number. There are apps and websites that allow scammers to simply type in a phone number and make a call. It's super easy and quick, which makes it appealing to scammers. (Thankfully there are also apps for privacy and security.)

Send you a texting scam

Scammers can also use your phone number to send you malicious text messages. This type of scam is called "smishing," according to Ray Walsh, digital privacy expert at ProPrivacy.

In these texts, scammers send links that can infect your phone with malware or that can steal your personal information, or they can straight-up scam you by pretending to be your bank, the IRS, or your doctor. By posing as someone you trust, the scammers will try to trick you into giving them personal information and credit card numbers.

Impersonate you or send you spyware

"Just as it is easy for a hacker to redirect a cell phone number from one carrier to another, it is also easy for hackers to send a message to a consumer to gain access and impersonate the individual," says Ravichandran. Often, hackers will send you a seemingly innocuous message that implores you to click a link to a fake website. This is called a phishing scam. Ravichandran says, "The website may appear legitimate, however, it could record your information to send to the hacker."

If you have ever visited an unknown website, clicked on a strange link, or connected an unfamiliar USB into your device, Ravichandran says these activities "open a consumer up to accidentally downloading malware. Hackers can infect your phone with software, leverage your data, and even extort you."

What to do if a scammer has your phone number

If the worst happens and a scammer gains access to your phone number, you still have options:

• Contact your service provider immediately and explain the situation.

• If need be, ask them to put a temporary freeze on your line so that scammers can't use your number.

• Contact people you know to warn them that your phone may have been compromised.

• To protect yourself from being held responsible for any potential crimes committed using your number, document all steps you've taken and everyone you've contacted, and keep track of the dates.

• Report your phone lost or stolen (if that's what happened).

• Update your contact information immediately on all relevant accounts (bank, social media, your kids' school) to protect more of your information from being compromised.

When AI is the scammer

AI Is Helping Scammers Outsmart You—and Your Bank (msn.com)

JPMorgan Chase's Approach to Combatting Identity Fraud: JPMorgan Chase uses large-language models to fight identity fraud and educates customers about scams. They emphasize that customers are the last line of defense and should never share personal information unless certain about the recipient. They recommend using credit cards for payments due to their protection features.

Rise in AI-Driven Scams: AI helps scammers by tailoring attacks using details from social media and data breaches, creating personalized and convincing messages. This has led to an increase in sophisticated social-engineering attacks. In 2023, scams resulted in $10 billion in losses, with actual figures possibly reaching $200 billion.

Examples of AI-Enhanced Scams:

• Joey Rosati: Fell for a jury-duty scam where the scammer knew personal details and almost wired $4,500 before realizing it was a scam.

• David Wenyu: Fell for a job scam due to desperation, receiving a fake check for work-from-home equipment.

Banks' Countermeasures: Banks use AI to monitor customer behavior patterns (e.g., typing cadence, device IP address) to detect anomalies. They flag suspicious activities and require additional verification if behavior doesn't match the user's profile. They also monitor for signs of coercion and use two-factor authentication to enhance security.

Recommendations for Consumers: Consumers are advised to use two-factor authentication and to be cautious about urgent requests for money. Scammers often create a false sense of urgency to manipulate victims. It's important to seek a second opinion and validate transactions if anything feels off.

Overall Impact of AI on Scams: AI has made scammers more effective, often outpacing banks in using technology for financial crime. As scammers become more adept, both financial institutions and consumers must adopt stronger security measures to protect against fraud.

Look before you scan- QR code scammers

https://www.theguardian.com/commentisfree/article/2024/jun/08/qr-code-scammers-phishing-quick-response-cybersecurity

The Hidden Risks of QR Codes: Convenience at a Cost

Imagine this scenario: You're heading to a meeting in an unfamiliar part of town. It's raining, and you're running late. After driving around for a while, you finally find an empty parking spot. Relief washes over you as you park, but there's a catch – the parking meter no longer accepts coins. Welcome to the 21st century, where payments are often made via smartphones.

