Fraud Prevention

Nine Cybersecurity Tips For Everyone

In today’s digital world, we live a life immersed in technology. It has become part of our culture and has revolutionized our perspective of the world while fundamentally altering the methods we use to stay informed with breaking news, interact with loved ones, stay up-to-date with friends and even complete our banking needs.

As with most new developments and innovations, there are risks involved in using technology. Throughout this guide, we will provide tips on how you can stay as safe as possible while in cyberspace. 

Download the free eBook

What are the warning signs of financial scams targeting older individuals? 

If you or someone you know has been targeted by a scam artist who is trying to steal money or personal information, you're not alone. According to the Senate Special Committee on Aging, older Americans lose an estimated $2.9 billion annually to fraud and exploitation, a number that is probably substantially underreported.1 

Most scams start with a call, an email, a text, or an official-looking letter that appears to be from a government agency or a legitimate company. Sometimes the scam artist will go door-to-door soliciting business or donations to charity.
 
Scam artists are very good at gaining the trust of well-meaning people by convincingly impersonating someone authoritative, knowledgeable, or trustworthy - such as an IRS agent, a tech repair person, or even a relative. They play on your sympathy or make convincing threats to pressure you to go along with a scam. "Send money or provide personal information right now," they say, "if you want to help someone or prevent something bad from happening." Here are some typical scenarios.

• IRS scam: "You owe back taxes and penalties. Send payment immediately via a wire transfer, or you will be arrested."
• Sweepstakes scam: "Congratulations, you've won a prize! To collect it, provide us with your bank account number so we can deposit a check."
• Grandparent scam: "Hi Grandma, it's me. Don't you recognize my voice? I've been in an accident and need money for car repairs. Send gift cards, and don't tell anyone because I'm embarrassed."
• Home repair scam: "I was just doing some work down the street for your neighbor, Bob, and I saw that you need me shingles replaces. I can do that for half the price I usually charge if you pay me in cash today."

If you are targeted, never give out personal information or send money. You don't need to make a quick decision. Call a friend, a relative, or the police for advice. Report the scam immediately to a fraud hotline such as the Senate Committee's toll-free hotline, (855) 303-9470.
 
1 U.S. Senate Special Committee on Aging, 2019

How can you avoid falling for the Social Security imposter scam?

The scam generally starts like this. You answer a call or retrieve a voicemail message that tells you to "press 1" to speak to a government "support representative" for help in reactivating your Social Security number. The number on your caller ID looks real, so you respond. The "agent" you reach tells you that your Social Security number has been suspended due to suspicious activity or because it has been involved in a crime. 

You're worried. You know how important it is to keep your Social Security number safe. So when the caller asks you to confirm this number to reactivate it, or says your bank account is about to be seized but the Social Security Administration (SSA) can safeguard it if you put your money on gift cards and provide the codes, you don't know what to do. If you balk, you may be reminded that if you don't act quickly, your accounts will be seized or frozen.
 
Although none of this is true (the SSA will never threaten to seize benefits or suspend umbers), many people have fallen for the Social Security imposter scam, and the numbers are rising. According to the Federal Trade Commission (FTC), more than 76,000 reports of the Social Security imposter scam were filed between April 2018 and March 2019. Reported losses during this period were $19 million, and almost half of the reports were filed in February and March 2019.1
 
Here are some tips directly from the FTC  help you avoid becoming a victim.
 
Do not trust caller ID. Scam calls may show up on caller ID as the Social Security Administration and look like the agency's real number.
 
Don't give the caller your Social Security number or other personal information. If you already did, visit IdentityTheft.gov/SSA to find out what steps you can take  protect your credit and our identity.
 
Check with the real Social Security Administration. The SSA will not contact you out the blue. But you can call the agency directly at (800) 772-1213 to find out if the SSA is really trying to reach you and why. (You can trust this number if you call it yourself.)
 
1 FTC Consumer Protection Data Spotlight, April 2019

What are some tips for creating a home inventory?

Imagine having to remember and describe every item in your home, especially after you've been the victim of a fire, theft, or natural disaster. Rather than relying on your memory, you may want to prepare a home inventory - a detailed record of all your personal property. This record can help substantiate an insurance claim, support a police report when items are stolen, or prove a loss to the IRS. Here are some tips to get started. 

Tour your property. A simple way to complete your inventory is to make a visual record of your belongings. Take a video of the contents of each room in your home and spaces where you have items stored, such as a basement, cellar, garage, or shed. Be sure to open cabinets, closets, and drawers, and pay special attention to valuable and hard-to-replace items. You can also use the tried-and-true, low-tech method of writing everything down in a notebook, or use a combined approach. Mobile inventory apps and software programs are available to guide you through the process.
 
Be thorough. Your home inventory should provide as many details as possible. For example, include purchase dates, estimated values, and serial and model numbers. If possible, locate receipts to support the cost of big-ticket items and attach copies of appraisals for valuables such as antiques, collectibles, and jewelry.
 
Keep it safe. In addition to keeping a copy of your inventory at your home where you can easily access it, store a copy elsewhere to protect it in the event that your home is damaged by a flood, fire, or other disaster. This might mean putting it in a safe deposit box, giving it to a trusted friend or family member for safekeeping, or storing it either on an external storage device that you can take with you or on a cloud-based service that provides easy and secure access.
 
