Help Stop Scams Now!

Closing out National Consumer Protection week, a week dedicated to understanding consumer rights and avoiding scams, it is fitting to highlight the Stopping Scams Together initiative announced this week by the Vermont Attorney General. The effort encourages our community of Vermonters to identify scams and share success stories of stopping scams together. Many Vermont partners and individuals are already doing the work to understand scams so that they can help in the prevention effort.  

Stopping Scams Together - #StopScamsVT - With trophy graphic on blue-green background
Share stopping scams stories on social.

You can help stop scams by learning about scams and sharing information with your community. To start learning about scams today, visit our blog, sign up for scam alerts, connect on social media (Facebook, Twitter, Instagram, YouTube), watch and share our imposter scam prevention videos, and practice the SLOW method in all consumer transactions. Visit the Scam Prevention Through Awareness and Education page for detailed scam prevention strategies.  

Are you, or do you know someone who has a stopping scams story? Share your story and your good news of stopping a scam today. Learn more on the Stop Scams VT webpage. There you can access a stopping scams graphic that you can use when sharing your stopping scams stories. Or, we will she your story for you, if you fill out our intake form

To keep Vermont safe from scams, we must continue to work together. 

Top 10 Scams of 2022 Released by Attorney General’s Office

BURLINGTON, VT – Reports of scams to the Attorney General’s Consumer Assistance Program totaled 3,685 in 2022. In keeping with the previous year’s trend, a scam claiming that an unauthorized order was placed, or a package is pending delivery, sometimes naming Amazon, took the number one spot on the list, totaling 19 percent of the top scams reported to the Consumer Assistance Program. Following closely behind in the number two spot was the computer tech support scam, where a scam tech company reaches out about concerning viruses or problems with antivirus services, accounting for 18 percent of the top scam reports in 2022.

Vermont's Tope 10 Scams of 2022: Unauthorized order/package delivery, 19%; Computer Tech Support, 18%; Sweepstakes/Lotteries, 14%; Law Enforcement Imposter, 8%; Family Emergency Imposter, 8%; Fake Websites/Online Listings, 8%; Debt Collection, 7%; Deceitful Solicitation, 7%; Identity Theft, 6%; Medicare Card Phishing, 5%.
Vermont’s Top 10 Scams Reported in 2022 by percentage of the Top 10.

The family emergency imposter scam notably climbed the list from number nine to number five in 2022. Within this category, the grandchild imposter scam, where a grandparent receives a call from a scammer claiming to be a distressed grandchild, resulted in 104 scam reports. In May, the Consumer Assistance Program issued a VT Scam Alert to warn Vermonters about the influx of this scam. Again in June, this category of scam gained attention due to scammers demanding cash be handed over to in-person couriers. In an effort to reduce the impact of this troubling scam, the Consumer Assistance Program produced the Avoiding the Family Emergency Scam video as part of the Imposter Scam Prevention Project education campaign.

The most significant development in 2022’s top 10 list was not the emergence of a new scam, but the disappearance of an old one. For the first time in four years, the Social Security phishing scam fell from the top 10 list. This scam, where you receive a phone call, often a robocall, stating there has been criminal or fraudulent activity involving your Social Security number, accounted for only 2 percent of the top scam reports in 2022. The year prior, it was the second most reported scam.

Potential causes for this drop, and an overall decrease in scam reports by 28 percent in 2022 from the previous year’s 5,154 reported, could be linked to an overall reduction in robocalls coming into Vermont.

YouMail’s Robocall Index shows that robocalls in Vermont deceased by 10 percent, or 5.5 million calls, from 2021 to 2022. At the same time, the Attorney General’s Robocall Enforcement Team targeted the Social Security phishing scam by suing TCA VoIP, a California-based telecommunications company that sent thousands—if not millions—of fraudulent robocalls to Vermont residents. The settlement, finalized in December, required TCA VOIP to close its doors and pay a $37,500 financial penalty.

“Scams affect us all—whether you’ve received an annoying scam call or text, been lied to by a scammer, or lost money to a scam. Together, we can fight scams by reporting them to the Consumer Assistance Program and spreading awareness within our communities. My office helps Vermonters through the Consumer Assistance Program, and we will continue to hold companies that profit from scams accountable,” said Attorney General Charity Clark.