Not to worry, you can pay by phone. There are instructions plastered all over the meter on how to pay using an app that, of course, you haven't downloaded yet. The rain intensifies, and there's no mobile signal. Your frustration mounts, but then you notice a Quick Response (QR) code on the meter. A simple scan should redirect you to a payment website. So, you scan it, make the payment, and rush off to your meeting. Problem solved. Or is it?

In your haste, you might not have scrutinized the QR code closely. Was it part of the official payment instructions from the local council, or was it a fraudulent sticker placed over the official code? If it's the latter, you’ve likely fallen victim to a scam.

This exact scenario happened to the sister of digital identity expert David Birch. She parked in a public car park, scanned a QR code to pay, and was directed to a seemingly legitimate website. After entering her debit card details, she realized the site was fraudulent and quickly informed her bank to block the transactions. Unfortunately, many people are not as vigilant and fall prey to these scams. QR codes have become a popular tool for criminals, with one cybersecurity vendor noting that QR codes were involved in a fifth of phishing campaigns detected in the last quarter of last year.

The Rise of QR Codes and Their Security Implications

In recent years, QR codes have become ubiquitous. From boarding passes to rail tickets and restaurant menus, QR codes are everywhere. The push for contactless solutions during the COVID-19 pandemic accelerated their adoption. While they are incredibly convenient, they also pose significant security risks.

QR codes are essentially two-dimensional barcodes that can store much more information than traditional barcodes. They are easy to create using free online services like QR Code Generator. This convenience is also exploited by scammers who generate malicious QR codes to direct users to harmful websites without exposing suspicious URLs.

The Expanding Attack Surface

The proliferation of QR codes has dramatically expanded the "attack surface" – the total area vulnerable to cyber-attacks. The ease with which QR codes can be generated and distributed makes them an attractive tool for cybercriminals.

Recognizing the threat, the US Federal Trade Commission (FTC) has issued consumer alerts about the dangers of QR codes. These alerts highlight scams such as fraudulent parking payments and those conducted via messaging systems. Scammers often create a sense of urgency to trick victims into scanning QR codes. For example, they might claim there's a problem with your package delivery, a bank account issue, or suspicious activity that requires immediate action.

Staying Safe: Best Practices for QR Code Use

To protect yourself from QR code scams, adopt a healthy skepticism and follow these safety tips:

1. Preview the URL: Many smartphones allow you to preview the URL embedded in a QR code before opening it. Use this feature to check the link.

2. Avoid Scanning Unsolicited QR Codes: Be cautious of QR codes in emails, texts, or junk mail.

3. Be Wary of Shortened URLs: Shortened URLs (like Bitly or TinyURL) can conceal the true destination. Avoid scanning these unless you trust the source.

4. Never Share Sensitive Information: Avoid entering bank details or personal information on websites accessed via QR codes.

5. Use Common Sense: Think before you scan and be cautious of any QR code that creates a sense of urgency or comes from an unverified source.

By staying vigilant and following these guidelines, you can enjoy the convenience of QR codes without falling victim to scams. Remember, technology can make life easier, but it also requires us to be more cautious and informed users.

FBI issues national financial warning on financial crime

https://www.al.com/news/2024/06/fbi-issues-national-financial-warning.html

The FBI has warned of a financial crime linked to Mexican cartels targeting timeshare owners, particularly wealthy older Americans. Over the past five years, more than 6,000 victims have reported losses exceeding $300 million. These scams are increasingly funding violent Mexican cartels.

Timeshare scammers use high-pressure sales tactics, fake documents, and impersonate trustworthy institutions to convince victims to pay upfront fees or taxes. They also pose as lawyers and government officials to extract more money by promising help or threatening legal action.

Warning signs include requests for upfront payments or power-of-attorney forms and threats of arrest or prosecution. To protect yourself, avoid answering calls from unknown numbers, stop communication if asked for upfront payments, and never send legal documents via email.