Guest Column

Be wary of holiday shopping scams, fake fundraisers

By CyberWeekly
Posted 12/15/22

Merchant Account Scam: If you receive an email with the subject line of “Merchant Account: New Security Document” from “Merchant Services” but really from a kroninc.com email …

This item is available in full to subscribers.

Please log in to continue

E-mail
Password
Log in
Guest Column

Be wary of holiday shopping scams, fake fundraisers

Posted

Merchant Account Scam: If you receive an email with the subject line of “Merchant Account: New Security Document” from “Merchant Services” but really from a kroninc.com email address, don’t open the attachment. Just delete. Reported by a Laramie citizen.

Wish it WAS the Last Reminder: A Sheridan citizen is still getting emails from a tut.com email address, despite reporting the email as corrupted to the real tut.com. This email’s subject line is “RE, [redacted name]: Last Reminder[12/04/2022]” and the email supposedly came from McAfee and they used the ® registered trademark, obviously illegally. The link that says “Hi [Redacted name]” actually goes to a German (.de) website address that is hosted in Canada. Note that this citizen also reported another fake email from the same email address with the subject line of “Your Transunion Equifax and Experian 2022” from FS360 (also with the registered trademark sign), with a link going to the same German website.

Government Impersonation Scam: If you receive an email with the subject line of “New Document From the IRS Portal” with the sender’s address listed as “Social Security Administration” but really from a westbrooklawfirm.com email address, don’t download the attachment or call the number in the email. It isn’t a secure message from the IRS or the Social Security Administration. Reported by a Laramie citizen who was questioning why a law firm, the IRS and the Social Security Administration were all collaborating on a ‘secure message.’

Not Sofia: Scammers are playing a fake fundraising trick in several places, pretending to be raising money for heart surgery for a child named Sofia. The Sofia Scam, as it’s called, was recently spotted in Palm Beach, Florida, but local police said crooks are pulling the same trick across the nation. The scammers pose with posters pleading for donations but, said Palm Beach Police Department, it’s a fake story. Brought to you by scambusters.org.

Holiday shopping: Online buying reaches a peak in the next few weeks. There are scores of scams to look out for. Check our earlier issue to learn more: scambusters.org/holidayshopping.html. Brought to you by scambusters.org.

Free phones: Scammers are offering free phones to people in return for handing over their confidential information, including Social Security numbers. They’ve even been known to set up tables outside of businesses and events, targeting seniors and others on low income — most recently in Sullivan County, New York. The phones usually don’t exist. Otherwise, they are likely cheap, old, and used devices. Harvested info is used for identity theft. Brought to you by scambusters.org.

MS-ISAC and CISA Patch Now Alert: The Multi-State Information Sharing and Analysis Center (MS-ISAC) or the Cybersecurity & Infrastructure Security Agency (CISA) has published a patch now (update your software) alert for Google’s Chrome Browser and Google’s Android operating system products. If you use these products, make sure the software (or firmware) is updated.

Data Breaches in the News: Washington State Hospitals that use CommonSpirit including: St. Michael Medical Center, St. Anne Hospital, St. Anthony Hospital, St. Clare Hospital, St. Elizabeth Hospital, St. Francis Hospital and St. Joseph Hospital; What’s App (phone numbers), Connexin Software (affects 120 pediatric physician practices), LastPass, Southampton County (Virginia), Community Health Network, Guilford College (North Carolina), Twitter, Cincinnati State College, Sonder, Tridas Group LLC (leaked HIPAA compliant online questionnaires with children’s information), Home Trust Mortgage, Tehama County (California), Mastodon, Massengale Eye Care, CorrectCare IntegratedHealth (inmates), Amazon’s Relational Database Service, New York Presbyterian Hospital, Woosh (Russian scooter service).

If you have an account with one of these companies, be sure to change your password and consider placing a credit freeze on your accounts through the three credit reporting agencies: TransUnion, Experian, and Equifax.

Please report scams you may experience to phishing@cyberwyoming.org to alert your friends and neighbors.

 

Other ways to report a scam:

Better Business Bureau Scam Tracker: bbb.org/scamtracker/us/reportscam

Wyoming Attorney General’s Office, Consumer Protection 307-777-6397, 800-438-5799 or ag.consumer@wyo.gov

File a complaint with the Federal Trade Commission at reportfraud.ftc.gov/#/

Report your scam to the FBI at ic3.gov/Home/FileComplaint

Reported unwanted calls to the Federal Trade Commission’s Do Not Call Registration. Online at donotcall.gov/report.html or call 1-888-382-1222, option 3

Office of the Inspector General: oig.ssa.gov/

AARP Fraud Watch Network (any age welcome) Helpline 877-908-3360

IRS: report email scams impersonating the IRS to phishing@irs.gov

Call the Wyoming Senior Medicare Patrol (SMP) for assistance with potential Medicare fraud, abuse, or errors at 1 800 856-4398

 

Victim Support: The AARP Fraud Watch Network and Volunteers of America (VOA) created a new, free program to provide emotional support for people impacted by a scam or fraud, called ReST. Visit aarp.org/fraudsupport to learn more about the free program and register.

Comments