Update it periodically. When you obtain a valuable or important item, add it to your inventory as soon as possible. Review your home inventory as least once a year for accuracy. You can also share it annually with your insurance agent or representative to help determine whether your policy coverages and limits are still adequate.

How can I tell if a crowdsourcing campaign is a scam?
 

Crowdsourcing can be an effective way to raise funds for a variety of causes, but it's also a great opportunity for scam artists to take advantage of your goodwill. Before you donate to a crowdsourcing campaign, help protect yourself from being scammed by following these tips. 

Checking the campaign creator's credibility. If you don't personally know the campaign creator, it might be worth your time to review his or her social media profiles. This should be easy to do, since most crowdsourcing platforms link social media accounts to campaigns. When you visit a profile, look for red flags. Does the profile seem new? Does the campaign creator have friends or followers listed on the profile? Does the campaign creator have just one social media account? Does the profile seem active or old/unused? Answering "yes" to any of these questions should cause you to question the legitimacy of a crowdsourcing campaign.
 
Research the crowdsourcing platform. Many different crowdsourcing platforms exist, from the well established to the startups with a no track record. Review a platform's terms and policies before you donate to one of its crowdsourcing campaigns. Find out how long it's been in business and whether it evaluates or checks out campaign creators. Determine whether the platform will refund money or take responsibility for a crowdsourcing campaign scam. Remember to look for the secure lock symbol and the letters https: in the address bar of your Internet browser - this indicates that you're navigating to a legitimate web address.
 
Consider the timing of the campaign. Be wary of campaigns that are created after national disasters. It's unfortunate, but scam artists often exploit tragedies to appeal to your sense of generosity. In the case of disaster relief, bear in mind that it's probably safer to donate money to established nonprofit organizations with proven track records than to a crowdsourcing campaign.
 
If you've been defrauded or suspect fraudulent activity, report your experience to the crowdsourcing platform. You can also file a complaint with the Federal Trade Commission (FTC).

What can I do to crack on robocalls?

You may not mind if a legitimate robocall provides a helpful announcement from your child's school or an appointment reminder from a doctor's office. But sadly, criminals often use robocalls to collect consumers' personal information and/or conduct various scams. Newer "spoofing" technology displays fake numbers to make it look as though calls are local, rather than coming from overseas, which could trick more people into answering the phone. 

Robocalls have been illegal since 2009 (unless the telemarketer has the consumer's prior consent). In mid-2017, federal agencies announced they are ramping up enforcement by fining violators and encouraging blocking technologies. What should you do if you want to help put an end to this nuisance?
 
1.  Don't answer calls when you don't recognize the phone number. If you pick up an unwanted robocall, just hang up. Don't answer "yes" or "no" questions, provide personal information, or press a number to "opt out." Responding to the call in any way verifies that it has reach a real number and could prompt additional calls.

2.  Look into robocall blacking solutions that may be offered by your phone service provider. If they're available, you may need to follow specific instructions to "opt in." Otherwise, consider a mobile app or cloud-based service designed to block robocalls; some of them are free or cost just a few dollars.

3.  Consider registering your phone number on the National Do Not Call Registry. While taking this step can help mitigate the amount of robocalls you receive, it's only a partial solution to the problem. The Federal Trade Commission advises consumers whose numbers are on the registry but still receive unwanted calls to report robocall violations at complaints.donotcall.gov. The phone numbers provided by consumers will be released each day to companies that are working on call-blocking technologies, which largely depend on "blacklists" with numbers associated with multiple complaints.

How can I protect myself from digital deception? 

Imagine that you receive an email with an urgent message asking you to verify your banking information by clicking on a link. Or maybe you get an enticing text message claiming that you've won a free vacation to the destination of your choice - all you have to do is click on the link you were sent. In both scenarios, clicking on the link causes you to play right into the hands of a cybercriminal seeking your sensitive information. Just like that, you're at risk for identity theft because you were tricked by a social engineering scam.  

Social engineering attacks are a form of digital deception in which cybercriminals psychologically manipulate victims into divulging sensitive information. Cybercriminals "engineer" believable scenarios designed to evoke an emotional response (curiosity, fear, empathy, or excitement) from their targets. As a result, people often react without thinking first due to curiosity or concern over the message that was sent. Since social engineering attacks appear in many forms and appeal to a variety of emotions, they can be especially difficult to identify.
 
Take steps to protect yourself from a social engineering scam. If you receive a message conveying a sense of urgency, slow down and read it carefully before reacting. Don't click on suspicious or unfamiliar links in emails, text messages, and instant messaging services. Hover your cursor over a link before clicking on it to see if it will bring you to a real URL. Don't forget to check the spelling of URLs - any mistakes indicate a scam website. Also be sure to look for the secure lock symbol and the letters https: in the address bar of your Internet browser. These are signs that you're navigating to a legitimate website.
 
Never download email attachments unless you can verify that the sender is legitimate. Similarly, don't send money to charities or organizations that request help unless you can follow up directly with the charitable group.
 
Be wary of unsolicited messages. If you get an email or a text that asks you for financial information or passwords, do not reply - delete it. Remember that social engineering scams can also be used over the phone. Use healthy skepticism when you receive calls that demand money or request sensitive information. Always be vigilant and think before acting.