Scam of the Day
Scam of the day – August 22, 2021 – T-Mobile Data Breach Update
Last week I reported to you about a data breach at T-Mobile initially discovered when hackers started offering for sale on the Dark Web data of what they said was 100 million customers of phone carrier T-Mobile for sale. T- Mobile confirmed the data breach although they say that the number of customers affected was 49 million people. The information being sold includes names, phone numbers, Social Security numbers and addresses. Also being sold are the PINS used by some T-Mobile customers to protect their accounts from identity theft, but now are in the hands of hackers. This type of information poses a tremendous threat to victims of the data breach, which is the sixth for T-Mobile in the last four years. Social Security numbers in particular can be used by identity thieves to apply for credit cards and loans in your name. In addition, the phone numbers and the fact that the victims of the data breach are known to be T-Mobile customers to create phony phishing text messages, called smishing, posing as T-Mobile and luring the targeted victim into clicking on a link in the text message that can download destructive malware.
T-Mobile is still investigating the data breach, but has agreed to offer two years of free identity theft protection services including credit monitoring. Here is a link to T-Mobile’s offer of free identity theft protection services. https://www.t-mobile.com/brand/data-breach-2021/next-steps
TIPS
So what do you do if you are a T-Mobile customer who may be affected by this latest data breach. Perhaps the first thing you should do is something you should have already done, but as the Chinese proverb says, “the best time to plant a tree is twenty years ago, the second best time is now.” Freeze your credit at each of the three major credit reporting bureaus.
https://www.transunion.com/credit-freeze/place-credit-freeze
https://www.experian.com/freeze/center.html
For those of you receiving the Scam of the day through an email, I just want to remind you that if you want to see the ever increasing list of Coronavirus scams go to the first page of the http://www.scamicide.com website and click on the tab at the top of the page that indicates “Coronavirus Scams.” Scamicide has been cited by the New York Times as one of three top sources for information about Coronavirus related scams.
If you are not a subscriber to Scamicide.com and would like to receive daily emails with the Scam of the day, all you need to do is sign up for free using this link. https://scamicide.com/scam-of-the-day/
Scam of the day – August 21, 2021 – FBI Issues Warning About Virtual Kidnappings
I have been warning you about phony kidnapping scams, also known as virtual kidnapping, for eight years. The scam starts with a telephone call informing the person answering the phone that a child or other relative has been kidnapped and if the person receiving the call does not respond by wiring money right away, the relative will be killed. As with so many scams, we are often our own worst enemy and this scam is no exception. In many instances, the scammers gather personal information about the intended scam victims from information that the intended victims or members of their families post on social media. Armed with personal information gathered from social media, a scammer can describe the supposed kidnapped victim or provide personal information that would make it appear that indeed they actually do have the person in their custody. Sometimes the phony kidnappers manipulate your Caller ID through a technique called “spoofing” to make it appear that the call is coming from the supposedly kidnapped family member’s cell phone. Recently, the FBI issued a warning about virtual kidnapping scams targeting people in western Montana, but these scams are perpetrated throughout the rest of the country, as well.
Many of the fake kidnapping scams, according to the FBI. are originating with calls from Mexican prisons, where in most instances the calls are being made by prisoners who have bribed guards to supply them with cell phones.
TIPS
Always be skeptical if you receive such a call. Never wire money to anyone for anything unless you are totally convinced that what you are doing is legitimate because unlike paying for something with a credit card, once your wired funds have been sent, they are impossible to get back. Talk to the alleged kidnapper as long as possible, thereby giving someone else with you the time to call or text the alleged kidnap victim on his or her smartphone. If the purported kidnapping victim is a young child, call the school to confirm that he or she is safe. You also could ask the kidnapper to describe your relative as well as provide information, such as his or her birth date, which could be found on a driver’s license, however, it is important to remember that much of this kind of information may be available through social media or elsewhere on the Internet. It also can be helpful for the family to have a code word to use to immediately recognize that this is a scam. If the kidnapper can’t provide the code word, it is clear that it is a scam.