The Consumer Assistance Program actively updates scam prevention resources and strategies and manages the CAP Connection blog, keeping Vermonters informed about important consumer issues.

All Vermonters can help join the fight against fraud by learning about scams, scam reporting, and sharing prevention strategies in community. To learn more about scams, go to our website: https://ago.vermont.gov/cap/scam-prevention-through-awareness-and-education.

The Top 10 Scams of 2022:

  1. Unauthorized Order/Package Delivery
  2. Computer Tech Support
  3. Sweepstakes/Lotteries
  4. Law Enforcement Imposter
  5. Family Emergency Imposter
  6. Fake Websites/Online Listings
  7. Debt Collection
  8. Deceitful Solicitations
  9. Identity Theft
  10. Medicare Card Phishing

The scam: You receive an automated phone call, text message, or email claiming that you have been charged for an online order, have an outstanding balance on your account, or are sent an item you did not order. The scammer then instructs you to call a number provided in the scammer’s communications to get a refund or to resolve the charge. At this point, they will ask you to provide your card number to “confirm your account” or prompt you to provide them remote access to your computer. As soon as the scammer has remote access to your device, they can access every single document, file, and transaction you have saved to your device.   

How to spot the scam: Companies will not call with tech support unless you requested that they contact you. If you receive a package that you do not recall ordering, check your statement history to see if you have been charged. Packages without a return address are highly suspicious.

What to do: Hang up the phone immediately and do not call back. If you receive an email or text regarding a package delivery or order that has been made, do not click on any links. Mark the email as “Junk” or “Spam”. Furthermore, never allow remote access to your devices to unknown parties. If you are concerned about charges made to your accounts, log in to your account directly and contact your financial institution. If you receive a package that you did not order, mark it return to sender and give it back to the mail carrier.

The scam: You receive a phone call, pop-up, or email on your computer claiming to be from Norton, Microsoft, Apple, or another well-known tech company. They will make claims such as your electronic device has a virus; your device security subscription has been automatically renewed; or state you have been charged for services you did not receive or ask for. You may be prompted to click a link or call a number to contact. They will try to persuade you to give remote access to your device to fix the issue, and sometimes will even ask for immediate payment for their services.  

How to spot the scam: Legitimate tech support companies do not display communications to their customers as random pop-ups on your device. Tech support will not call you to warn of security incidents, that your account has been renewed for a subscription you do not recognize, and will not send you random links, often shortened, with instructions for you to click on URLs. 

What to do: When contacted about a supposed business relationship, take steps to verify, especially if you do not remember signing up for services. Never click on links or provide remote access to your computer from an unknown email sender or pop-up message on your device’s screen. If you received a pop-up message you cannot click out of, shut down, restart, or unplug your device. If you get a call from “tech support”, hang up. Also, be careful when searching for tech support online. Some users have been scammed by calling inaccurate phone numbers listed online.

The scam: You will be notified by phone, email, or mail that you won a prize or a quantity of money. In some cases, you will even receive a realistic-looking check – but it is fake! You are instructed to pay fees and give your financial and personal information to claim your prize. They often use a legitimate sweepstakes name, like Publishers Clearing House.

How to spot the scam: Legitimate sweepstakes and contest businesses, like Publishers Clearing House and Mega Millions lottery, will contact you in person if you win a major prize. For prizes under $10,000, the notification is done through certified mail by overnight delivery services (FedEx, UPS). They will not contact you by phone, nor require a payment or processing fee to release your prize.

What to do: If it sounds too good to be true, then it’s not true. You don’t need to pay fees or give your financial information in order to claim a prize.

  • Law Enforcement Imposter

The scam: You receive a phone call unexpectedly, claiming to be a police officer, U.S. Marshall, or U.S. Customs and Border Protection. The caller threatens arrest or legal action. When you engage, urgent payment is demanded to make the problem go away. Payment does not solve the supposed problem, and they keep calling. 

How to spot the scam: The police would not warn you ahead of time about a pending warrant or arrest. Using such threatening tactics intend to spike your emotional response.  

What to do: Hang up on all arrest threats and report them. Watch out for similar government imposter scams that purport to be agents of government, including from the Social Security Administration, the Department for Children and Families, the IRS and more.

