Stay safe online this Valentine’s Day!

Looking for love online? The Consumer Assistance Program is here to help you make sure that your personal information and money are secure!

Romance Scams

How it works: The scammer creates a fake profile on a dating site or app. They may also initiate contact through Instagram, Facebook, Words With Friends, or Google Hangouts. Then, the scammer strikes up a relationship with their victim, gains their trust, and maintains sustained contact.

Spotting the scam: The scammer spins a story and asks you to send them personal information or money. They may ask you to send gift cards, mail cash, or wire them money via Western Union or MoneyGram.

What to do: End all communications with the scammer. Block the individual and/or report them to the website or app company. Do not send money or reveal personal information such as: social security number, bank accounts, credit card numbers, photo of your driver’s license, etc. If you have sent money or given the scammer access to sensitive information, call the Consumer Assistance Program.

Source: Federal Trade Commission

For more information about Romance Scams, see our blog post from February 2018.

Sextortion Emails

How it works: You receive an email from an unknown source. The message claims that they know your passwords and have planted malware on your computer. They claim that the malware has captured evidence of all your computer activity – including sensitive photos or visits to adult websites.  They threaten to share this evidence with all of your email or social media contacts. The scammer demands hush money in the form of gift cards, Bitcoin, or wire transfers.

Spotting the scam: The message might look generic and have numerous typos. They demand that you respond quickly, maybe within 24 hours. The passwords they claim to have appear to be old or may be log-in information you use for a website.

What to do: Do not reply to the message. Do not send money or personal information. Change your passwords to ensure your online security, especially if a website you use has recently experienced a data breach. Do not click on any links or attachments on the email. Make sure that your antivirus software is up to date.

Adult Website Pop-Ups

How it works: You are visiting an adult website when a pop-up message appears. The pop-up might be flashing or include sound. The pop-up may claim to be “Windows Support” or state that “Your computer may have a virus!” It is designed to pressure the user into a sense of panic. The message might prompt you to call someone for technical assistance.

Spotting the scam: Real computer tech support specialists will never ask you to call them in this manner. The pop-up may demand immediate action, payment, or prompt you to download something.

What to do: Turn off your computer and disconnect from the internet. Make sure that your antivirus software is up to date and functioning. If necessary, you may decide to seek out assistance from a trusted tech support professional.

Remember: some scammers are betting that topics of romance and sex can be sensitive or even embarrassing. Please don’t let these feelings keep you from calling CAP to get help! The reality is that we regularly hear from consumers who have been affected by these scams. Pick up the phone and give us a call if you feel you may have been scammed: 1-800-649-2424.

Vermont’s Top Scams of 2018

Top 10 Scams of VT 2018

Vermonters filed 5,471 scam reports with the Attorney General’s Consumer Assistance Program (CAP) in 2018 according to the Attorney General’s list of top 10 most commonly reported scams of the year. This amounts to a 4.55% increase in scams from 2017. As new scams emerged, old scams persisted. The IRS scam, which involves scammers claiming to be government officials collecting back taxes, was the most common scam for the fifth year in a row. Vermonters filed 1,429 reports regarding the IRS scam.

Spoofing, when scammers falsify information on Caller ID to appear as though the call comes from a local number, is on the rise. One type of this call is the “reflector” scam, which involves repeated calls coming in from ones’ own number. Another new scam this year reported by more than 100 Vermonters was a threatening email containing an old password and demanding money. The number of social security number phishing scams also increased, rising sharply at the end of the year.

“Scam calls are everywhere and affect everyone,” Attorney General T.J. Donovan said. “I urge Vermonters to stay alert and know the common scams. And please continue to report scams to my office so we can work to educate and protect Vermonters.”

Scam reports total over one-third of all contacts to CAP, making them one of the most common consumer issues affecting Vermonters. To counter the overwhelming number of scams, Attorney General T.J. Donovan, in partnership with the Department of Public Safety, launched a new scam alert system in 2017 to warn Vermonters about new or widespread scams. Vermonters can report a scam or sign up for the Scam Alert system by going to ago.vermont.gov/cap or by calling CAP at 1-800-649-2424.

The top 10 scams of 2018 are:

  1. IRS imposter
  2. Social security number phishing
  3. Computer tech support
  4. Grandchild imposter
  5. Debt collection threats
  6. Spoofing
  7. Reflector (claim to be Microsoft)
  8. Email extortion
  9. Publishers clearinghouse sweepstakes claims
  10. Sweepstakes claims (general)

Information about each scam:

  1. IRS Imposter

 The scam: A phone call claiming you owe “back taxes” or payments to the government allegedly from the IRS or “US Treasury and Legal Affairs.” They may threaten you with arrest or investigation.

How to ID the scam: The IRS will never call you at home to threaten legal action.