Many of these kidnapping scams are originating in Mexico so be particularly skeptical if you receive the telephone call from Mexico which has many area codes which can be found by clicking on this link. http://dialcode.org/North_America/Mexico/ Other hotspots for this scam have been in Taiwan and Cuba.
For those of you receiving the Scam of the day through an email, I just want to remind you that if you want to see the ever increasing list of Coronavirus scams go to the first page of the http://www.scamicide.com website and click on the tab at the top of the page that indicates “Coronavirus Scams.” Scamicide has been cited by the New York Times as one of three top sources for information about Coronavirus related scams.
If you are not a subscriber to Scamicide.com and would like to receive daily emails with the Scam of the day, all you need to do is sign up for free using this link. https://scamicide.com/scam-of-the-day/
Scam of the day – August 20, 2021 – AOL Phishing Email
Today’s Scam of the day is about a phishing email presently circulating that attempts to lure you into clicking on a link in order to continue using your AOL account. Millions of people still use AOL. One reason for this is that you get greater email privacy when compared to some other email carriers. Due to its popularity, scammers and identity thieves often send out phishing emails that appear to come from AOL, such as the one reproduced below that was sent to me by a Scamicide reader. If you click on the link in the email where it reads “Click here to upgrade” one of two things can occur and both are bad. Either you will end up providing personal information to an identity thief or you will, merely by clicking on the link, download dangerous malware such as ransomware on to your phone, computer or other device.
Here is the email presently being circulated. The link where it reads ” Click here to upgrade” has been disabled. If you had hovered your mouse over the original link, you would have seen that it would have taken you to a site that wasn’t related to AOL.
We are closing all old versions of our Mailbox as from August 9th. Please follow the link below to update your account to new version:
Click here to upgrade
Thank You. Please do not reply to this message. Mail sent to this address cannot be answered.
© 2021 All rights reserved.`1X
TIPS
When AOL communicates with its customers about their accounts, they do so by AOL Certified Mail, which will appear as a blue envelope in your inbox and will have an official AOL Mail seal on the border of the email. No official AOL Mail seal appears in the inbox. This email also does not refer to you in the salutation. Whenever you get an email, you cannot be sure who is really sending it. In the case of this email, the email address of the sender had no relation to AOL and most likely was the email address of someone whose email account was hacked and made a part of a botnet of computers used by cybercriminals to send such communications. Never click on a link unless you are absolutely sure that it is legitimate. If you think the email might be legitimate, the best thing to do is to contact the real company that the email purports to be from at an email address or phone number that you know is accurate in order to find out if the communication was legitimate or not.
For those of you receiving the Scam of the day through an email, I just want to remind you that if you want to see the ever increasing list of Coronavirus scams go to the first page of the http://www.scamicide.com website and click on the tab at the top of the page that indicates “Coronavirus Scams.” Scamicide has been cited by the New York Times as one of three top sources for information about Coronavirus related scams.
If you are not a subscriber to Scamicide.com and would like to receive daily emails with the Scam of the day, all you need to do is sign up for free using this link. https://scamicide.com/scam-of-the-day/
Scam of the day – August 19, 2021 – Cryptocurrency Scammer Pleads Guilty
John DeMarr recently pleaded guilty to criminal charges related to his participation in a massive cryptocurrency scam that swindled close to 500 investors out of more than 11 million dollars. The scam was a typical cryptocurrency scam in which the criminals led by accused criminal Kristijan Krstic promised up to 200% gains in two to three months to be derived from crypto-mining. Krstic and 15 other defendants have also been charged by federal prosecutors with operating 20 other cryptocurrency scams in which they stole approximately 70 million dollars from their victims. In these scams, victims were provided false statements that indicated their investments were growing substantially although the truth is that nothing had actually been invested. It was just a large Ponzi scheme. Former action movie star Steven Seagal was hired by the scammers to endorse the phony investment scam. Seagal later paid $300,000 in fines for illegally touting the investment without disclosing that his was a paid endorsement. Seagal also later withdrew his endorsement when he learned that it was a scam according to his manager.
