Scammers now posing as FBI agents to cybercrime victims

Happy Friday

I was at Long’s this past weekend and while checking out, I overheard a cashier warning a nearby shopper about gift card scams. It sounded like the person had been pressured by a scammer and rushed in, possibly in a panic, to buy gift cards. Credit to Long’s for training their employees to recognize these situations. Warnings like this at the register can go a long way in stopping fraud before it happens.

But it doesn't stop there. The FBI recently issued an announcement warning the public that scammers are impersonating FBI Internet Crime Complaint Center (IC3) employees, offering to "help" fraud victims recover money lost to scammers. Over the last two years the FBI has received hundreds of reports from victims who fell for this tactic. While the reports vary, the tactics should sound familiar.

Some victims received an email or a phone call, while others were approached by social media, forums or text messages. In every case, victims were being directed to an FBI "official" who could help recover their stolen money, but would need some personal information first, such as a social security number, bank account info, credit card number, some crypto... sus!

For example in a recent report submitted to the FBI, scammers were using fake profiles to join groups created for financial fraud victims, pretending to be fellow victim. Next, they would recommend that victims contact "Jaime Quin" Chief Director at the IC3's Recovery Asset Team via Telegram. Contacting "Quin" leads to the next stage of the scam where "he" claims that his mother took her own life because of a scammer (he must have watched The Beekeeper) and that for some Bitcoin, he can help you get your stolen money back. Lies.

The Takeaway

Remember to:

1) Never share sensitive information with individuals you have only met online or over the phone.

2) Never send them money, gift cards, cryptocurrency, Venmo, PayPal or any other form of money.

FBI employees will never contact victims with a phone call, by email, social media, mobile app or public forum or ask for payment to recover stolen funds or refer victims to companies that require payment for fund recovery. Use your head - these scammers are certainly using theirs!

Stay safe out there.

-Attila

PS. f you want to hear more about scams and other IT security topics, all for free, check out our Cyber Secured Podcast series on Apple Podcasts, Spotify, YouTube Podcasts or any other place you listen to podcasts (we're on all of them).

New - the Positivity Box

Tired of hearing about negative, fearful and disturbing cybersecurity news? Me too. You may be surprised to learn that good things happen in IT security. Let's celebrate them!

Earlier this month, the Spanish National Police arrested half a dozen suspects who contacted victims of cryptocurrency investment scams, posing as Europol agents or U.K. lawyers, claiming they could help them recover their lost funds for a fee. It was all of course, a complete scam. Go Spanish National Police!

New Friday Funnies!