This blog is generated by many contributing writers that are staff of the Consumer Assistance Program of the Attorney General's Office or the Attorney General's Office.
BURLINGTON – The Attorney General’s Consumer Assistance Program (CAP) is warning Vermont business owners, non-profits, and employees about an uptick in business imposter email scams. In the last two months, CAP has received five reports of business imposter email scams resulting in a total loss of $210,799. Scammers are impersonating employees or familiar business representatives’ emails and contacting company bookkeepers and office administrators asking them to change bank account information, direct deposit information, or asking them to write checks. By impersonating an employee’s email address or creating a fake personal email for the employee, scammers can steal money from businesses and steal paychecks from employees.
Business Imposter Loss – Vermont – July and August 2022
Vermont businesses and non-profits should always verify email addresses and speak directly with an employee or business representative in person or via phone when sending money or changing payment information. Oftentimes, scammers will use an email address that only slightly varies from an employee’s true email. Be wary of any email coming from outside your company’s domain. CAP urges business owners to educate their entire company on scams that target businesses.
Here are ways in which businesses and non-profits can better protect themselves and their employees from scams:
Cybersecurity assessment: check internal controls and resolve vulnerabilities.
Train staff regularly in cybersecurity and funds management protocols.
Enlist internal protocols to verify the transfer of funds by engaging multiple staff members and voice verification, using trusted contact information.
Help clientele identify common scams within the industry.
TheSLOW method can serve as a helpful starting point, encouraging parties to take their time during urgent transactions and connect with a trusted party like CAP.
If you or someone you know has lost money to this scam, contact law enforcement and report the scam to CAP online or call 1-800-649-2424 and speak to our Small Business Advocate.
Reports of scams to the Attorney General’s Consumer Assistance Program (CAP) totaled 5,154 in 2021, up just slightly from the previous year’s 5,021 reports. As imposter scams are of ongoing concern in Vermont, CAP recently distributed a video imposter scam prevention project, highlighting three concerning imposter scams with high dollar loss: the Romance Imposter scam, the Family Emergency/Imposter Scam, and the Business Imposter Email Scam. We work in partnership with the Community of Vermont Elders (COVE), FAST of Vermont and local community partners to provide referrals and resources to victims of scams. In addition, CAP connects with service providers and local community organizations to provide training and scam prevention presentations.
As highlighted in the prevention project, taking steps to verify can help individuals avoid scams. A simple verification process to follow for all scams is the SLOW Method:
S – SLOW DOWN Scammers pressure you to act urgently. Don’t!
L – LOG THE CONTACT Write down the info of the contact and disengage.
O – ONE CALL Make one call to a primary contact and discuss the incident.
W – WHO CARES? Call CAP to identify and report scams at 1-800-649-2424.
CAP reminds Vermonters to never give out personal information or make payments to parties you cannot verify. Scammers will ask for payment in all forms, including wire transfer, cryptocurrency, cash, peer-to-peer payment, money order, check, credit/debit card, and gift cards. If you have sent money to a scammer, follow recovery steps now.
Vermonters can help stop scams by sharing information with community members and by reporting scams to CAP to support educational outreach. To report scams, complete CAP’s online scam reporting form or call 1-800-649-2424.
Top 10 Scam Types with Incurred Loss in Vermont by Total Loss AmountScam with Loss data according to reports to the Consumer Assistance Program in 2021
The scam: You receive a phone call, pop-up, or email on your computer claiming to be from Norton, Microsoft, Apple, or another well-known tech company. They will make claims such as your electronic device has a virus, your device security subscription has been automatically renewed, or stating you have been charged for services you did not receive or ask for. You may be prompted to click a link or call a number to contact. They will try to persuade you to give remote access to your device to fix the issue, and sometimes will even ask for immediate payment for their services.
How to spot the scam: Legitimate tech support companies do not display communications to their customers as random pop-ups on your device. Tech support will not call you to warn of security incidents; that your account has been renewed for a subscription you do not recognize; and will not send you random links, often shortened, with instructions for you to click on URLs.