The Securities and Exchange Commission (SEC) has long warned investors about cryptocurrency related scams including investments in confusing cryptocurrency advisory and trading systems as well as cryptocurrency mining farms. Quite often these scams promise high guaranteed returns with little or no risk. Although cryptocurrencies, such as Bitcoin, may seem to be new. I have been writing in Scamicide.com about cryptocurrency scams for five years. Cryptocurrencies are legitimate, but scammers are increasingly taking advantage of the public’s fascination with cryptocurrencies to take old forms of scams and update them with a cryptocurrency twist. The perception of many in the public is that cryptocurrencies offer an easy path to riches coupled with many people violating the cardinal rule of investing by investing in things that they do not understand creates a perfect storm for a wide variety of cryptocurrency scams..
A good example of what another type of cryptocurrency scam looks like can be found by going to this website touting HoweyCoins.
https://www.howeycoins.com/index.html
While HoweyCoins may appear to provide a lucrative investment opportunity, there is no such thing as HoweyCoins. It is a scam. Fortunately, it is a scam website that was set up by the Securities and Exchange Commission to serve as a warning to unwary investors about the dangers of cryptocurrency scams.
TIPS
As I have mentioned many times previously, you should never invest in anything that you do not fully understand. Cryptocurrency scams quite often involve complicated language and investment terms that is purposefully unclear in an effort to confuse potential investors from understanding the real facts. You also should not invest in anything without investigating the people offering the investments. You can go to http://www.investor.gov to learn about the licensing and registration status of someone offering to sell you investments. In addition, as always, if the investment sounds too good to be true, it usually is. Facebook for a time banned all advertisements promoting cryptocurrencies due to the plethora of cryptocurrency scams, but has reversed this position and now does accept ads for cryptocurrencies. Some of the things to be on the lookout for in regard to cryptocurrency scams are promises of high, guaranteed returns on your investment such as was done by DeMarr and Krstic, false claims of being SEC compliant, allowing you to invest using your credit card and pump and dump scams. For more information about pump and dump scams related to cryptocurrencies, check out the Scam of the day for April 11, 2018. https://scamicide.com/2018/04/10/scam-of-the-day-april-11-2018-new-pump-and-dump-cryptocurrency-scam/
Scam of the day – August 18, 2021 – Another Major Data Breach at T-Mobile
Often the first indication that a company has suffered a data breach is when the data stolen by hackers appears for sale on the Dark Web, that part of the Internet where criminals buy and sell goods and services. This is what appears to be the case in regard to a data breach at T-Mobile as a hackers is offering data of 100 million customers of phone carrier T-Mobile for sale for 6 bitcoin (approximately $280,000). The information being sold includes names, phone numbers, Social Security numbers and addresses. This type of information poses a tremendous threat to victims of the data breach, which is the sixth for T-Mobile in the last four years. Social Security numbers in particular can be used by identity thieves to apply for credit cards and loans in your name. In addition, the phone numbers and the fact that the victims of the data breach are known to be T-Mobile customers to create phony phishing text messages, called smishing, posing as T-Mobile and luring the targeted victim into clicking on a link in the text message that can download destructive malware.
T-Mobile is still investigating the data breach. Here is a link to their most recent statement. https://www.t-mobile.com/news/network/cybersecurity-incident-update-august-2021 As further developments occur, I will report them to you.
TIPS
So what do you do if you are a T-Mobile customer who may be affected by this latest data breach. Perhaps the first thing you should do is something you should have already done, but as the Chinese proverb says, “the best time to plant a tree is twenty years ago, the second best time is now.” Freeze your credit at each of the three major credit reporting bureaus.
https://www.transunion.com/credit-freeze/place-credit-freeze
https://www.experian.com/freeze/center.html
For those of you receiving the Scam of the day through an email, I just want to remind you that if you want to see the ever increasing list of Coronavirus scams go to the first page of the http://www.scamicide.com website and click on the tab at the top of the page that indicates “Coronavirus Scams.” Scamicide has been cited by the New York Times as one of three top sources for information about Coronavirus related scams.