What to do: Don’t respond to these callers. If you think you may actually owe back taxes, hang up and contact the IRS directly at 1-800-829-1040.

  1. Social Security Number Phishing

The scam: An attempt to obtain your social security number by posing as the Social Security Administration or a business. They may try to get access to your social security number by telling you it has been compromised or stolen.

How to ID the scam: If social security (or any official agency) wanted to contact you, they would not call to ask for your personal information, especially your social security number, over the phone.

What to do: Be wary responding to unsolicited contacts and never provide personal information to unknown contacts.

  1. Computer Tech Support

The scam: A phone call or pop-up message on your computer claiming to be from Microsoft/Windows or another well-known tech company. They will say that there’s a virus or other problem with your computer and try to persuade you to give them remote access to resolve the issue.

How to ID the scam: Legitimate customer service information usually won’t display as a pop-up. Companies like Microsoft, Apple and Google do not call you to notify you of malware on your computer.

What to do: Never provide remote access to your computer to a stranger or click links from an unknown sender in an e-mail or pop-up message. If you get a call from “tech support,” hang up. Also, be careful when searching for tech support numbers online. Some users have been scammed by calling illegitimate company numbers.

  1. Grandchild Imposter

The scam: Scammers pose as grandchildren and claim to be in serious trouble, such as in prison or at the hospital. They urgently request money in the form of wired funds or prepaid gift cards.

How to ID the scam: Call your grandchild or family members on known phone numbers to ensure your grandchild is safe.

 What to do: Never wire or otherwise send funds unless you can verify the emergency.

  1. Debt Collection Threats

 The scam: Scammers pose as a debt collector or government official and say legal action will be taken against you if you don’t pay them what you owe.

How to ID the scam: If you did owe a debt collector or official agency money, they are not allowed to threaten you with arrest over the phone.

What to do: Hang up the phone, and if they call again let it go to voicemail. If you think you do actually owe money to a debt collector or other agency, make sure you call and check using a trusted number.

  1. Spoofed Calls

 The scam: Spoofed calls come from a number that appears local to Vermont – or even your town. But in reality, the scammer is often calling from overseas, and “spoofing” the number to make it show up on caller ID as a neighbor so you’ll be inclined to answer.

How to ID the scam: The call comes from a number you don’t recognize and/or happens repeatedly at all hours. It may be your own number.

What to do: Ignore the call. Don’t call the number back – chances are the person you are calling has nothing to do with the scam.

  1. Reflector (claim to be Microsoft)

 The scam: Similar to other spoofed calls, these scammers will call you on what appears to be your own number. Upon picking up, the scammer tells you that your Microsoft software or your computer IP address has been compromised. They will ask you to pay them immediately over the phone to protect your computer data.

How to ID the scam: Nobody from Microsoft would call you to say that your data has been breached or your IP address compromised. They especially wouldn’t ask you to pay immediately using Google Play gift cards or your credit card.

What to do: Never give personal or financial information to an unverified person or service that contacts you.

  1. Email Extortion Scams

The scam: You may receive a threatening email from a person you don’t know saying that they have an old password of yours or some other personal information. They use that against you in order to scare you into paying them.

How to ID the scam: Legitimate actors would never threaten you, even if they had access to your old information.

What to do: Never click on links that are in the email because they may give the scammer remote access to your computer or download viruses. Don’t reply to the email or interact with it in any way and delete it from your inbox. If they refer to a valid password, go to your account directly and change your password.

  1. Publisher’s Clearinghouse Sweepstakes Claims 

 The scam: A call, email or letter claiming that a consumer has won big from Publisher’s Clearinghouse and needs to pay a fee to collect winnings. Sometimes this will include a realistic-looking check.

How to ID the scam: If you actually win a major prize from Publisher’s Clearinghouse, they will contact you in person. For smaller prizes (less than $10,000), winners are notified by overnight delivery services (FedEx, UPS), certified mail, or email in the case on online giveaways. They never make phone calls.

What to do: Never pay an upfront fee to receive winnings. If you win something, they will pay you – not the other way around.

  1. Sweepstakes Claims (general)

 The scam:  A phone call or mailing claiming that you won money or a prize but have to make a payment in order to receive it. Sometimes the outreach includes a realistic fake check. The check bounces and no “winnings” are ever dispersed.

How to ID the scam: If it is a well-known organization, try contacting them to verify the information. If it is an unknown organization, chances are the winnings are fake. An unsolicited check in the mail from an unknown sender is usually a scam.

What to do: Never pay upfront to receive winnings. If you win something, they will pay you – not the other way around. No actual contest or sweepstakes would you make you pay first to receive money.

Contributing Writer: Sarah Anders
Content Editor: Crystal Baldwin