What to do: When contacted about a supposed business relationship, take steps to verify, especially if you do not remember signing up for services. Never click on links or provide remote access to your computer from an unknown email sender or pop-up message on your device’s screen. If you received a pop-up message you cannot click out of, shut down, restart, or unplug your device. If you get a call from “tech support”, hang up. Also, be careful when searching for tech support online. Some users have been scammed by calling illegitimate phone numbers listed on the internet.
The scam: Fake websites or phony listings on sites like Facebook Marketplace and Craigslist draw you into a purchase that’s likely too good to be true. This scam can also appear in online rental listings, and as a buyer offering well-over the selling price for an item. As a seller, the fake buyer sends a fake check or pays with a fraudulent credit card and asks you to advance funds to another fake vendor, causing you to be out the funds.
How to spot the scam: Be skeptical of unrealistic offers. Watch out for requests for money in any form (gift cards, wire transfers, cash) when not made in person. Scammers likely will not want to talk on the phone or meet in person. Heed warnings in user reviews and other online commentary.
What to do: Playing it safe online takes a bit of detective work to determine legitimacy of an offer. Investigate the person/profile of the seller. If their profile is new and they have no friends and photos, they are likely a scam. Research new websites you are considering doing business with by looking up online reviews and state business registrations, taking note of how long the company has been operating. Perform online searches of the business with “scam” and “complaints” to see if issues generate. Complete your transactions in cash and preferably a safe place in-person.
Romance Imposter
The Scam: Scammers connect usually through social media and pose to be someone you trust and care for. After the trust has been developed, they claim they are in an emergency to convince you to send them money or will ask you for a favor. Scammers impersonate a love interest and play on your fears to have you send money urgently.
How to spot the scam: Use reverse image searches to look up images of the person; if ther are many results, the contact may be using someone else’s image and is a scam. Video chat on your terms and at random times. If they are typically unavailable, they may be scamming someone else.
What to do: consult with your close in person contacts and reach out to an organization in your life who cares. They may spot something you don’t. Never send money to someone you have not met in person.
The scam: A variation of the traditional Computer Tech Support scam (see # 3 below). You receive an automated phone call, text message, or email claiming that you have been charged for an online order, have an outstanding balance on your account, or are sent an item you did not order. The scammer then instructs individuals to call a number provided in the scammer’s communications to get a refund or to resolve the charge. At this point, they will ask you to provide your card number to “confirm your account” or prompt you to provide them remote access to your computer. As soon as the scammer has remote access to your device, they can access every single document, file, and transaction you have saved to your device.
How to spot the scam: Companies will not call with tech support unless you requested that they contact you. If you receive a package that you do not recall ordering, check your statement history to see if you have been charged. Packages without a return address are highly suspicious.
What to do: Hang up the phone immediately and do not call back. If you receive an email or text regarding a package delivery or order that has been made, do not click on any links. Mark the email as “Junk” or “Spam”. Furthermore, never allow remote access to your device to unknown parties. If you are concerned about charges made to your accounts, log in to your account directly and contact your financial institution. If you receive a package that you did not order, mark it return to sender and give it back to the mail carrier.
The scam: You will be notified by phone, email, or mail that you won a prize or a quantity of money. In some cases, you will even receive a realistic-looking check – but it is fake! You are instructed to pay fees and give your financial and personal information to claim your prize. They often use a legitimate sweepstakes name, like Publishers Clearing House.
How to spot the scam: Legitimate sweepstakes and contest businesses, like Publishers Clearing House and Mega Millions lottery, will contact you in person if you win a major prize. For prizes under $10,000, the notification is done through certified mail by overnight delivery services (FedEx, UPS). They will not contact you by phone, nor require a payment or processing fee to release your prize.
What to do: If it sounds too good to be true, then it’s not true. You don’t need to pay fees or give your financial information in order to claim a prize.