If you are not a subscriber to Scamicide.com and would like to receive daily emails with the Scam of the day, all you need to do is sign up for free using this link. https://scamicide.com/scam-of-the-day/
Scam of the day – August 17, 2021 – TSA PreCheck Scam
After more than a year of dramatically reduced air travel, the summer skies are quite busy as are airports and with busy airports come long, aggravating security check-ins. Fortunately, the Transportation Security Administration (TSA) has a long standing program called TSA PreCheck which enables you to go through an expedited screening at the airport in special lines without having to remove your shoes, belts or jackets. According to the TSA, during this past July 96% of TSA PreCheck passengers waited less than five minutes to get through security and as a TSA PreCheck passenger, I can affirm that my experience traveling last month was pretty smooth.
In order to obtain PreCheck status you need to both apply online and then schedule an appointment at one of 380 enrollment centers. The in-person appointment which includes fingerprinting and a background check is generally completed in ten minutes.
Unfortunately, scammers, of course, have been taking advantage of people trying to sign up for the TSA PreCheck program and are setting up phony websites that appear to be official websites of the TSA. They then lure you into providing personal information they use to make you a victim of identity theft as well as steal the money they charge you online for a phony TSA PreCheck enrollment.
TIPS
Part of the problem is that some sophisticated scammers are adept at manipulating the algorithms used by Google Chrome and other search engines so that the phony websites appear high on a search. Merely because a website appears high on a search does not mean that it is legitimate. The only legitimate sites where you can apply for the TSA PreCheck program are https://www.tsa.gov/precheck and https://universalenroll.dhs.gov/
Also, it is important to note that when you first apply for the TSA PreCheck program, you cannot pay online. You can register for the program, but you pay when you have your in-person appointment. Therefore any site that asks you to pay online for your initial TSA PreCheck status is a scam. TSA PreCheck status is good for five years, but it can be renewed. When you renew, you can do the entire process including payment online.
For those of you receiving the Scam of the day through an email, I just want to remind you that if you want to see the ever increasing list of Coronavirus scams go to the first page of the http://www.scamicide.com website and click on the tab at the top of the page that indicates “Coronavirus Scams.” Scamicide has been cited by the New York Times as one of three top sources for information about Coronavirus related scams.
If you are not a subscriber to Scamicide.com and would like to receive daily emails with the Scam of the day, all you need to do is sign up for free using this link. https://scamicide.com/scam-of-the-day/
Scam of the day – August 16, 2021 – Financial Advisor Data Breach
Recently, investment advisors Saybrook Fund Advisors LLC suffered a major data breach in which a cybercriminal hacked into the email account of one of Saybrook’s employees and was able to access sensitive personal data contained in emails and attachments to emails from the account between March 18, 2021 and March 29, 2021. The stolen information included Social Security numbers, driver’s license numbers, credit and debit card information, health insurance information, login credentials and more, putting the affected clients of Saybrook in serious danger of identity theft. The compromise of their Social Security number is particularly threatening to the affected clients.
Personal information, such as the information contained in the data breach is used by cybercriminals not just to directly steal the identities of the affected people, but also to create specifically targeted spear phishing emails and text messages (called smishing) to lure people into clicking on malware infected links or providing personal information that will be used to make you a victim of identity theft. While many common phishing emails and text messages are easily recognized as phony, sophisticated spear phishing emails and text messages can be tailored by the criminals to our own interests using the information obtained through the data breach in order to appear to be trustworthy which makes them quite dangerous.
