Sunday, July 26, 2020

Amazon shoppers beware

I just saw a new phishing scam (this time targeting Amazon customers) a couple days ago,  It involved scammers sending out a massive number of emails, claiming to have locked the user's Amazon account due to suspicious activity. It included a link so that users could remove the "lock" directly.

I got a similar contact, this one (supposedly) from our electric utility and came via phone contact. I'm sure they wanted personal or bank/credit card to settle a supposed unpaid bill.

Here is how that works.  They target thousands, even tens of thousands of users.  Sure not all of them will have an amazon account, but that is why they cast a very large net.
If you were to click the link in the message, it will say it's taking you to the Amazon secure log-in screen, but in reality you get dropped off at a website (that belongs to the scammers) that resembles Amazon.  If you try and log in with a user name and password, they will capture your user name/password, and your identity may be stolen; fraudulent purchases or other criminal activity are sure to follow.

What should you do to deal with Phishing attempts?
1) When you see a message, receive a phone call, etc., delete that message (or hang up the phone) and using your browser (NOT a link) log into your account and check the status of your account that way.
If there was an issue you would be the site would advise you when you log in. If you have the customer service number for the site you can also call in to them. 

2) Don't follow links in email messages, especially when they ask for personal information.

3) While you can report this to the site, there are literally dozens of new attacks every day and new schemes to go along with them.  Protect yourself, don't be gullible, and keep your identity and your money safe!

4) Avoid sharing links to web sites as much as possible.  Links are great but they don't always take you where you think you're going.