The scam: Scammers pose to be someone you trust and pretend to be in an emergency to convince you to send them money or will ask you for a favor. These scammers pose as grandchildren, friends, relatives, and close contacts and seem like the real deal. Scammers impersonate people you love and play on your fears to have you send money urgently. After the initial call, you may be told a lawyer, parole officer or courtroom may contact you for further information.
How to spot the scam: Contacts come in as calls or emails or online messages. Sometimes it’s someone you haven’t heard from in a while. They require urgency and ask for secrecy. You may not be allowed to speak to your loved one on the phone.
What to do: Take steps to verify. Check out if they really are who they say even if they sound like a loved one. Slow down your response and contact someone you trust to verify if there is an emergency. You can also choose a “code word” with friends and family to verify the person is who they claim to be. If they don’t know the word, they are not your friend or family member.
Phishing-Bank Representation
The scam: You receive an email or phone call claiming to be from a bank. Emails might claim that your account is in danger or has been suspended, or that your card is on hold due to suspicious activity. The email also includes links to phony websites. Phone calls may claim that there has been fraudulent activity involving your account, and the scammers demand personal information about you and your account.
How to spot the scam: Scammers mask their actual identity by changing the sender name to the name of the financial institution. Look at the email address before opening the email. You will often find an account not affiliated with your bank. Similarly, scammers can spoof phone numbers of financial institutions. If you answer a call that appears to be from your bank and they ask for your personal and/or account information, hang up and call your bank directly on a number you trust to verify their attempt to contact you.
What to do: Do not reply to the email or click on any links or attachments included in the message. If you receive a call, hang up the phone. To correspond directly with your bank or financial institution, use verified contact information, such as information listed on your statement.
Financial Advisor/ Investment Imposter
The scam: Scammers are spoofing websites and using fake social media accounts to obscure their identities. Scammers also pose an imposter friend with an investment tip. Investors should always take steps to identify phony accounts by looking closely at content, analyzing dates of inception and considering the quality of engagement. To ensure investors do not accidently deal with an imposter firm, pay careful attention to domain names and learn more about how to protect your online accounts.
How to spot the scam: Beware of fake client reviews. Scammers often reference or publish positive, yet bogus testimonials purportedly drafted by satisfied customers. These testimonials create the appearance the promoter is reliable – he or she has already earned significant profits in the past, and new investors can reap the same financial benefits as prior investors.
What to do: The North American Securities Administrators Association (NASAA) recommends investors independently research registration of investment firms.
While Medicaid recipients may have to sign over resources, in some circumstances, to the long-term care facilities where they reside, this does NOT apply to current federal economic impact payments, or ‘stimulus checks.’
Under the CARES Act, the stimulus checks are a tax credit. Tax credits do not count as income or resources for federal benefits programs, like Medicaid. Nursing homes, assisted living residences, and residential care homes cannot take that money from residents just because they are on Medicaid. Simply receiving a stimulus check should not change a resident’s monthly payment or cause a resident to have “too much” savings for Medicaid eligibility. Recipients may keep the stimulus payments, and nursing homes or other long-term care facilities may not seize them.
Anyone who believes a long-term care resident who receives Medicaid has lost their stimulus check to a nursing home, assisted living residence, or residential care home, should contact the Vermont Attorney General’s Consumer Assistance Program at 1-800-649-2424 or ago.cap@vermont.gov. You may also contact the Vermont Long-Term Care Ombudsman Project at (802) 863-5620 (Voice & TTY). Vermonters may also report to the Federal Trade Commission at www.ftccomplaintassistant.gov.
Here is more information on the rules relating to long-term care residents’ receipt of stimulus checks.
As a result of the COVID-19 emergency, countless Vermonters have dealt with the cancellation of travel plans and other event reservations. Although disappointing, these cancellations are helping keep the public safe and slow the spread of the virus. To assist Vermont consumers and businesses in understanding their rights and responsibilities related to these canceled plans, the Attorney General’s Office offers the following guidance:
Step 1: Look at the contract or agreement
To determine whether a business must refund a consumer’s payment, read any cancellation policies or other similar terms in any contracts or agreements that were in place at the time of payment.