TIPS
One important lesson is to limit the amount of personal information that you provide to companies and websites whenever possible. You are only as safe as the places with your information with the weakest security and it would appear that Saybrook did not have strong encryption and other protocols in place to protect the sensitive data. It is also critical that we all remember that whenever we get an email, text message or phone call, we can never be sure who is really contacting us so you should never click on links or provide personal information in response to such communications unless you have absolutely confirmed that the communication was legitimate. Trust me, you can’t trust anyone.
https://www.transunion.com/credit-freeze/place-credit-freeze
https://www.experian.com/freeze/center.html
For those of you receiving the Scam of the day through an email, I just want to remind you that if you want to see the ever increasing list of Coronavirus scams go to the first page of the http://www.scamicide.com website and click on the tab at the top of the page that indicates “Coronavirus Scams.” Scamicide has been cited by the New York Times as one of three top sources for information about Coronavirus related scams.
If you are not a subscriber to Scamicide.com and would like to receive daily emails with the Scam of the day, all you need to do is sign up for free using this link. https://scamicide.com/scam-of-the-day/
Scam of the day – August 14, 2021 – Yet Another Mavis Wanczyk Instagram Scam
I have been writing about scams related to Mavis Wanczyk for four years but recently I have received many emails from Scamicide readers telling me about various new incarnations of a variety of scams that share the same hook which is that Mavis Wanczyk is giving money away to lucky people. Many of you may not remember the name of Mavis Wanczyk, but she was the lucky winner of a 758 million dollar Powerball drawing in 2017. Not long after she claimed her prize, a scam started appearing in which many people received emails with the message line referring to the Mavis Wanczyk Cash Grant. The email indicated that you were chosen to receive a large cash grant from Mavis Wanczyk. All the lucky strangers receiving the emails had to do was provide personal information in order to qualify for the grant. In addition, phony social media accounts on Twitter, Facebook and Instagram were also set up in Ms. Wanczyk’s name through which people were contacted with the same phony offer of free money informing them that in order to qualify for the grant they merely needed to provide personal information.
Last year, I told you how the scams are also appearing in large numbers through various Instagram accounts and as fast as Instagram closes down one phony Mavis Wanczyk account, another pops up. A Scamicide reader noted that one of the recent phony Instagram accounts purporting to be that of Mavis Wanczyk is mavislwanczyk4791, which is still active. Many of the versions of this scam now circulating promise $20,000 in return for payments to cover administrative costs. In another creative version of the scam, the targeted victim is told that he or she would receive $20,000 delivered in person within 24 hours, but shortly thereafter receives a text message in which he is told that there is a delay because money is needed for gas and administrative costs to process the necessary paper work. This text message was followed up by another text message in which the targeted victim is told that the person delivering the check was stopped by an FBI agent and that another fee had to be paid. Why an FBI agent would be involved or require an additional payment is certainly unclear.
Here is a link to the present phony Instagram account purporting to be of Mavis Wanczyk. It is a very slick presentation with a number of photos. Hopefully, Instagram will take down the account soon. https://www.instagram.com/mavislwanczyk4791/?hl=en
TIPS
It is difficult to win a lottery you have entered. It is impossible to win one that you have never entered and neither lottery winners, nor anyone else is sending out messages through the Internet offering free money to anyone who responds with personal information. Never give out personal information that can make you vulnerable to identity theft unless you have absolutely verified that the party requesting the personal information is legitimate and has a legitimate need for the information. Also never pay anything to a lottery claiming you owe fees in order to claim your prize. This is a telltale sign of a scam. No legitimate lottery requires the payment of a fee to collect your winnings or requires you to pay the lottery income taxes on the prize. While income taxes are due on lottery winnings, those taxes are either deducted by the lottery sponsor before giving you your prize or the prize is given to you in full and you are responsible for the payment of any taxes. No lottery collects taxes on behalf of the IRS.
Also, neither Mavis Wanczyk nor any other lottery winner is giving away money to strangers.
For those of you receiving the Scam of the day through an email, I just want to remind you that if you want to see the ever increasing list of Coronavirus scams go to the first page of the http://www.scamicide.com website and click on the tab at the top of the page that indicates “Coronavirus Scams.” Scamicide was recently cited by the New York Times as one of three top sources for information about Coronavirus related scams.