The scam: Scammers pose to be someone you trust and pretend to be in an emergency to convince you to send them money or will ask you for a favor. These scammers pose as grandchildren, friends, relatives, and close contacts appearing to be someone you know. Scammers impersonate people you love and play on your fears to have you send money urgently. After the initial call, you may be told a lawyer, parole officer or courtroom may contact you for further information.

How to spot the scam: Contacts come in as calls, emails, or online messages. Sometimes it’s someone you haven’t heard from in a while. They require urgency and ask for secrecy. You may be instructed not to speak to your loved one on the phone.

What to do: Take steps to verify. Check out if they really are who they say, even if they sound like a loved one. Slow down your response and contact someone you trust to verify if there is an emergency. You can also choose a “code word” with friends and family to verify the person is who they claim to be. If they don’t know the word, they are not your friend or family member.

The scam: Fake websites or phony listings draw you into a purchase that’s likely too good to be true. Listings may include Facebook Marketplace and Craigslist posts that don’t deliver after payment has been made, cheap pet sales, and websites with steep discounts. This scam can also appear in online rental listings as well as target online sellers.

How to spot the scam: Be skeptical of unrealistic offers. Watch out for requests for money in any form (gift cards, wire transfers, cash) when not made in person. Scammers likely will not want to talk on the phone or meet in person. Heed warnings in user reviews and other online commentary.

What to do: Investigate the person/profile of the seller. If their profile is new and they have no friends and photos, they are likely a scam. Research new websites you are considering doing business with by looking up online reviews and state business registrations, taking note of how long the company has been operating. Perform online searches of the business with “scam” and “complaints” to see if issues generate. Complete your transactions in cash and preferably a safe place in-person.

  • Debt Collection

The scam: Scammers pose as debt collectors and require immediate payment. They may claim to be familiar businesses and threaten utility disconnection or legal action.

How to spot the scam: Collectors are not allowed to threaten you with arrest over debts owed. You can request verification of the debt, which must be sent to you in writing. If you ask them to stop calling you, they are generally required to stop.

What to do: Hang up the phone, and if they call again, let the call go to voicemail. If you think you do actually owe money to a debt collector or other agency, make sure to use trusted contact information when communicating with them. You can also contact the originator of the debt to see if they sold the debt to a debt collection agency, and request they provide you with the name of the debt collector who took on the debt.

  • Deceitful Solicitations

The scam: You receive unsolicited communication with a deceptive promotion. Offers may appear to be from a known business, like Xfinity or DirecTV, and extend unreal offers. Solicitations may purport affiliation with a charitable cause or make low-ball offers on the sale of real estate, urging recipients to complete an enclosed one-page form contract to sign over their home.

How to spot the scam: Beware of unsolicited offers you cannot verify. Be especially weary of offers that ask you to complete the transaction in one sitting.

What to do: Hang up on unknown callers and let calls go to voicemail. When you receive mailings, take extra time to reply by inspecting the details and using your personal contacts as a sounding board. Never give over your payment information or sign on the line when you don’t understand the offer or details.

The scam: Your personal information is compromised and used for another’s financial gain. This can look like receiving a letter about a new account opening, or the discontinuance of bills. You might stop receiving legitimate bills and other mail or start to get bills for products and services that you didn’t arrange.

How to spot the scam: Beware of communications denoting unexpected bank transactions, credit card or benefit applications. If your expected bills are not showing up, or you are receiving correspondence in someone else’s name, report it.

What to do: Don’t give out personal information, such as your Social Security number, passwords, personal identification numbers, and financial accounts. Review your credit reports at least once a year. (You can access your credit report for free). Carefully check bank account statements and benefits to verify transactions. Shred documents and expired credit cards before you throw them out. Verify security breach notification letters received on the Attorney General’s website. If your information has been stolen by an identity thief, take identity theft protection steps.

The scam: Scammers will call, often with a live call and from a spoofed caller ID number, and pose as Medicare representatives to gain your personal information and money. These scams are most frequent during times of open enrollment but can occur year-round. The scammers will state they need your Medicare card number or Social Security number to keep your coverage active and verify medical information. The calls may also claim that coverage is expiring or in need of renewal. Scammers will also ask if you received a “new Medicare card.”

How to spot the scam: In general, Medicare cards do not expire. Unless you have called Medicare using the 800 number on the back of your card and requested a callback, Medicare will not call you. If a phone call is required, you would receive a letter from the Social Security Administration to schedule a call. Medicare representatives will never call you in an attempt to verify your information, sell you products, tell you that your coverage is expiring, or to issue you a new card.

