Identity Scam: Phishing Emails ...
Posted: 11/12/04
As you may know, a current problem for online users is identity theft. It is our goal to keep our Members informed in order to avoid such scams. Recently, SBC Internet Services Members have been targeted by such a scam known as "brand spoofing," "carding" or "phishing". This scam is utilized to deceive Internet users into providing sensitive personal information such as a name, address, phone number, date of birth, Social Security number (SSN), or even a bank or credit card account number. These very deceiving, but authentic looking emails that request this sensitive personal information ask recipients to update their credit card information or to avoid having their accounts or services cancelled. Ironically, the message may even offer a service to protect their credit cards from possible fraud. The perpetrators hope that the recipients of their emails will "bite" and provide personal information. The links provided within these unsolicited emails lead to forged, or "spoofed" Web pages that use logos and information from legitimate Web sites with the intention of fooling account owners.
There are some measures you can take to protect yourself from these types of scams:
- Email headers can be forged easily, so don't trust email headers.
- Avoid filling out forms in email messages from unverified senders because you do not know where the data will be sent.
- Many scam artists are making forgeries of companies' sites that look like the real thing. Try not to click on links in an email message unless you are absolutely certain the message and link are legitimate.
- If you go to a link offered in an unsolicited email, check to see if there is an 's' after the http in the address and a lock at the bottom of the screen. Both are indicators that the site is secure.
- Instead of clicking on links provided to you, go to the company's Web site yourself. Once you verify the Web site, then you can verify whether your information is needed.
If you think you may have received a phishing email, you may want to do the following:
- Contact the legitimate company directly to confirm whether the request is from them. Most companies do not ask customers to confirm personal information by sending an email.
- Read the information and tips put out by the Federal Trade Commission about this scam.
- Forward the suspicious email to the Federal Trade Commission's address for unsolicited commercial email: uce@ftc.gov
- Notify the Internet Fraud Complaint Center of the FBI by filing a complaint on their Web site.
Be Informed and Proactive About Your Online Safety and Security:
SBC Internet Services wants you and your family to enjoy the time you spend online. Unfortunately, these scams occur every day and the forgers may choose a variety of different businesses to impersonate. Fake emails have been discovered from banks, mortgage companies and even Internet service providers. Ultimately, you are in the best position to safeguard your personal information from these types of attacks. SBC Internet Services is not able to identify and warn customers about every single instance of phishing or similar such scams. If ever in doubt, take the time to confirm the identity and location of persons requesting your personal information.
As always, we want you to enjoy the time you spend online. Always take safety precautions in safeguarding your private information.
Note: The above information was compiled to help protect your online safety from CNN.com and The Privacy Rights Clearinghouse.
Copyright © 2001, 2002 SBC Southwestern Bell Internet Services. All rights reserved.