News & Insights

Fairport’s Five Most Common Cyber Scams and How to Avoid Them

---

By Fairport Wealth

---

Cybercriminals are relentless. As individuals and businesses adopt new behaviors and technologies to stave off attacks, they evolve their techniques and find new targets. Losses from cybercrime continue to climb, with a record $10.3 billion in 2022 ― which only includes those tracked by the FBI.^[i] Actual losses are likely much higher.

FBI Internet Crime Complaint Center Statistics

The good news is that with education and a few relatively straightforward best practices, you can significantly strengthen your cybersecurity defenses. To that end, here are common scams to watch for and recommended best practices for avoiding them.

Common Scams 

Though methods vary, cybercrimes usually share a common theme: The victim provides their personal information (either intentionally or unintentionally) with an unknown person or entity over the phone, on a computer or through a mobile device.

According to the U.S. Cybersecurity and Infrastructure Security Agency, here are some of the most common schemes criminals use to solicit information from their targets and how to minimize your risk of falling victim to them.^[ii]

1. Email Phishing

Cybercriminals design emails that mimic those coming from legitimate sources, including banks, government agencies and other services and businesses. They use these emails to collect personal and financial information and/or infect your device with malware or viruses.

Examples

You receive an email that looks like it came from Amazon requiring immediate action to receive a refund. It includes Amazon’s logo and at first glance appears legitimate, but if you hover over the Amazon.com link provided, you can see that it’s not really Amazon’s URL.

You receive an email that looks like it came from your bank, warning that it will need to shut down your account unless you reconfirm your billing information. If you click on the link, it takes you to a bogus website designed to look like your bank’s actual website.

How to Avoid

• Never input your login information through a link provided by an unsolicited email request.
• Never provide your personal information in response to an unsolicited email request.
• If you believe the request may be legitimate, contact the institution yourself.
• Never provide your password in response to an unsolicited email request.
• Never click on a link if you have any doubt about an email’s legitimacy.

2. Imposter Scams

Criminals impersonate a government official, family member, colleague or friend asking you to wire money, often using personal information they have collected about you to sound more convincing. 

Examples

An IRS official calls you to warn that you owe back taxes but can avoid further penalties if you take care of the payment today over the phone.

A friend of friend who claims to have met you at a recent event in your community calls to ask you for a donation to a legitimate charity ― she will match your donation if you provide your payment over the phone tonight.

How to Avoid

• Block unwanted calls or texts on your mobile or home phone.
• Do not answer calls from numbers you do not know.
• Never wire money ― or provide a gift card ― to someone you do not know.
• Never send money because someone contacted you, even if you feel like you might know the person or if the person says they are your friend or are related to you.
• If you find yourself on a suspicious phone call, hang up. If the person you spoke to claims to be calling from an institution, call back the official number for that institution.
  
  

3. “You Won” Scams

Cybercriminals email, call or text stating that you have won a prize, sweepstakes or lottery. You are told that to receive the prize, you must first pay a fee or tax. The call or message is usually full of congratulations and excitement.

Examples

You receive an email that says you have won $2.5 million in the International Sweepstakes. The scammer claims to represent a legitimate sweepstakes, such as Publishers Clearing House. You are asked to pay a small fee via a link to cover processing and receive your winnings. The email provides assurance that the sweepstakes is safe and legitimate.

You receive an email that appears to be from a relative stating that you have won a raffle. The relative asks you to reply with certain pieces of your financial information to collect your winnings.

How to Avoid

• Block unwanted calls or texts on your mobile or home phone.
• Never pay a fee or provide personal information to collect winnings or a prize.
• Search online for the offer and contact from which it was received to see if there are any references to a scam.
• If a friend or family member sends or forwards you an offer via email or social media, confirm with them outside of email or social media that they really sent it.
  
  

4. Health Care Scams

Criminals call, email or send a letter to promise big savings on your insurance, prescriptions or other health-care-related expenses. The communication usually requests your Medicare or insurance information, Social Security number or other pieces of personal information.  

Examples

You receive an email with the subject line of “Big Senior Discounts on Prescription Drugs,” with a link to visit a new pharmacy offering low-cost drugs.

You receive a text message that claims to be from Medicare. It says you may be eligible for a new 20% discount and asks you to follow a link to provide personal information to see if you qualify.

How to Avoid

• Stop and think before you act. Medicare and insurance companies will not reach out to you in this manner.
• Never provide personal or sensitive information in response to unsolicited communication.
• Search the promotion or offer online to see if there are any references to a scam.
  
  

5. Tech Support Scams

Criminals call you or reach you via online popups and claim to be from a technology company contacting you to diagnose or fix a problem with your computer, software or other technology. The scammer is typically trying to gain remote access to your device or online account.

Examples

A popup appears on your computer warning you that a virus has been detected. It asks you to contact a live technician at a provided phone number.

Someone who says they work for Dell calls you claiming that they have detected an issue with your computer. They ask you to walk through certain steps with them to gain remote access to your device so that they can fix it.

How to Avoid

• Recognize that legitimate technology companies will not contact you by phone, email or text to inform you about a problem, nor by a popup that asks you to call them or click on a link.
  
• Never provide remote access to your computer to someone who contacts you unexpectedly.
  
• If you need help fixing your computer, device or other technologies, go directly to someone you trust.

Vigilance Makes the Difference

Cybercriminals may be relentless, but their methods can be thwarted with continual awareness and caution. Defending against cybercrime and identity theft includes the following best practices as you set up and interact with your devices. Know that Fairport Wealth is constantly evolving our defenses to help keep your data safe. If you have any questions or think you may be a victim of identity theft, contact your Fairport team immediately.