What to do: Never provide your Medicare number or other personal information and payment to unknown callers. In Vermont, representatives of the State Health Insurance Assistance Program (SHIP) at 1-800-642-5119 through local Area Agencies on Aging can help address Medicare questions. Other questions and concerns about Medicare coverage can be directed to Medicare at 1-800-MEDICARE.

Medicare Open Enrollment Scammer, or the Real Deal?

By Crystal Baldwin

It happened last year, and again this year. During Medicare Open Enrollment season, a concerned elder in my life called to ask if the person soliciting them was a scammer or an actual enrollment representative. The truth is, aside from highlighting some key identifiers of scams, it can be hard to tell. The scammers are so good at acting as if they are Medicare enrollment professionals, that it is enormously difficult to differentiate them from the real deal. The scams even spoof Medicare’s phone number, making the caller ID appear to be Medicare when it is not.

Medicare Open Enrollment Scam Alert

The primary difference between a telemarketer and a scammer is whether the caller is honoring the Federal Do Not Call Registry (DNC). If you ever put you number on the DNC by calling 1-888-382-1222 or by going online at donotcall.gov, you should not be receiving calls from solicitors—Even during Medicare open enrollment. You likely should not be receiving robocalls of this nature either.

What provider can call you when you are on the DNC?

Businesses with whom you have a customer relationship within the past six months, such as your Medicare provider, and other you have requested to call you. Yes, that’s it. No other unrequested calls are allowed.

More on Robocalls:

The same goes for those annoying automated/computer/robot calls. Except with these, unless you expressly opted into receiving robocalls in writing, you should not be receiving these calls either.

What if the call IS my Medicare provider, or I am interested in changing plans during open enrollment?

This is where it gets tricky. It is difficult to know whether your provider is calling instead of a scammer, especially because scammers copycat caller ID numbers. The only way to be sure is to take steps to verify by hanging up on the caller and calling back a number you know to be valid.

If you are looking to change enrollment during the Medicare open enrollment period, do so on your terms.

If you are concerned about your Medicare plan or need to report known Medicare provider fraud/abuse, contact Medicare directly at 1-800-MEDICARE (1-800-633-4227).

Please help the Consumer Assistance Program (CAP) stop Medicare scams by sharing this information with someone you know. If you have questions about this scam, or have provided personal information to the scammers, please contact CAP at 1-800-649-2424 or go online to ago.vermont.gov/cap.


Resources:

Federal Trade Commission Do Not Call Registry
Medicare

Vermont Business Imposter Email Scams Are on the Rise

BURLINGTON – The Attorney General’s Consumer Assistance Program (CAP) is warning Vermont business owners, non-profits, and employees about an uptick in business imposter email scams. In the last two months, CAP has received five reports of business imposter email scams resulting in a total loss of $210,799. Scammers are impersonating employees or familiar business representatives’ emails and contacting company bookkeepers and office administrators asking them to change bank account information, direct deposit information, or asking them to write checks. By impersonating an employee’s email address or creating a fake personal email for the employee, scammers can steal money from businesses and steal paychecks from employees.

$210,799 Business Imposter Loss in Vermont in July and August 2022
Business Imposter Loss – Vermont – July and August 2022

            Vermont businesses and non-profits should always verify email addresses and speak directly with an employee or business representative in person or via phone when sending money or changing payment information. Oftentimes, scammers will use an email address that only slightly varies from an employee’s true email. Be wary of any email coming from outside your company’s domain. CAP urges business owners to educate their entire company on scams that target businesses.

              Here are ways in which businesses and non-profits can better protect themselves and their employees from scams:

  1. Cybersecurity assessment: check internal controls and resolve vulnerabilities.
  2. Train staff regularly in cybersecurity and funds management protocols.
  3. Enlist internal protocols to verify the transfer of funds by engaging multiple staff members and voice verification, using trusted contact information.
  4. Help clientele identify common scams within the industry.
  5. The SLOW method can serve as a helpful starting point, encouraging parties to take their time during urgent transactions and connect with a trusted party like CAP.
  6. Never send money to parties you cannot verify.

            To learn more about how to protect your business from these scams, watch CAP’s Avoiding the Business Imposter Email Scam Video and review the steps to verify at https://ago.vermont.gov/cap/business-imposter/.

