How Not to Get Hooked by a ‘Phishing’ Scam

by Mark Aronson on April 21, 2010

phishing scamsHave you seen “The Spanish Prisoner,” a David Mamet movie starring Steve Martin and Ben Gazzara?  The suspenseful plot is based on a confidence trick that’s been around since the late 1800’s.

By now, we’ve all received many versions of the scam email asking for your help freeing a frozen asset in a third-world country, the latest incarnation of this con.

I’m sure you wouldn’t fall for such an obvious scam.  But are you savvy to the ultra-sophisticated “phishing” emails circulating now?   You risk losing money, your identity, and control of your computer with even one little click.  Read on…

“We suspect an unauthorized transaction on your account. To ensure that your account is not compromised, please click the link below and confirm your identity.”

“Note: Read this message up to the end. You will drop access to your account on Intuit website without actions described below.”

When you receive email with a similar message, it’s almost certainly a scam called “phishing” in which scammers send spam or pop-up messages to lure personal information (credit card numbers, bank account information, Social Security number, passwords, or other sensitive information) from unsuspecting victims. It’s also a way to hijack or infect your computer.

To protect yourself:

  • Do not reply.
  • Do not  click any links.
  • Do not open any attachment or download any files.
  • Do not disclose personal or financial information.
  • Install a firewall a spam blocker, and and anti-virus software.  Do not let the licenses expire and get daily updates.  Want to be sure you’re protected?  Contact us.

Many phishing messages look just like the real thing (“spoofing”), but don’t get fooled.  Close the email without clicking any links. Then open a browser and type in the address for the company in question.  If you must do a search, and there are multiple results, even some of those may be fakes.  Look for the one that looks most legitimate, usually the one holding the primary address.  Then you can check and see if there’s a real need.  If in doubt, call customer service and ask.

When scammers “spoof” a reputable company, that company may issue an alert.  This alert from Intuit is a good example.

A Federal Trade Commission alert has more details.

Related posts

Comments on this entry are closed.

Previous post:

Next post: