|
Now more than ever – you have to be ultra cautious of what’s lurking
inside your inbox. The scammers are getting smarter every day, and as soon as we
wise up to a new trick, they’ve already got another on the loose.
So you’ve likely already heard of “Phishing”…the term being used to describe
a type of identity theft where scammers imitate legitimate companies in e-mails
to entice people to share user names, passwords, account information or credit
card numbers. The term “Phishing” comes from the fact that Internet scammers are
using increasingly sophisticated lures as they "fish" for users' private
information. The most common ploy is to copy the look and feel of a web page
from a major company, and then use that design to set up a nearly identical page
or email communication in order to deceive consumers.
But now there’s a whole new “Phishing” scam that’s even more dangerous than
the last. Now just by clicking the links to some emails – without entering any
personal information at all – you may unknowingly download a program that will
lie in wait on your computer until you visit one of your financial websites. The
prey? Your passwords, account numbers, credit card and ID information that you
may type in when you do visit your own bank account online, or other legitimate
financial or retail sites.
Just clicking the link may be enough to identify you as a “clicker”, which
puts your name at the top of list to be sold to other scammers. Soon enough a
flood of Phishing emails are on their way to you!
How can you protect yourself? Here are a few quick tips.
Stay on guard. Be cautious of any email that is using scare
tactics about security breaches, or urgently requiring you to provide
information online regarding your financial accounts. This includes notices from
web retailers asking you to confirm your order information.
Purge. If you get an email from a financial institution, kill it
and call for verification. Your bank, financial institution, or credit card
company will rarely, if ever, contact you by email, especially considering the
increasing frequency of these scams.
Be “S”ecure. Before you give any web site your credit card, make
sure it’s a secure site by looking for “https://” in the browser tool bar, not
just “http://”.
Vaccinate. Keep your anti-virus and firewall software up to
date. While no virus protection is completely foolproof, be sure to keep as
up-to-date as possible on your protection software. It’s a minor investment to
make considering what’s at risk.
Double check. Carefully review your credit card statements and
bank statements online frequently to monitor and catch any irregular
activity.
Report. The Anti-Phishing Working Group (APWG) says the number
of reported incidents of Phishing scam climbed 800% in the first six months of
2004, and a staggering 4000% in the six months between November 2003 and May
2004. With mass e-mailings, each of these unique attacks can potentially hit
thousands, if not millions, of people. When you get some bogus bait…take a
minute to report it and help slow the disease. Forward the information to spam@uce.gov, reportphishing@antiphishing.org and to the "abuse" e-mail
address at the company that is being spoofed (e.g. "spoof@ebay.com").
For additional information on Phishing, check out the following
websites:
Guarding Your Financial Privacy
FTC’s Identity Theft
site |