Scam Radar — March 2025
Scam Radar — March 2025
Below are three new scams to keep on your radar, as well as some tips for how to handle data breaches. Be on the look out for yourself, your family, and your clients! THINK BEFORE YOU CLICK!
Your Password is Their Prize
In this scam, cybercriminals are trying to steal your X (formerly Twitter) login information. They send you an email claiming that someone tried to log into your account from a new device, and you must log into X immediately to verify your account. In another version of this scam, you might receive a different email claiming your account violated copyright laws and that you must submit an appeal.
Both of these emails direct you to click a link to verify your account, which takes you to what appears to be an X login or password reset page. But these pages are actually fake and controlled by cybercriminals trying to trick you into entering your user credentials. If you enter your login information, they will steal it. Then, they can access your account and use it to post links to crypto or financial scams. The cybercriminals will steal your login details and use your account to scam other X users!
Tips to Avoid Similar Scams:
- If possible, enable two-factor authentication, or 2FA, for your online accounts. 2FA is more secure because it requires two forms of identification to log in to your account.
- Always hover over links in emails to see if they’re legitimate. If you must reset your password, always navigate to the official X website or mobile app.
- Be suspicious of any urgent requests. Cybercriminals often pressure you to act fast to trick you into falling for their scams.
Real Email, Fake Facebook
This month, cybercriminals have been trying to steal your Facebook login information. They send you an email claiming your Facebook page violates copyright laws. This scam is particularly convincing because the email you receive appears to be from a legitimate sender. The email even contains Facebook logos, although if you look closely, you’ll notice they look slightly different from the real Facebook logo. The email urges you to log in to Facebook to appeal this decision immediately, or you will lose access to your account’s features.
You are directed to click a button in the email, which takes you to what appears to be a Facebook support page. The support page will prompt you to provide your login information to have your account “reviewed.” But your Facebook page never really violated copyright laws. The Facebook support page is actually fake and controlled by cybercriminals. If you enter your Facebook user credentials, the cybercriminals will steal them!
Tips to Avoid Similar Scams:
- Be suspicious of unusual emails, even if they appear to be from a legitimate email address. Facebook won’t send you emails threatening immediate action.
- Log in to Facebook through its official website or mobile app to check your account’s status. Don’t click any links in an email claiming to be from Facebook.
- Always check logos and spelling in emails claiming to be from Facebook. In this particular scam, the emails contained fake Facebook logos, some with misspelled words.
The YouTube Trap
In another recent scam, you receive an email containing a video from what appears to be YouTube’s CEO. In the video, the CEO claims that YouTube is changing its income policy, and you must accept new terms and conditions to make money from your channel. The video informs you that you have seven days to comply, or you will lose access to important features.
The video’s description directs you to click a link to accept the new terms and conditions. But the CEO in the video isn’t real. The cybercriminals have used Artificial Intelligence (AI) to create a fake video, and everything the “CEO” says is an attempt to trick you. Additionally, the link in the video description leads to a fake web page that the cybercriminals control. If you enter your login information here, they will steal it immediately and access your YouTube account. Then, they will use it to post cryptocurrency scam videos!
Tips to Avoid Similar Scams:
- Always verify the source of unexpected emails. Be sure to log in to your YouTube account using the official website or app to check if an email you received is legitimate.
- Never click unverified links. Remember to hover your mouse over URL links to check if they are legitimate domains.
- Scammers frequently create a sense of urgency to try and trick you into acting impulsively. It is unlikely that YouTube would enact a major policy change with a short deadline for you to respond.
What's the Deal With Data Breaches?
Data breaches are becoming more and more common these days. You hear about them in the news all the time. So you might be wondering: what exactly is a data breach? A data breach is when secure information is taken from a trusted environment without permission. The bad guys can use this information to steal your identity, hack into your online accounts, or use the information for targeted phishing attacks to gather even more information about you.
However, just because the data was exposed doesn’t mean that it’s necessarily being used by the bad guys. It only means that bad guys can easily gain access to it. There are steps you can take to protect your information, even if you were exposed to a data breach.
How do I protect my information?
- Use secure passwords. You may also want to try using a password manager.
- Set up two-factor or multi-factor authentication.
- Keep your personal information secure. Never share your passwords or personal information with anyone you don’t know. Shred documents with your personal information on it before throwing it away.
What do I do if my information was already exposed in a breach?
Don’t panic! Take a moment to assess the situation. Ask yourself: what sort of information was exposed? Do I need to notify my bank or other entities? What steps should I take to make my information more secure going forward?
- If your password was exposed, we recommend changing your password for all online accounts associated with that password immediately. Make sure the password is complex or have a password generator create one for you. For extra security, you may want to set up two-factor or multi-factor authentication.
- If your credit card number or bank account number was exposed, we recommend calling your bank or cardholder and cancelling your card(s) immediately. Let them know that your information was exposed so they know to look out for charges that may be fraudulent.
- If your social security number was exposed, immediately report that your social security number was stolen to the police, credit-reporting agencies, and the IRS. You may also want to sign up for a service that can monitor your identity or credit for added protection.
For more information regarding scams, please visit the Federal Trade Commission (FTC) Consumer Advice website.
You can also find details about the signs of a scam, how to avoid a scam, and how to report a scam in this article by the FTC — How to Avoid a Scam.
EMPOWERING AGENTS THROUGH EVERY STEP OF THEIR JOURNEY.
Senior Marketing Specialists is more than just an FMO—we’re your solution.
Sources:
Cited in article.
Recent Posts
70% shopping rates will make this AEP a war zone. Do you have your Battle Plan ready?
Attend one of our in-person AEP Disruptions Bootcamps, or be left behind.
July 23, 2024
Blue Springs, MO
July 25, 2024
St. Charles, MO
July 31, 2024
Columbia, MO