Showing posts with label phishing. Show all posts
Showing posts with label phishing. Show all posts

Friday, June 24, 2011

Internet myths & safety Part 2 of 2

Many of us shop and bank online daily – but we all have to be careful and pay attention to how and when we share information online… a few basics to remember to keep yourself and your information safe when using this wonderful technology…

Never trust a link sent to you by someone you don’t know. By clicking the link you may be taken to a site that may look like your bank or credit card company, but isn’t. One thing a criminal can’t fake is the actual Web site address of a company or bank. Never click a link sent to you in an e-mail, search for the Web address using a search engine to find the real one. Use that to ask the company about the message you received, or call using the number listed on your statements. Mark the real site as a favorite in your browser so that one click brings you there safely every time.

Never (never never never) trust an e-mail that asks for your personal or account information (called a phishing scam). These usually seem convincing (the shabby ones have spelling errors, but the high quality scams look impeccable). No bank or reputable company is going to send you an e-mail asking you to correct your information, validate your identity, re-enter your password, and so on.

Beware of emails that send you "warnings against fraud" - The smarter scams often contain text warning you against fraud. They do this because many people believe that an e-mail that warns them to be careful must be legitimate. That is not always true. This also extends to sites that claim they have protections in place for your privacy and security. Anybody can make these claims, but only certain sites protect you.

Never respond – or even open an e-mail with a deal that is too good to be true unless it is from a company that you know well and expect to get these kinds of offers from them. Scammers want you to react without taking time to think things through, so their e-mails frequently sound urgent, such as:


  • "if we don’t hear by tomorrow your account will be closed” (and you’ll notice that the date of “tomorrow” never is listed).

  • "this offer won’t last, order now to ensure”

Never believe that someone you don’t know is going to give you money. Do not believe a person from another country who just needs you to “help transfer funds” and they need your bank account number to do so. Such scammers promise to give you a huge amount of money for helping them out. The result is an empty bank account.

If you never entered a lottery, you did not win the lottery. Such scams ask you to provide your information and bank account number so they can transfer your prize money. Don’t. The result is an empty bank account.


Don’t believe a really rich, famous person just wants to help you out… and that the celebrity also mysteriously needs your address, phone number, bank account information to do so. The result is an empty bank account.

Guard your information well. It is better to be rude than to be ripped off, so demand validation, verification, and authentication before giving your information to anyone. If you still feel uneasy, say no or check further.

Be careful when you are online and remember to trust your instincts…

Thursday, January 13, 2011

Who and What is spokeo.com

In the last few weeks, many facebook & myspace users have been posting the following information about the website spokeo.com in their status to make others aware of this website and their concerns…

Spokeo.com is an online USA phone book w/personal information: everything from pics you've posted on Facebook or other websites, your approximate credit score, home value, home address, income, age, marital status, names & ages of your children, etc.

You can remove yourself by first searching for yourself on their site to find the URL of your page, then going to the Privacy button on the bottom of their page to remove yourself – HOWEVER many people have commented that using this privacy button, is how spokeo and other similar companies are getting our email addresses, so be careful – Overwhelmingly the comments on the message boards and forums are indicating that the data they publish is more incorrect than accurate..

According to wikipedia.com – Spokeo.com’s headquarters are in Pasadena, CA founded by Harrison Tang and launched in Dec. 2006 and now becoming “popular”. They are a social network “aggregator” website (similar to zabasearch.com that was popular a few years ago doing the same thing). They accumulate information from a wide variety of information gathered online and offline from “public” resources (such as phone books, social networks like facebook, myspace and others, , marketing surveys, mailing lists, government censuses, education real estate listings, and business websites). This information might include demographics, education and career information, photos from on line photo albums, estimated property and personal assets, email addresses and other usernames for sites such as facebook, and much much more.. Recently they announced their ability to scan social networks, blogs, photo albums, dating sites, music networks, video sites, ecommerce stores, and other web services in real-time to help find online profiles with similar usernames..

Most information seen for free is very basic, but of course then you can sign up and pay for additional information, which again, many people report is totally inaccurate. Users report problems with removing their listings, and some independent reports verified that the removal process was "spotty."

For more information you can check them on www.breakthechain.org or www.snopes.com - Here is the direct link to snopes comments about them...
www.snopes.com/computer/internet/spokeo.asp

Wednesday, August 4, 2010

What is "phishing" and how to avoid it

Phishing is an increasingly common type of spam that can lead to theft of your personal details such as credit card numbers or online banking passwords.

Phishing attacks work by the scam artist sending "spoofed" emails that appear to come from a legitimate website that you have online dealings with such as a bank, credit card company or ISP - any site which requires users to have a personal identity or account. The email may ask you to reply with your account details in order to "update security" or for some other reason.

The phishing email may also direct you to a spoofed website or pop-up window which looks exactly like the real site, but has been set up for the sole purpose of stealing personal information. Unsuspecting people are then often fooled into handing over credit card numbers, passwords or other details.

  • Never respond to emails that request personal financial informationBanks or e-commerce companies generally personalize emails, while phishers do not. Phishers often include false but sensational messages ("urgent - your account details may have been stolen") in order to get an immediate reaction. Reputable companies don't ask their customers for passwords or account details in an email. Even if you think the email may be legitimate, don't respond - contact the company by phone or by visiting their website.
  • Visit bank or other financial, retail or medical websites by typing the URL (web address) into the address bar yourself. Phishers often use links within emails to direct their victims to a spoofed site, usually to a similar address such as mybankonline.com instead of mybank.com. When clicked on, the URL shown in the address bar may look genuine, but there are several ways it can be faked, taking you to the spoofed site. If you suspect an email from your bank or online company is false, do not follow any links embedded within it.
  • Keep a regular check on your accounts - Regularly log into your accounts & and check your statements. If you see any suspicious transactions report them to your bank or credit card provider.

Be sure the website you are visiting is secure - Always, before you submit any personal or fiancial information, always check to ensure the site uses encryption to protect your personal data:

  1. Check the web address in the address bar. If the website you’re visiting is on a secure server it should start with "https://" ("s" for security) rather than the usual "http://"
  2. Look for a lock icon on the browser's status bar. Check the level of encryption, expressed in bits, by hovering over the icon with your cursor. Note that the fact that the website is using encryption doesn't necessarily mean that the website is legitimate; it only tells you data is being sent in encrypted form.