If you are not a subscriber to Scamicide.com and would like to receive daily emails with the Scam of the day, all you need to do is to go to the bottom of the initial page of http://www.scamicide.com and insert your email address where it indicates “Sign up for this blog.”
Scam of the day – August 13, 2021 – PayPal Phishing Email
The phony invoice scam is a common scam popular with scammers because it is quite effective. It starts when you receive an email that purports to be from a popular company with which many of us do business that indicates that you owe them a significant payment. The scammers count on people being concerned that they are being wrongfully charged for a product they did not order. You are provided a telephone number to call if you dispute the bill. If you call the number, you will be prompted to provide personal information that will be used to make you a victim of identity theft.
This email appears to come from PayPal. As always, the purpose of a phishing email is to lure you into clicking on links contained within the email or providing personal information, in this case by phone if you call to dispute the phony bill . If you click on links in phishing emails, you end up downloading malware and if you provide the requested information, it ends up being used to make you a victim of identity theft. This particular phishing email provides a phone number to call if you wish to dispute the obviously phony invoice. If you call the number in the phishing email you will be asked for personal information that will be used to make you a victim of identity theft.
There are a number of red flags that indicate that this is a scam. Your name does not appear anywhere in the invoice. Only your email address appears in the phony invoice. Also, the email was sent from an email address that appears to have nothing to do with PayPal, but is most likely the email address of someone whose email account was hacked and used to send out these scam emails. Also note the misspelling of the word “customer” at the end of the invoice and the words “toll free” misspelled by making them one word.
Here is a copy of the invoice being circulated.
PayPal
Transaction Number: PP#13231934029 Order Date: Tuesday, July 27, 2021
,Order for Ebay Gift Card of 499.99 USD has been confirmed.
Thank you for your order, It may take time for this trasaction to show in your account statement, If you didn’t recognize this charge please contact our customer care toll free at +1(855) 835 7141. You sent a payment of $499.99 to Ebay Gift Cards.(Pay@Ebay.Com)
Your order details are:Order ID – 9896-69896-6596-76032 Total Amount – 499.99 USD Product Name – Ebay Gift Cards Payment Method – Online/Card Transaction Date – Tuesday, July 27, 2021.
Merchant Ebay Gift Cards Pay@Ebay.Com
Transaction Date – Tuesday, July 27 2021.
Delivery Address – Confirmed
Dispatch Details
Registered Email Address – Stevenjjweisman@Aol.Com
The seller hasn’t provided any dispatch details yet. Pay Pal, Manager, Thanks & Regard,
For any query of this transaction contact our customare care Tollfree +1(855) 835 7141.
TIPS
Once, I received a large invoice from a company with which I do business for goods I did not order, but rather than click on the link provided in the email, I went directly to the company’s website to question the invoice. When the website came up, the first thing I saw was a large announcement that the invoice was a scam and that many people had received these phony invoices. If you ever receive a phony invoice such as this and you think that it may possibly be true, don’t click on links or call phone numbers provided in the email. Rather contact the real company directly at a phone number or website that you know is legitimate where you can confirm that the phishing invoice was a scam.
Never click on links or download attachments in emails or text messages unless you have absolutely confirmed that they are legitimate and don’t call companies at telephone numbers that appear in the email such as this one. Instead, if the email appears to come from a legitimate company, you can call them at a telephone number you confirm is legitimate . Don’t call the number that appears in the email. In the case of PayPal, the real telephone number to call for customer service is 888-221-1161.
For those of you receiving the Scam of the day through an email, I just want to remind you that if you want to see the ever increasing list of Coronavirus scams go to the first page of the http://www.scamicide.com website and click on the tab at the top of the page that indicates “Coronavirus Scams.” Scamicide has been cited by the New York Times as one of three top sources for information about Coronavirus related scams.
If you are not a subscriber to Scamicide.com and would like to receive daily emails with the Scam of the day, all you need to do is sign up for free using this link. https://scamicide.com/scam-of-the-day/