Step 2: Locate cancellation policies
If a properly disclosed cancellation policy states that some or all of a consumer’s payment may be non-refundable, consumers’ options may be limited.
If a cancellation policy is not properly disclosed – for example, because it was given to the consumer only after the contract or agreement was signed – then the cancellation policy may not be valid.
Step 3: If necessary, the Consumer Assistance Program is available to mediate
If a cancellation policy says that a consumer is entitled to a refund in the event of an involuntary cancellation but the business refuses to provide a refund, the consumer may file a complaint with the Consumer Assistance Program by calling 1-800-649-2424 or visiting https://ago.vermont.gov/cap/.
If there are no contract terms or other policies that apply to cancellations under circumstances like these, the Attorney General’s Office urges businesses to work with consumers to find acceptable solutions. While it may be reasonable for a business to keep some portion of its fees to cover costs that were actually incurred before cancellation, businesses should work with consumers to come to a satisfactory resolution for both parties.
Like individual consumers, businesses also may have protections when they are in the role of consumers. For example, a business is a consumer when they are purchasing items that are not for resale, such as supplies or equipment for use by their business. If you own a business and have a consumer-type problem, you can also contact the Consumer Assistance Program to file a complaint.
The Attorney General’s Office recognizes that Vermonters are facing unprecedented hardships at this time, and encourages business owners and consumers to work together to find reasonable resolutions of their disputes. If any consumer feels a business is not living up to the terms of their agreement or is otherwise not playing fair, they should contact the Attorney General’s Consumer Assistance Program to file a complaint by calling 1-800-649-2424 or visiting https://ago.vermont.gov/cap/.
Charity fraud is, unfortunately, all too common. But don’t be discouraged. You can still make your charitable giving count by following the tips below to identify the bad actors from the good:
“Who are you and what is the name of this charity?” “Where is the charity located?” “How would my donation be used?” “Are you a paid fundraiser?”
Tip #2: Learn about Paid Fundraisers
Some charities hire paid fundraising companies to help them solicit donations. In Vermont, any charity using a paid fundraiser must register with the Vermont Attorney General’s Office, and report how much of the donations received go to the fundraiser. Visit the Attorney General’s website to learn more and access donation information, or call the Consumer Assistance Program: 800-649-2424
Tip #3: Spot the Scam
Scammers use phone calls, mailings,
door-to-door solicitations, and emails to trick people into “donating” to their
“cause.”
Phone calls: Scammers will pressure you to give money right away. They might ask you to send cash or wire money, and they will not give many details about what the donation is for.
Mailings: You might receive a letter in the mail thanking you for a pledge you never made. This is a signal that the mailer is a scam. If you receive a mailer that you’re unsure about, do your homework by searching online, or call the Consumer Assistance Program.
Door-to-door: When someone knocks on your door to ask for a donation, the pressure is on. Remember that you are under no obligation to give. Ask for more information and do your research. If you cannot get legitimate information about the charity, odds are it is a scam.
Emails: Think before you click! Phishing emails look similar to messages from legitimate sources and use email addresses that seem familiar. Be cautious with suspicious emails and call a charity directly if you have questions. Don’t use a phone number on the suspicious email; look it up separately.
Some common charity scams in
Vermont include:
Pastor imposter scams: a scammer posing as a local religious leader asks you to donate to a cause using gift cards via email.
Fire or police organization imposter scams: a scammer calls asking for donations to a local or national first responder organization. If you get a suspicious solicitation, hang up the phone and call your local firefighter or police station to get more information.
Disaster scams: Scammers ask you to donate to a charity that provides relief for people who have experience natural disasters, except the charity doesn’t exist or they are impersonating a real charity. Always do your research before giving money or personal information.
Tip #4: Call the Consumer Assistance Program!
If you feel unsure about a charity
solicitation or believe you have donated to a scam, call the Consumer
Assistance Program! The Consumer Assistance Program can help identify warning
signs, provide paid fundraiser information, and help you recover from scams.