Avoiding the Business Imposter Email Scam

            If you or someone you know has lost money to this scam, contact law enforcement and report the scam to CAP online or call 1-800-649-2424 and speak to our Small Business Advocate.

When Computer Tech Support is a Scam 

By Crystal Baldwin

Computer tech support scammers are imposters that immediately gain trust by using well-known company names like Norton, Microsoft, or Apple, or by expressing a desire to help fix a daunting problem. Ranking third among the scams with the highest dollar loss, $695,240, in Vermont in 2021, this scam is historically successful due to its ability to establish a sense of familiarity and legitimacy garnered by the scammer’s suggested affiliation with a company and their technical prowess. 

Scammers claim an account renewal payment has been processed or antivirus protection is needed. May claim to be Norton, Microsoft, or Apple. Contact CAP: 1-800-649-2424 ago.vermont.gov/cap
Computer Tech Support Scam Alert

In the computer tech support scam, you are contacted by phone, pop-up or email on your computer. The message spikes your anxiety and drives your response to be reactive. Tech scammers may claim, “There is a virus on your device,” “Your security subscription has been automatically renewed,” or “You have been charged for a year’s subscription of antivirus.” In the communication, a link or phone number is included, which you are urged to contact immediately to rectify the issue.  

While in reaction mode, you call, hoping to resolve the issue. During the call, the scammer will try to persuade you to give remote access to your device to fix the problem, and sometimes will ask for immediate payment for their services. In scenarios where a refund is requested, they facilitate what appears to be a transfer of funds by walking you through steps to log into your own online bank account. Utilizing their program and ability to freely roam on your computer while they have remote access, they disguise the origin of the funds transfer, which is in actuality a transfer of funds between your own bank accounts.  

Tech support scammers further escalate the call, using high tones of voice, demands of urgency, and call on your empathy to help solve a problem they created. The scammer’s tactics pull the recipient of the scam further into reaction mode. While in reaction mode, responses are based on impulse and with little additional collective data. Once a person has more information, through the process of asking questions and seeking out resources, the ability to think critically and problem-solve the issue comes back online.  

For this scam and consumer transactions generally, you can apply the SLOW method to disrupt the unpredictable reaction response by substituting a planned response instead. At the onset of the first communication, start with SLOW as a strategy to help you take steps to verify. 

Slow down! Log the Contact. Make One Call to a primary contact. Who cares? Reach out to CAP at 1-800-649-2424.
Stop scams with SLOW

S – Slow down – scammers pressure you to react urgently. Don’t! Instead, take a breath and find your calm by doing what is immediately natural to you.   

L – Log the contact – write down the information of the email, or phone call. If they are on the phone, you can tell them you will call them back, even if you don’t intend to. Then, disengage. 

O – One call – make one call to a primary contact, such as a friend or family member and discuss the incident. It works best if you have pre-established who this will be; someone you can trust no matter what. The contact is a sounding board, who will ask questions and help you get curious about the interaction. Some questions might include:  

How do I know the contact is who they say they are? –What proof is there? Where can I verify their contact information that is not part of the communication I received? –Was my credit card charged? What other parties can I contact that might know more about this? How can I be sure this is not a scam? 

W – Who cares? Contact another party or organization in your life who cares. The Consumer Assistance Program (CAP) can help you identify scams and report them: 1-800-649-2424 and ago.vermont.gov/cap 

Know what to watch out for in computer tech scams, so you can avoid them: 

  • Be wary of pop-ups and unexpected emails/phone calls.  
  • Watch out for security warnings and account renewals. 
  • Don’t trust contact information, like links, URLs and phone numbers provided in unexpected emails. 
  • Never click on links or provide remote access to your computer from an unknown email or source. 
  • If you received an email or pop-up message, you cannot click out of, don’t engage. Instead, shut down, restart, or unplug your device. 
  • If you get a call from “tech support,” hang up.  
  • Be careful when searching for tech support online. Some users have been scammed by calling illegitimate phone numbers listed on the internet.  

In the age of the internet and free flowing technology scammers hope to capitalize at every turn. You can prevent scams by practicing SLOW in all your consumer transactions now—and commit to being a primary contact for others. Everyone can help stop scams by following a scam prevention plan and sharing scam knowledge with your community.